01-26-2010 02:51 AM - edited 03-11-2019 10:01 AM
In the data sheet of the CSC-SSM says,: ” Two services are required for the effective operation of the CSC-SSM: Software update service and Cisco SMARTnet”. I have about 100 users so I think I need:
ASA-SSM-CSC-10-K9 (the CSC-SSM module for ASA)
ASA-CSC10-PLUS= (Adds URL and Content Filtering, Anti-Phishing, Anti-Spam)
ASA-CSC10-USR-100= 100-User License -Total Users
This is the initial investment, but I suppose I have to pay every year the two services (Smartnet and Software update services). For example:
CON-SNT-ASCS10K9 (ASA-SSM-CSC-10-K9 SMARTnet 8x5xNBD)
But what is the part number for ordering the software update service?
Is this all right?
Thanks
01-26-2010 05:32 AM
Every year you would have to order a renewal license for the CSC module. Otherwise if your plus license expirers it will not do URL filtering or detect spam in the e-mail.
Here are the part numbers for that for 1 and 2 year renewal
ASA-CSC10-100U-1Y ASA 5500 CSC-SSM-10 100-User License Only Renewal (1-year)
ASA-CSC10-100P-1Y ASA 5500 CSC-SSM-10 100-User Plus Lic. Only Renewal (1-yr)
ASA-CSC10-100UP-1Y ASA 5500 CSC-SSM-10 100-User w/ Plus Lic. Renewal (1-year)
ASA-CSC10-100U-2Y ASA 5500 CSC-SSM-10 100-User License Only Renewal (2-year)
ASA-CSC10-100P-2Y ASA 5500 CSC-SSM-10 100-User Plus Lic. Only Renewal (2-yr)
ASA-CSC10-100UP-2Y ASA 5500 CSC-SSM-10 100-User w/ Plus Lic. Renewal (2-year)
-KS
01-26-2010 05:43 AM
ASA-CSC10-100U-1Y + ASA-CSC10-100P-1Y = ASA-CSC10-100UP-1Y ?
So in my case, for 100 users with antivirus and antispam? I need every year
- ASA-CSC10-100UP-1Y and,
- CON-SNT-ASCS10K9 (ASA-SSM-CSC-10-K9 SMARTnet 8x5xNBD)
Is this correct?
Thanks
01-26-2010 05:55 AM
That is correct.
-KS
01-27-2010 12:30 AM
Thanks
11-01-2010 03:27 AM
hi,
this thread answered my quest in understanding the part numbers, particularly with Plus license renewal (w/ plus license description is so vague). Thanks a lot. I have a ASA 5510 with CSC 100 users module.
my question is: part no: CON-SNT-ASCS10K9 covers the Cisco ASA 5510 "and" the CSC SSM module or just the CSC SSM module?
my reseller had written this long description for smartnet and I don't understand it at all. if you can lend me a hand here, it would be great.
SMARTNET 8X5XNBD ASA 5510 Appl w/ CSC10,SW,50 Usr AV/Sp,Part no
CON-SNT-AS1C10K9,SMARTNET 8X5XNBD ASA CSC SSM-10 included w/ ASA Syst
part no CON-SNT-ASCINC10
thanks in advance
balu
11-02-2010 05:02 AM
hi,
this thread answered my quest in understanding the part numbers, particularly with Plus license renewal (w/ plus license description is so vague). Thanks a lot. I have a ASA 5510 with CSC 100 users module.
my question is: part no: CON-SNT-ASCS10K9 covers the Cisco ASA 5510 "and" the CSC SSM module or just the CSC SSM module?
my reseller had written this long description for smartnet and I don't understand it at all. if you can lend me a hand here, it would be great.
SMARTNET 8X5XNBD ASA 5510 Appl w/ CSC10,SW,50 Usr AV/Sp,Part no
CON-SNT-AS1C10K9,SMARTNET 8X5XNBD ASA CSC SSM-10 included w/ ASA Syst
part no CON-SNT-ASCINC10
thanks in advance
balu
03-04-2014 03:55 AM
Dear Poonguzhali,
I have exiting ASA5520-K9 with CSM-SSM-10 module. The support is expired for the ASA last year. I need CSC-SSM-10 plus license for 50 users. I am planning to order the below:
1- CON-SNT-AS2BUNK9 (SMARTNET 8X5XNBD ASA Appliance)
2- CON-SNT-ASCS10K9 (SMARTNET 8X5XNBD ASA Content Sec SSM-10 w/ 50 Usr AV)
3- L-ASACSC10-50UP1Y (ASA 5500 CSC-SSM-10 50-User w/ Plus Lic. Renewal (1-year))
4- L-ASA-CSC10-PLUS= ASA 5500 CSC SSM10 Plus Lic. (Spam/URL/Phish, 1Yr Subscript))
Kindly confirm point # 4 that do I need (4 - L-ASA-CSC10-PLUS=) or not. Below are some useful outputs:
DLMKSA-ASA# show version
Cisco Adaptive Security Appliance Software Version 8.4(2)
Device Manager Version 6.4(5)
Compiled on Wed 15-Jun-11 18:17 by builders
System image file is "disk0:/asa842-k8.bin"
Config file at boot was "startup-config"
DLMKSA-ASA up 7 days 0 hours
Hardware: ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW016 @ 0xfff00000, 2048KB
Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)
Boot microcode : CN1000-MC-BOOT-2.00
SSL/IKE microcode : CNLite-MC-SSLm-PLUS-2.03
IPSec microcode : CNlite-MC-IPSECm-MAIN-2.06
Number of accelerators: 1
0: Ext: GigabitEthernet0/0 : address is 4055.3981.cedc, irq 9
1: Ext: GigabitEthernet0/1 : address is 4055.3981.cedd, irq 9
2: Ext: GigabitEthernet0/2 : address is 4055.3981.cede, irq 9
3: Ext: GigabitEthernet0/3 : address is 4055.3981.cedf, irq 9
4: Ext: Management0/0 : address is 4055.3981.cee0, irq 11
5: Int: Internal-Data0/0 : address is 0000.0001.0002, irq 11
6: Int: Internal-Control0/0 : address is 0000.0001.0001, irq 5
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 150 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
VPN-DES : Enabled perpetual
VPN-3DES-AES : Enabled perpetual
Security Contexts : 2 perpetual
GTP/GPRS : Disabled perpetual
AnyConnect Premium Peers : 2 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 750 perpetual
Total VPN Peers : 750 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
UC Phone Proxy Sessions : 2 perpetual
Total UC Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
Intercompany Media Engine : Disabled perpetual
This platform has an ASA 5520 VPN Plus license.
Serial Number: JMX1xxxx3
Running Permanent Activation Key: 0x62xxx79 0x444ec782 0x4xxxxc 0xbbc8c8x0x4b27xxxbd
Configuration register is 0x1
Configuration last modified by enable_15 at 20:15:03.339 AST Mon Feb 24 2014
DLMKSA-ASA#
DLMKSA-ASA# show module
Mod Card Type Model Serial No.
--- -------------------------------------------- ------------------ -----------
0 ASA 5520 Adaptive Security Appliance ASA5520 JMX1xxxxx63
1 ASA 5500 Series Content Security Services Mo ASA-SSM-CSC-10-K9 JAF1xxxxCJN
Mod MAC Address Range Hw Version Fw Version Sw Version
--- --------------------------------- ------------ ------------ ---------------
0 4055.39xxx1.cedc to 4055.xxx81.cee0 2.0 1.0(11)5 8.4(2)
1 e8b7.4xxx9.40f3 to e8b7.4xxx.40f3 1.0 1.0(11)5 CSC SSM 6.6.1125.0
Mod SSM Application Name Status SSM Application Version
--- ------------------------------ ---------------- --------------------------
1 CSC SSM Up 6.6.1125.0
Mod Status Data Plane Status Compatibility
--- ------------------ --------------------- -------------
0 Up Sys Not Applicable
1 Up Up
DLMKSA-ASA#
DLMKSA-ASA# show module 1 details
Getting details from the Service Module, please wait...
ASA 5500 Series Content Security Services Module-10
Model: ASA-SSM-CSC-10-K9
Hardware version: 1.0
Serial Number: JAFxxxxxCJN
Firmware version: 1.0(11)5
Software version: CSC SSM 6.6.1125.0
MAC Address Range: e8b7.4869.40f3 to e8b7.4869.40f3
App. name: CSC SSM
App. Status: Up
App. Status Desc: CSC SSM scan services are available
App. version: 6.6.1125.0
Data plane Status: Up
Status: Up
HTTP Service: Up
HTTPS Service: Up
Mail Service: Up
FTP Service: Up
Activated: Yes
Mgmt IP addr: 192.111.200.62
Mgmt web port: 8443
Peer IP addr:
DLMKSA-ASA#
DLMKSA-ASA# show module 0 details
ASA 5520 Adaptive Security Appliance
Model: ASA5520
Hardware version: 2.0
Serial Number: JMX1xxxxx63
Firmware version: 1.0(11)5
Software version: 8.4(2)
MAC Address Range: 4055.3xxx1.cedc to 4055.3xxx1.cee0
Data plane Status: Not Applicable
Status: Up Sys
DLMKSA-ASA#
Regards,
Anser
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide