Moving from ASA5505 to 5510, port span question

[ahab]

I have a customer moving from a 5505 to a 5510. They are currently running websense express, which monitors and filters traffic based off of a port mirror on the ASA. Can this function still be performed on the ASA5510? If so, I am having trouble figuring out the method.

Thanks

[PAUL GILBERT ARIAS]

It is still supported. Both ASAs support pretty much the same thing.

[ahab]

That was what I had figured, but...I cannot get a config to work.

Because the 5505 ports are switched and the 5510 are directly addressable I assume there is another method. But for the life of me I cannot find an example.

Thanks

[PAUL GILBERT ARIAS]

there is a command called url-server on the ASA. I am sure that will help you. You can use the following link:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008088517b.shtml

I hope this helps.

[ahab]

Thanks, but problem with that is the product I am using is websense express. Express only supports the port mirrored method for filtering and monitoring.

Appreciate it though

[PAUL GILBERT ARIAS]

let me ask a Websense expert I have here. I will update soon.

[PAUL GILBERT ARIAS]

I just asked the websense expert. 5510 can't be integrated unless you have a switch or hub that you can use to connect to the ASA and you Websense Express. That way you will be able to make it work.

I hope this helps.