Cisco 500 Series, Configuration Manual

Page: 422 / 1140

22-12
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Chapter 22 Managing the AIP SSM and CSC SSM
Managing the CSC SSM
Getting Started with the CSC SSM
Before you receive the security benefits provided by a CSC SSM, you must perform several steps beyond
hardware installation of the SSM. This procedure provides an overview of those steps.
To configure the adaptive security appliance and the CSC SSM, follow these steps:
Step 1
If the CSC SSM did not come pre-installed in a Cisco ASA 5500 series adaptive security appliance,
install it and connect a network cable to the management port of the SSM. For assistance with installation
and connecting the SSM, see the
Cisco ASA 5500 Series Hardware Installation Guide .
The management port of the CSC SSM must be connected to your network to allow management of and
automatic updates to the CSC SSM software. Additionally, the CSC SSM uses the management port for
e-mail notifications and system log messaging.
Step 2
With the CSC SSM, you should have received a Product Authorization Key (PAK). Use the PAK to
register the CSC SSM at the following URL.
http://www.cisco.com/go/license
After you register, you will receive activation keys by e-mail. The activation keys are required before
you can complete
Step 6
Step 3
Gather the following information for use in Step 6 .
• Activation keys, received after completing Step 2 .
•
The CSC SSM management port IP address, netmask, and gateway IP address.
Note
The CSC SSM management port IP address must be accessible by the hosts used to run
ASDM. The IP addresses for the CSC SSM management port and the adaptive security
appliance management interface can be in different subnets.
•
DNS server IP address.
• HTTP proxy server IP address (needed only if your security policies require the use of a proxy server
for HTTP access to the Internet).
•
Domain name and hostname for the CSC SSM.
• An e-mail address and an SMTP server IP address and port number for e-mail notifications.
•
IP addresses of hosts or networks allowed to manage the CSC SSM.
•
Password for the CSC SSM.
Step 4
In a web browser, access ASDM for the adaptive security appliance in which the CSC SSM is installed.
Note
If you are accessing ASDM for the first time, see the Cisco ASA 5500 Series Adaptive Security
Appliance Getting Started Guide for assistance with the Startup Wizard.
For more information about enabling ASDM access, see the “Allowing HTTPS Access for ASDM”
section on page 40-3 .
Step 5
Verify time settings on the adaptive security appliance. Time setting accuracy is important for logging
of security events and for automatic updates of CSC SSM software.
•
If you manually control time settings, verify the clock settings, including time zone. Choose
Configuration > Properties > Device Administration > Clock .