Cisco ASA 5505 Configuration Manual page 1160

Configuring the CSC SSM
•
Step 6 Open ASDM.
Connect to and log in to the CSC SSM. For instructions, see the
Step 7
on page
Step 8 Run the CSC Setup Wizard.
•
•
The CSC Setup Wizard appears.
Step 9 Complete the CSC Setup Wizard, which includes configuration of service policies to divert traffic that
you want scanned to the CSC SSM.
Note
To reduce the load on the CSC SSM, configure the service policy rules that send packets to the CSC SSM
Step 10
to support only HTTP, SMTP, POP3, or FTP traffic. For instructions, see the
Policy Rule Actions for CSC Scanning" section on page
(Optional) Review the default content security policies in the CSC SSM GUI, which are suitable for most
Step 11
implementations. You review the content security policies by viewing the enabled features in the CSC
SSM GUI. For the availability of features, see the
on page
What to Do Next
See the
Connecting to the CSC SSM
With each session you start in ASDM, the first time you access features related to the CSC SSM, you
must specify the management IP address and provide the password for the CSC SSM. After you
successfully connect to the CSC SSM, you are not prompted again for the management IP address and
password. If you start a new ASDM session, the connection to the CSC SSM is reset and you must
specify the IP address and the CSC SSM password again. The connection to the CSC SSM is also reset
if you change the time zone on the adaptive security appliance.
The CSC SSM has a password that is maintained separately from the ASDM password. You can
Note
configure the two passwords to be identical, but changing the CSC SSM password does not affect the
ASDM password.
Cisco ASA 5500 Series Configuration Guide using ASDM
55-8
If you are using NTP, verify the NTP configuration. Choose Configuration > Properties > Device
Administration > NTP.
55-8.
To access the CSC Setup Wizard, choose Configuration > Trend Micro Content Security > CSC
Setup > Wizard Setup > Launch Setup Wizard.
If you are rerunning the CSC Setup Wizard, perform the same steps listed in the previous bullet.
If you create a global service policy to divert traffic for CSC scans, all traffic (inbound and
outbound) for the supported protocols is scanned. To maximize performance of the adaptive
security appliance and the CSC SSM, scan traffic only from untrusted sources.
55-5. For the default settings, see the
"Connecting to the CSC SSM" section on page
Chapter 55 Configuring the Content Security and Control Application on the CSC SSM
55-9.
"Licensing Requirements for the CSC SSM" section
"Default Settings" section on page
55-8.
"Connecting to the CSC SSM" section
"Determining Service
55-6.
OL-20339-01