Multiple context supports CSC-SSM

[tabish bhat]

Hi All,

Just need a small piece of information..Does multiple context support CSC-SSM module..if yes ..Then how to divert traffic to CSC Module of both contexts.

Regads

Tabish Bhat..

[Anu M Chacko · Accepted solution]

Hi Tabish,

Yes, CSC-SSM supports multiple contexts. You will need to configure only 1 security policy which applies to all contexts.

Hope this helps!

Regards,

Anu

P.S. Please mark the question as resolved if it has been answered. Do rate helpful posts.

[tabish bhat]

thanks for your prompt reply..

can you please send me the configuration.

Regards

Tabish Bhat

[Anu M Chacko]

Hi Tabish,

Here is a document to configure multiple context on the ASA:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808d2b63.shtml

The configuration for the CSC-SSM will be the same as that of the single mode.

Hope this is clear. Let me know if you have any queries.

Regards,

Anu

[tabish bhat]

Hi Anu,

Thanks once again

I know the configuration of multiple context..but i want to know that i can we divert traffic of both contexts to CSC-SSM module..

For example for IPS we can create virtual sensors & assign these sensors to each context. if we do  not assign a sensor to a particular context it use default sensor.

In the same way can we create a virtual CSC-SSM or all contexts traffic will be handled by one CSC-SSM.

iie how different contexts can configure CSC-SSM for different requirements.

[tabish bhat]

Hi Anu,

Thanks once again

I know the configuration of multiple context..but i want to know that i can we divert traffic of both contexts to CSC-SSM module..

For example for IPS we can create virtual sensors & assign these sensors to each context. if we do  not assign a sensor to a particular context it use default sensor.

In the same way can we create a virtual CSC-SSM or all contexts traffic will be handled by one CSC-SSM.

iie how different contexts can configure CSC-SSM for different requirements.

Regards

Tabish Bhat

[Anu M Chacko]

Hi Tabish,

You can apply only 1 security policy which applies to all contexts. All contexts traffic will be handled by one CSC-SSM. All traffic going through the module will be subject to the same security policy. Creating virtual sensors like in AIP-SSM cannot be done on the CSC-SSM.

Hope this is clear.

Regards,

Anu

P.S. Do rate helpful posts.

[tabish bhat]

Hi Anu

Thaks a ton !!

where we need to configure this security policy ???

on admin-context or two sperate policies on each contexts..

Regards

Tabish Bhat

[Anu M Chacko · Accepted solution]

Hi Tabish,

No problem! You will have to configure it in seperate contexts, not in admin context.

Regards,

Anu

[Kureli Sankar · Accepted solution]

Tabish,

Pls. read my response in this thread on this very same question:

https://cisco-support.hosted.jivesoftware.com/message/3004042

-KS

[tabish bhat]

Hi

I have just gone through the contents of this doc..it is really helpful

Thanks for your support 

Regards

Tabish Bhat

[tabish bhat]

Hi Anu,

Thanks for your support !!!

Regards

Tabish bhat