topic Re: CSC-SSM Module Problem in Network Security

CSC-SSM Module Problem

ANGELO DE MASI — Mon, 11 Mar 2019 16:12:25 GMT

Hi, I installed a CSC-SSM module on ASA 5510. After policy services have been enabled, services works well for a few minutes, after that the cpu usage's module rise to 100% and all http traffic is wholy blocked, till the cpu usage go down.

This happens very frequently and traffic stay blocked for such a long time that it makes the csc-ssm module unusable. It's disabled right now.

ASA version is 8.0(4)and CSC-Module version is 6.3.1172.0.

Please, can you give me any suggestion?

thank you in advance

regards

Angelo

Re: CSC-SSM Module Problem

Kureli Sankar — Sun, 06 Sep 2009 02:29:07 GMT

Pls. double check and make sure you are not logging http in debug level under the Trend GUI. This may cause cpu spikes.

You are running the latest code.

Also, make sure http inspection is not enabled. (sh run policy-map)

Re: CSC-SSM Module Problem

ANGELO DE MASI — Sun, 06 Sep 2009 19:12:35 GMT

Hi, Thank you for your post.

I checked http debug level and http inspection but both are not enabled.

Any other suggestion?

thanks in advance.

regards

angelo

Re: CSC-SSM Module Problem

Kureli Sankar — Sun, 06 Sep 2009 20:18:22 GMT

You can try to disable url filtering under the Trend GUI if you have it enabled to see if that is causing high CPU.

Besides that, you can try to re-image the module.

Pls. follow the below link:

http://supportwiki.cisco.com/ViewWiki/index.php/Re-imaging_the_CSC-SSM#Step_4:_Re-imaging_the_CSC_module

Make sure to save your activation keys and configuration before re-imaging.

Re: CSC-SSM Module Problem

ANGELO DE MASI — Mon, 07 Sep 2009 07:45:56 GMT

Hi,

only just disabling global policy service matching traffic diverted to module,high CPU usage doesn't happen.

Do you mean reimaging to dowgrade to previous release 6.2.1599.6 ???

bye

angelo

Re: CSC-SSM Module Problem

Kureli Sankar — Tue, 08 Sep 2009 18:25:27 GMT

Removing the service-policy doesn't send any traffic to the CSC to be scanned at all.

Pls. try to re-image the module to 6.2.1599.0.bin and then upgrade to 6.2.1599.6.pkg (from the GUI) and see the problem goes away.

Re: CSC-SSM Module Problem

ANGELO DE MASI — Wed, 09 Sep 2009 05:29:23 GMT

Yes, I've reimaged the module to 6.2.1599.6 version and the problem does't appear anymore. It means the new version is bugeg. Isn't it?

Many thanks

Regards

Angelo

Re: CSC-SSM Module Problem

Kureli Sankar — Wed, 09 Sep 2009 11:31:58 GMT

Very glad to hear that. There are a few known issues in the new code. I have not run into high CPU issue with the new code personally. Pls. stay at 6.2.1599.6.pkg for now until you see another release in the 6.3.11xx code.

Re: CSC-SSM Module Problem

ANGELO DE MASI — Wed, 09 Sep 2009 11:42:09 GMT

Ok I will do so. Thanks for your collaboration.

Regards

angelo

Re: CSC-SSM Module Problem

tmobrien — Thu, 15 Jul 2010 21:00:32 GMT

We are having a similar issue with 6.3.1172.0 running to 100% CPU.

Do you have a current link to the downgrade procedure?

Re: CSC-SSM Module Problem

Panos Kampanakis — Thu, 15 Jul 2010 21:59:07 GMT

The 6.3.1172.0 will run at 100% if you have debug logs enabled on it, it is a known problem.

You can go ro 6.3.1172.3.pkg using the procedure described here https://supportforums.cisco.com/docs/DOC-1323#Step_7_Upgrading_to_the_latest_PKG_file

Please rate helpful posts.