csc-ssm module configuration

[Harish Balakrishnan]

Hello Experts

I have setup CSC-SSM module in ASA and configured policy to divert traffic to module which is working fine. I am facing 2 issues

1. If I enable web reputation enable on the module, the none of the web sites are working

2. If I am enabling  scanning for SMTP for incoming and outgoing, mails are not going out/in

If I am disabling the above features, everything is normal

Any thoughts..

Regards

Harish,

[Julio Carvajal]

Hello Harish:

1-If I enable web reputation enable on the module, the none of the web sites are working?

     Are you sure is due to the web reputation? Are you getting a message like this:

?????

2- If I am enabling  scanning for SMTP for incoming and outgoing, mails are not going out/in?

     CSC design recommendations state that only inbound traffic to your SMTP server should be inspected by CSC.

     You should not inspect your users outbound SMTP traffic.

Regards,

Julio

[Harish Balakrishnan]

Thanks for the reply..

Sent from IPhone

[Harish Balakrishnan]

Thanks for the mail..i am not getting any message for just like trying for sometime and time out...so for smtp we need to create another policy and apply to outside interface ? And one more query is it mandatory to have csc module to internet access to these funtions to work properly?

Sent from IPhone

[Julio Carvajal · Accepted solution]

Hello Harish,

I am not getting any message for just like trying for sometime and time out!

Hmm, Are you also inspecting the http protocol, what else do you have set up for the HTTP protocol?

for smtp we need to create another policy and apply to outside interface?

No, I mean on the SMTP scanning tab only play with the Outbound Mail, so disable the inbound inspection, then give it a try and let me know.

And one more query is it mandatory to have csc module to internet access to these funtions to work properly?

Yes, because the CSC module got to have a communication with the Trend Micro server in order to fulfill his own database with the most accurate information regarding malware,viruses,worms,etc.

So your CSC NEEDS internet access.

Regards,

Do rate helpful posts!!

Julio

[Harish Balakrishnan]

Hello Julio,

After having internet connectivity for CSC, the issue has been resolved.

Thanks for the support

Harish