Cisco CSC SSM (Trend Micro) - Browse Internet Slow

[Imran Irshad]

Good Day,

I have installed Cisco ASA 5520 (8.2V)   ASA-SSM-CSC-10-k9 (6.6.1125v) module. I disabled  "MAIL SMTP" and "MAIL POP"  filtering & enable Web http/https enable. because i want to have web filtering only. 

Whenever I feel that my internet is running slow then i am disabling  "Scanning" from CSC-SSM (Trend Micro).

After disable "Scan" from CSC i am getting faster browsing. 

Is there any solution for it ?

BR,

I.A 

[Juan Ponce Dominguez]

I would suggest you to upgrade to the latest TrendMicros patch: 1148, to do so please:

Download it from here: https://dc1.safesync.com/LMQchTyg/HFB1148.zip?a=A5lvjXnY3Vk

1. Backup the configuration and also write down the activation codes.

2. Disable the Scheduled updates

3. Apply the hotfix 1148

4. Enable scheduled updates

5.  Go to Administration>Licensing and check for license online.

6.  Create a Manual update. It should be successfull

The CSC will reboot at the end.

JJ

[Imran Irshad]

Thanks JJ :)

I have upgraded with TM Patch 1148 but problem still exists. When i disable "Scanning" then internet browsing running fast & when i ping my ISP router, 

When Disable Scanning 

Reply from 2x.xx.xx.xx: bytes=32 time=4ms TTL=254

Reply from 2x.xx.xx.xx: bytes=32 time=5ms TTL=254

Reply from 2x.xx.xx.xx: bytes=32 time=4ms TTL=254

Reply from 2x.xx.xx.xx: bytes=32 time=4ms TTL=254

When Enable Scanning 

Reply from 2x.xx.xx.xx: bytes=32 time=35ms TTL=254

Reply from 2x.xx.xx.xx: bytes=32 time=49ms TTL=254

Reply from 2x.xx.xx.xx: bytes=32 time=31ms TTL=254

Reply from 2x.xx.xx.xx: bytes=32 time=38ms TTL=254

So i think, it seems Load on CSC or Memory   (I have 250 nodes license and 225 users active).

Regards,

I.A 

[Juan Ponce Dominguez]

Hey,

I have two questions:

1. Did you make these pings from the CSC module itself? or from an inside host?

2. What traffic is being diverted to the CSC module from the ASA?. Are you excluding the Management IP of the CSC in the class-map?. Can you post the relevant config?

- Show run policy-map

- show run class-map and the ACL attached to the class-map of the CSC.

JJ