IPS module or CSC module

[west33637]

Hello all. I have a customer that wants to purchase an ASA 5510 security plus to terminate client VPN access for an external support team. The customer claims to want URL content filtering/proxy which leads me to suggest a CSC SSM 20 plus module. But upon further conversation, he mentioned wanting IPS. In this case, the customer does not seem to know the difference between the URL content filter/proxy and the IPS and uses both terms interchangably.

1. What would you suggest in your expert opinion would be the best module to get for this customer? IPS or CSC

2. If I go with the CSC module, where can I find good documentation on how to configure it and get it up to date?

3. does the CSC module provide any web proxy functionality? I don't think so but I just have to ask

Thanks,

[Karsten Iwen · Accepted solution]

I would go with the IPS. The CSC-functionality is available on nearly every security-proxy you can buy. And the proxy will run fine in a VM (for most use-cases).

If you decide to buy IPS, then think about using the new 5500-X-series. There you don't need a hardware-module, the IPS ist activated in software by a license. A 5515-X with IPS shouldn't be much more expensive then a 5510SecPlus with AIP-SSM.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[west33637]

thx Karsten. with the 5515-X can CSC also be activated by aquiring the software license- no additional hardware? Can both IPS and CSC-Plus run concurrently?

[Karsten Iwen]

No, as of today thats only possible for IPS. And I wouldn't wait for a CSC-software-module.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni