topic ASA with CSC-SSM Services required in Network Security

ASA with CSC-SSM Services required

jmprats — Mon, 11 Mar 2019 17:01:30 GMT

In the data sheet of the CSC-SSM says,: ” Two services are required for the effective operation of the CSC-SSM: Software update service and Cisco SMARTnet”. I have about 100 users so I think I need:

ASA-SSM-CSC-10-K9 (the CSC-SSM module for ASA)

ASA-CSC10-PLUS= (Adds URL and Content Filtering, Anti-Phishing, Anti-Spam)

ASA-CSC10-USR-100= 100-User License -Total Users

This is the initial investment, but I suppose I have to pay every year the two services (Smartnet and Software update services). For example:

CON-SNT-ASCS10K9 (ASA-SSM-CSC-10-K9 SMARTnet 8x5xNBD)

But what is the part number for ordering the software update service?

Is this all right?

Thanks

Re: ASA with CSC-SSM Services required

Kureli Sankar — Tue, 26 Jan 2010 13:32:19 GMT

Every year you would have to order a renewal license for the CSC module. Otherwise if your plus license expirers it will not do URL filtering or detect spam in the e-mail.

Here are the part numbers for that for 1 and 2 year renewal

ASA-CSC10-100U-1Y ASA 5500 CSC-SSM-10 100-User License Only Renewal (1-year)

ASA-CSC10-100P-1Y ASA 5500 CSC-SSM-10 100-User Plus Lic. Only Renewal (1-yr)

ASA-CSC10-100UP-1Y ASA 5500 CSC-SSM-10 100-User w/ Plus Lic. Renewal (1-year)

ASA-CSC10-100U-2Y ASA 5500 CSC-SSM-10 100-User License Only Renewal (2-year)

ASA-CSC10-100P-2Y ASA 5500 CSC-SSM-10 100-User Plus Lic. Only Renewal (2-yr)

ASA-CSC10-100UP-2Y ASA 5500 CSC-SSM-10 100-User w/ Plus Lic. Renewal (2-year)

-KS

Re: ASA with CSC-SSM Services required

jmprats — Tue, 26 Jan 2010 13:43:12 GMT

ASA-CSC10-100U-1Y + ASA-CSC10-100P-1Y = ASA-CSC10-100UP-1Y ?

So in my case, for 100 users with antivirus and antispam? I need every year

- ASA-CSC10-100UP-1Y and,
- CON-SNT-ASCS10K9 (ASA-SSM-CSC-10-K9 SMARTnet 8x5xNBD)

Is this correct?

Thanks

Re: ASA with CSC-SSM Services required

Kureli Sankar — Tue, 26 Jan 2010 13:55:00 GMT

That is correct.

-KS

Re: ASA with CSC-SSM Services required

jmprats — Wed, 27 Jan 2010 08:30:25 GMT

Thanks

Re: ASA with CSC-SSM Services required

ifpindia_cisco — Mon, 01 Nov 2010 10:27:32 GMT

hi,

this thread answered my quest in understanding the part numbers, particularly with Plus license renewal (w/ plus license description is so vague). Thanks a lot. I have a ASA 5510 with CSC 100 users module.

my question is: part no: CON-SNT-ASCS10K9 covers the Cisco ASA 5510 "and" the CSC SSM module or just the CSC SSM module?

my reseller had written this long description for smartnet and I don't understand it at all. if you can lend me a hand here, it would be great.

SMARTNET 8X5XNBD ASA 5510 Appl w/ CSC10,SW,50 Usr AV/Sp,Part no
CON-SNT-AS1C10K9,SMARTNET 8X5XNBD ASA CSC SSM-10 included w/ ASA Syst
part no CON-SNT-ASCINC10

thanks in advance

balu

Re: ASA with CSC-SSM Services required

ifpindia_cisco — Tue, 02 Nov 2010 12:02:08 GMT

hi,

my question is: part no: CON-SNT-ASCS10K9 covers the Cisco ASA 5510 "and" the CSC SSM module or just the CSC SSM module?

my reseller had written this long description for smartnet and I don't understand it at all. if you can lend me a hand here, it would be great.

SMARTNET 8X5XNBD ASA 5510 Appl w/ CSC10,SW,50 Usr AV/Sp,Part no
CON-SNT-AS1C10K9,SMARTNET 8X5XNBD ASA CSC SSM-10 included w/ ASA Syst
part no CON-SNT-ASCINC10

thanks in advance

balu

ASA with CSC-SSM Services required

Muhammad Anser Khan — Tue, 04 Mar 2014 11:55:36 GMT

Dear Poonguzhali,

I have exiting ASA5520-K9 with CSM-SSM-10 module. The support is expired for the ASA last year. I need CSC-SSM-10 plus license for 50 users. I am planning to order the below:

1- CON-SNT-AS2BUNK9 (SMARTNET 8X5XNBD ASA Appliance)

2- CON-SNT-ASCS10K9 (SMARTNET 8X5XNBD ASA Content Sec SSM-10 w/ 50 Usr AV)

3- L-ASACSC10-50UP1Y (ASA 5500 CSC-SSM-10 50-User w/ Plus Lic. Renewal (1-year))

4- L-ASA-CSC10-PLUS= ASA 5500 CSC SSM10 Plus Lic. (Spam/URL/Phish, 1Yr Subscript))

Kindly confirm point # 4 that do I need (4 - L-ASA-CSC10-PLUS=) or not. Below are some useful outputs:

DLMKSA-ASA# show version

Cisco Adaptive Security Appliance Software Version 8.4(2)

Device Manager Version 6.4(5)

Compiled on Wed 15-Jun-11 18:17 by builders

System image file is "disk0:/asa842-k8.bin"

Config file at boot was "startup-config"

DLMKSA-ASA up 7 days 0 hours

Hardware: ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHz

Internal ATA Compact Flash, 256MB

BIOS Flash M50FW016 @ 0xfff00000, 2048KB

Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)

Boot microcode : CN1000-MC-BOOT-2.00

SSL/IKE microcode : CNLite-MC-SSLm-PLUS-2.03

IPSec microcode : CNlite-MC-IPSECm-MAIN-2.06

Number of accelerators: 1

0: Ext: GigabitEthernet0/0 : address is 4055.3981.cedc, irq 9

1: Ext: GigabitEthernet0/1 : address is 4055.3981.cedd, irq 9

2: Ext: GigabitEthernet0/2 : address is 4055.3981.cede, irq 9

3: Ext: GigabitEthernet0/3 : address is 4055.3981.cedf, irq 9

4: Ext: Management0/0 : address is 4055.3981.cee0, irq 11

5: Int: Internal-Data0/0 : address is 0000.0001.0002, irq 11

6: Int: Internal-Control0/0 : address is 0000.0001.0001, irq 5

Licensed features for this platform:

Maximum Physical Interfaces : Unlimited perpetual

Maximum VLANs : 150 perpetual

Inside Hosts : Unlimited perpetual

Failover : Active/Active perpetual

VPN-DES : Enabled perpetual

VPN-3DES-AES : Enabled perpetual

Security Contexts : 2 perpetual

GTP/GPRS : Disabled perpetual

AnyConnect Premium Peers : 2 perpetual

AnyConnect Essentials : Disabled perpetual

Other VPN Peers : 750 perpetual

Total VPN Peers : 750 perpetual

Shared License : Disabled perpetual

AnyConnect for Mobile : Disabled perpetual

AnyConnect for Cisco VPN Phone : Disabled perpetual

Advanced Endpoint Assessment : Disabled perpetual

UC Phone Proxy Sessions : 2 perpetual

Total UC Proxy Sessions : 2 perpetual

Botnet Traffic Filter : Disabled perpetual

Intercompany Media Engine : Disabled perpetual

This platform has an ASA 5520 VPN Plus license.

Serial Number: JMX1xxxx3

Running Permanent Activation Key: 0x62xxx79 0x444ec782 0x4xxxxc 0xbbc8c8x0x4b27xxxbd

Configuration register is 0x1

Configuration last modified by enable_15 at 20:15:03.339 AST Mon Feb 24 2014

DLMKSA-ASA#

DLMKSA-ASA# show module

Mod Card Type Model Serial No.

--- -------------------------------------------- ------------------ -----------

0 ASA 5520 Adaptive Security Appliance ASA5520 JMX1xxxxx63

1 ASA 5500 Series Content Security Services Mo ASA-SSM-CSC-10-K9 JAF1xxxxCJN

Mod MAC Address Range Hw Version Fw Version Sw Version

--- --------------------------------- ------------ ------------ ---------------

0 4055.39xxx1.cedc to 4055.xxx81.cee0 2.0 1.0(11)5 8.4(2)

1 e8b7.4xxx9.40f3 to e8b7.4xxx.40f3 1.0 1.0(11)5 CSC SSM 6.6.1125.0

Mod SSM Application Name Status SSM Application Version

--- ------------------------------ ---------------- --------------------------

1 CSC SSM Up 6.6.1125.0

Mod Status Data Plane Status Compatibility

--- ------------------ --------------------- -------------

0 Up Sys Not Applicable

1 Up Up

DLMKSA-ASA#

DLMKSA-ASA# show module 1 details

Getting details from the Service Module, please wait...

ASA 5500 Series Content Security Services Module-10

Model: ASA-SSM-CSC-10-K9

Hardware version: 1.0

Serial Number: JAFxxxxxCJN

Firmware version: 1.0(11)5

Software version: CSC SSM 6.6.1125.0

MAC Address Range: e8b7.4869.40f3 to e8b7.4869.40f3

App. name: CSC SSM

App. Status: Up

App. Status Desc: CSC SSM scan services are available

App. version: 6.6.1125.0

Data plane Status: Up

Status: Up

HTTP Service: Up

HTTPS Service: Up

Mail Service: Up

FTP Service: Up

Activated: Yes

Mgmt IP addr: 192.111.200.62

Mgmt web port: 8443

Peer IP addr:

DLMKSA-ASA#

DLMKSA-ASA# show module 0 details

ASA 5520 Adaptive Security Appliance

Model: ASA5520

Hardware version: 2.0

Serial Number: JMX1xxxxx63

Firmware version: 1.0(11)5

Software version: 8.4(2)

MAC Address Range: 4055.3xxx1.cedc to 4055.3xxx1.cee0

Data plane Status: Not Applicable

Status: Up Sys

DLMKSA-ASA#

Regards,

Anser