Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
New Member

IPS module or CSC module

Hello all. I have a customer that wants to purchase an ASA 5510 security plus to terminate client VPN access for an external support team. The customer claims to want URL content filtering/proxy which leads me to suggest a CSC SSM 20 plus module. But upon further conversation, he mentioned wanting IPS. In this case, the customer does not seem to know the difference between the URL content filter/proxy and the IPS and uses both terms interchangably.

1. What would you suggest in your expert opinion would be the best module to get for this customer? IPS or CSC

2. If I go with the CSC module, where can I find good documentation on how to configure it and get it up to date?

3. does the CSC module provide any web proxy functionality? I don't think so but I just have to ask

Thanks,

Everyone's tags (3)
1 ACCEPTED SOLUTION

Accepted Solutions
VIP Purple

IPS module or CSC module

I would go with the IPS. The CSC-functionality is available on nearly every security-proxy you can buy. And the proxy will run fine in a VM (for most use-cases).

If you decide to buy IPS, then think about using the new 5500-X-series. There you don't need a hardware-module, the IPS ist activated in software by a license. A 5515-X with IPS shouldn't be much more expensive then a 5510SecPlus with AIP-SSM.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

3 REPLIES
VIP Purple

IPS module or CSC module

I would go with the IPS. The CSC-functionality is available on nearly every security-proxy you can buy. And the proxy will run fine in a VM (for most use-cases).

If you decide to buy IPS, then think about using the new 5500-X-series. There you don't need a hardware-module, the IPS ist activated in software by a license. A 5515-X with IPS shouldn't be much more expensive then a 5510SecPlus with AIP-SSM.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

New Member

IPS module or CSC module

thx Karsten. with the 5515-X can CSC also be activated by aquiring the software license- no additional hardware? Can both IPS and CSC-Plus run concurrently?

VIP Purple

IPS module or CSC module

No, as of today thats only possible for IPS. And I wouldn't wait for a CSC-software-module.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

626
Views
0
Helpful
3
Replies
CreatePlease to create content