Checking Ssm Status - Cisco PIX 500 Series Configuration Manual

Checking SSM Status

hostname(config-cmap)# match access-list csc_in
hostname policy-map csc_in_policy
hostname(config-pmap)# class csc_inbound_class
hostname(config-pmap-c)# csc fail-close
hostname service-policy csc_in_policy interface outside
FTP inspection must be enabled for the CSC SSM to scan files transferred by FTP. FTP inspection is
Note
enabled by default.
Checking SSM Status
To check the status of an SSM, use the show module command.
The following is sample output from the show module command on an adaptive security appliance with
a CSC SSM installed. The Status field indicates the operational status of the SSM. An SSM operating
normally has a status of "Up" in the output of the show module command. While the adaptive security
appliance transfers an application image to the SSM, the Status field in the output reads "Recover." For
more information about possible statuses, see the entry for the show module command in the
Security Appliance Command
hostname# show module 1
Mod Card Type
--- -------------------------------------------- ------------------ -----------
0 ASA 5520 Adaptive Security Appliance
1 ASA 5500 Series Security Services Module-20
Mod MAC Address Range
--- --------------------------------- ------------ ------------ ---------------
0 000b.fcf8.c30d to 000b.fcf8.c311
1 000b.fcf8.012c to 000b.fcf8.012c
Mod SSM Application Name
--- ------------------------------ --------------------------
1 Trend Micro InterScan Security Version 5.0
Mod Status
--- ------------------ --------------------- -------------
0 Up Sys Not Applicable
1 Up Up
The argument 1, at the end of the command, is the slot number occupied by the SSM. If you do not know
the slot number, you can omit it and see information about all modules, including the adaptive security
appliance, which is considered to occupy slot 0 (zero).
Use the details keyword to view additional information for the SSM.
The following is sample output from the show module details command on an adaptive security
appliance with a CSC SSM installed.
hostname# show module 1 details
Getting details from the Service Module, please wait...
ASA 5500 Series Security Services Module-20
Model:
Hardware version:
Serial Number:
Firmware version:
Cisco Security Appliance Command Line Configuration Guide
22-18
Hw Version
1.0 1.0(10)0
1.0 1.0(10)0
SSM Application Version
Data Plane Status Compatibility
ASA-SSM-20
1.0
0
1.0(10)0
Reference.
Model Serial No.
ASA5520 P3000000034
ASA-SSM-20 0
Fw Version Sw Version
7.1(0)1
Trend Micro InterScan Security Module Version 5.0
Chapter 22 Managing the AIP SSM and CSC SSM
Cisco
OL-12172-03