Trend micro and IPS

[dufour001]

Hello,

I want to buy an ASA5510 + SSM for my lan.

The goal is :

- Make URL filtering/blocking within work hours

- Deny some application like IM, P2P, web radio, during work hours.

Trend Micro is good for the first think : url filtering by categories

But is not good for blocking IM, ... (only check port 80 http)

So, is it possible on an ASA to have Trend Micro and IPs working on the same appliance ?

If no, what is the solution?

Thx

[fadlouni]

Hi.

you can only install one module into the ASA. so yes, you can't have both the CSC and the SSM module in the same asa 5510.

however the ASA does support url filtering via Websense or Secure Computing SmartFilter (formerly N2H2) . so if you have a any of those servers, you can configure the ASA to do the url filtering, and install the ssm ips module into the ASA to do the IM blocking.

more info on asa web traffic filtering:

http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/access_filter.html#wp1069318

Regards,

Fadi.

if this answers your question please mark the thread as resolved.