ASA with CSC-SSM issue

[skmdimran]

Dear Concern,

I have installed CSC-SSM-10 on cisco ASA 5520.

I am facing two problems

Problem 1 : When I send traffic from ASA to SSM module then internet connection becomes slow and sometimes internet session disconnected.

2. When I try to manual update then following erros shows please see attachment .

Please note that I can ping internet from CSC module. please suggest me to resolve these problems.

Regards

Imran

[mirober2]

Hi Imran,

It looks like your CSC module doesn't have a working connection to the Internet. Please confirm the following:

1. There is an Ethernet cable connected to the CSC's management port

2. The network settings on the CSC are correct (IP address, netmask, gateway, and DNS servers)

The CSC module must be able to access the Internet for it to work properly.

-Mike

[skmdimran]

Dear Concern,

Thanks for your reply.

As per your query please note that

• •1.       CSC Management port is connected to DMZ swith and ASA 5520 DMZ interface is also connected to dmz switch.
• •2.       CSC module ip address is same block as DMZ interface and gateway of CSC is the ip address of DMZ interface please see attachment for more info.
• •3.       Internet connecvity  for CSC module a static map has configured with internet ip address.

For your info , I can ping internet from CSC module.

Regards

Imran

[mirober2]

Hi Imran,

Since you are able to ping an Internet IP address from the CSC, please verify the DNS server configuration on the CSC's network settings. If it is unable to resolve DNS, connectivity will still fail.

-Mike

[skmdimran]

Dear Mike,

thanks for the update.

I have checked DNS entry but no expected result.

Please note that I have only base license , Plus license expired. Do you think this is happening due to Plus license.

I have update CSC module image and internet slow issue has been resolved.

Please check the log.

Regards

Imran

[skmdimran]

Dear Mike,

thanks a lot !  Its working , problem was in the DNS entry.

Would you please tell me , is there any S/W to monitor CSC Log like IEV for IPS module.

thanks

Imran

[mirober2 · Accepted solution]

Hi Imran,

I'm glad it's working after fixing the DNS configuration.

For viewing the CSC logs, you can use any of the 4 options:

1. Viewing from the Logs > Query menu in the Trend Micro admin page (this is a fixed size buffer)

2. Manually exporting the Logs from the Trend Micro admin page to a CSV file

3. Sending the logs to a syslog server (under Logs > Settings)

4. Using the Content Security monitoring tab in ASDM

Hope that helps.

-Mike