VPN Traffic scanned by CSC

[remco.gussen]

Site2Ste VPN's are configured to branche offices. Internet traffic is going through the VPN to the main office. Can the CSC module scan this traffic ?

Regards

Remco

[Farrukh Haroon · Accepted solution]

If the traffic is decrypted before/ON the ASA, then yes.

Regards

Farrukh

[remco.gussen]

The VPN's are connected by the Outside interface. Can you create a rule on the firewall / CSC module to send traffic from the outside interface (VPN's) to the outside interface for scanning ?

[Farrukh Haroon]

Please use this link to initalize and send traffic to the CSM, you can use the traffic in your ACL to match the post decrypted IPs.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808dea62.shtml#diag

Regards

Farrukh