Cisco 500 Series, Configuration Manual

Page: 420 / 1140

22-10
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Chapter 22 Managing the AIP SSM and CSC SSM
Managing the CSC SSM
•
Getting Started with the CSC SSM, page 22-12
• Determining What Traffic to Scan, page 22-13
•
Limiting Connections Through the CSC SSM, page 22-15
• Diverting Traffic to the CSC SSM, page 22-16
About the CSC SSM
The ASA 5500 series adaptive security appliance supports the CSC SSM, which runs Content Security
and Control software. The CSC SSM provides protection against viruses, spyware, spam, and other
unwanted traffic by scanning the FTP, HTTP, POP3, and SMTP packets that you configure the adaptive
security appliance to send to it.
Figure 22-5 illustrates the flow of traffic through an adaptive security appliance that has the following:
•
A CSC SSM installed and configured.
• A service policy that determines what traffic is diverted to the CSC SSM for scanning.
In this example, the client could be a network user who is accessing a website, downloading files from
an FTP server, or retrieving mail from a POP3 server. SMTP scans differ in that you should configure
the adaptive security appliance to scan traffic sent from the outside to SMTP servers protected by the
adaptive security appliance.
Note
The CSC SSM can scan FTP file transfers only when FTP inspection is enabled on the adaptive security
appliance. By default, FTP inspection is enabled.
Figure 22-5 Flow of Scanned Traffic with CSC SSM
You use ASDM for system setup and monitoring of the CSC SSM. For advanced configuration of content
security policies in the CSC SSM software, you access the web-based GUI for the CSC SSM by clicking
links within ASDM. For instructions on use of the CSC SSM GUI, see the
Trend Micro InterScan for
Cisco CSC SSM Administrator Guide .
148386
Security Appliance
Main System
Request sent
Client
Reply forwarded
inside
modular
service
policy
Request forwarded
Reply sent
CSC SSM
Server
Diverted Traffic
content security scan
outside