Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
New Member

CSC SSM stops after update with expired plus license?

Hi folks!


I updated the software on a CSC SSM 10 which had an expired Plus license and now it does not work anymore even though it still has a valid Base license (expires on 01/03/2016).


This is the output of the "sho modu 1 detail" command on the ASA:


Getting details from the Service Module, please wait...

ASA 5500 Series Content Security Services Module-10

Model:              ASA-SSM-CSC-10

Hardware version:   1.0

Serial Number:      xxxxxxxxx

Firmware version:   1.0(11)2

Software version:   CSC SSM 6.6.1125.0.1145

MAC Address Range:  001d.454c.xxxx to 001d.454c.xxxx

App. name:          CSC SSM

App. Status:        Down

App. Status Desc:   CSC SSM scan services are not available

App. version:       6.6.1125.0.1145

Data plane Status:  Up

Status:             Up

HTTP Service:       Up

HTTPS Service:      Up

Mail Service:       Down

FTP  Service:       Up

Activated:          Yes

Mgmt IP addr:       xx.xx.xx.xx

Mgmt web port:      8443

Peer IP addr:       <not enabled>


And the ASA logs this error:

3 Mar 20 2014 17:50:07 xxxxxxx 62129 80 TCP flow from inside:xxxxxxxx/62129 to outside:xx.xx.xx.xx/80 is skipped because Content Security and Control card has failed


This is the error when I manualy want to update the signatures:

The Plus License Maintenance Agreement must be renewed before the product can be updated. Renew your Trend Micro Maintenance Agreement for Anti-Spam, then try again.


Is there some way to remove the expired Plus activation and go on just using the Base license?


Kind regards,



P.s Although we pay every year for updates, tac will not help because the hardware itself is not under contract. What? angry

CreatePlease to create content