how to configure ASA 5510 CSC Anti x edition ?

SUNUTECH · ‎12-14-2011

Dear all,

how to configure ASA 5510 anti X edition ? Can I have a link explaining the configuration step by step ?

Thanks .

Julio Carvajal · ‎12-14-2011

Hello,

I hope I understood the question ( how to configure the ASA with to inspect traffic with the CSC module)

On the ASA all you need to do is to send the traffic that will be inspected by the CSC module ( by the way the CSC wil inspect only http, ftp, smtp and pop3; running version 6.6 will allow you to inspect HTTPS traffic as well.

As per you request I will provide you some of the links I used while I was learning of this excelent device:

Basic configuration of the CSC

http://www.cisco.com/en/US/docs/security/csc/csc6.1.1569.0/administration/guide/cscappa.pdf

Sending traffic to the CSC module (using ASDM and CLI)

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808dea62.shtml

The troubleshooting guide:

http://www.cisco.com/en/US/docs/security/csc/csc63/administration/guide/csc8.html#wp1147829

Please rate helpful posts.

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Janardhan Meesala · ‎12-14-2011

Hi,

Generally ASA with CSC will support HTTP,FTP,SMTP,POP3 Scaning and Filtering.

From version ASA IOS 8.4.2 and CSC 6.6.1125.0, it will support HTTPS filtering also.

But here one limitation is that Https filtering will not support earlier versions of internet explorer 9, i.e if you want HTTPS filtering you must use Internet explorer 9 or after versions( As you know that Windows XP machines won't support internet explorer 9). But with firefox HTTPS filtering will support from versions 4.

For your reference use below 8.4.2 release guide

http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html

Release notes for CSC version 6.6.1125

http://www.cisco.com/en/US/docs/security/csc/csc66/release/notes/cscrn66.pdf