Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 

csc-ssm module configuration

Hello Experts

I have setup CSC-SSM module in ASA and configured policy to divert traffic to module which is working fine. I am facing 2 issues

1. If I enable web reputation enable on the module, the none of the web sites are working

2. If I am enabling  scanning for SMTP for incoming and outgoing, mails are not going out/in

If I am disabling the above features, everything is normal

Any thoughts..

Regards

Harish,

1 ACCEPTED SOLUTION

Accepted Solutions

Re: csc-ssm module configuration

Hello Harish,

I am not getting any message for just like trying for sometime and time out!

Hmm, Are you also inspecting the http protocol, what else do you have set up for the HTTP protocol?

for smtp we need to create another policy and apply to outside interface?

No, I mean on the SMTP scanning tab only play with the Outbound Mail, so disable the inbound inspection, then give it a try and let me know.

And one more query is it mandatory to have csc module to internet access to these funtions to work properly?

Yes, because the CSC module got to have a communication with the Trend Micro server in order to fulfill his own database with the most accurate information regarding malware,viruses,worms,etc.

So your CSC NEEDS internet access.

Regards,

Do rate helpful posts!!

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
5 REPLIES

csc-ssm module configuration

Hello Harish:

1-If I enable web reputation enable on the module, the none of the web sites are working?

     Are you sure is due to the web reputation? Are you getting a message like this:

blocksite.jpg

?????

2- If I am enabling  scanning for SMTP for incoming and outgoing, mails are not going out/in?

     CSC design recommendations state that only inbound traffic to your SMTP server should be inspected by CSC.

     You should not inspect your users outbound SMTP traffic.

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Re: csc-ssm module configuration

Thanks for the reply..

Sent from IPhone

Re: csc-ssm module configuration

Thanks for the mail..i am not getting any message for just like trying for sometime and time out...so for smtp we need to create another policy and apply to outside interface ? And one more query is it mandatory to have csc module to internet access to these funtions to work properly?

Sent from IPhone

Re: csc-ssm module configuration

Hello Harish,

I am not getting any message for just like trying for sometime and time out!

Hmm, Are you also inspecting the http protocol, what else do you have set up for the HTTP protocol?

for smtp we need to create another policy and apply to outside interface?

No, I mean on the SMTP scanning tab only play with the Outbound Mail, so disable the inbound inspection, then give it a try and let me know.

And one more query is it mandatory to have csc module to internet access to these funtions to work properly?

Yes, because the CSC module got to have a communication with the Trend Micro server in order to fulfill his own database with the most accurate information regarding malware,viruses,worms,etc.

So your CSC NEEDS internet access.

Regards,

Do rate helpful posts!!

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Re: csc-ssm module configuration

Hello Julio,

After having internet connectivity for CSC, the issue has been resolved.

Thanks for the support

Harish

400
Views
0
Helpful
5
Replies
CreatePlease to create content