Getting Started With The Csc Ssm - Cisco FirePOWER ASA 5500 series Configuration Manual

Chapter 22 Managing AIP SSM and CSC SSM
Figure 22-2
Syslog
Notifications
SMTP Server
CSC SSM cannot suport stateful failover, because the CSC SSM does not maintain connection
information and therefore cannot provide the failover unit with information necessary for stateful
failover. The connections that a CSC SSM is scanning are dropped upon failure of the security appliance
that the CSC SSM is installed in. When the standby adaptive security appliance becomes active, it will
forward the scanned traffic to its CSC SSM and the connections will be reset.

Getting Started with the CSC SSM

Before you receive the security benefits provided by a CSC SSM, you must perform several steps beyond
simple hardware installation of the SSM. This procedure provides an overview of those steps.
To configure the adaptive security appliance and the CSC SSM, follow these steps:
If the CSC SSM did not come pre-installed in a Cisco ASA 5500 series adaptive security appliance,
Step 1
install it and connect a network cable to the management port of the SSM. For assistance with installation
and connecting the SSM, see the Cisco ASA 5500 Series Hardware Installation Guide.
The management port of the CSC SSM must be connected to your network to allow management of
and automatic updates to the CSC SSM software. Additionally, the
port for email notifications and syslogging.
With the CSC SSM, you should have received a Product Authorization Key (PAK). Use the PAK to
Step 2
register the CSC SSM at the following URL.
http://www.cisco.com/go/license
After you register, you will receive activation keys by email. The activation keys are required before you
can complete
Gather the following information, for use in
Step 3
•
•
OL-10088-01
CSC SSM Deployment with a Management Network
inside
192.168.100.1
HTTP
Proxy
management port
192.168.50.1
ASDM
192.168.50.38 SSM
Step 6
Activation keys, received after completing
SSM management port IP address, netmask, and gateway IP address.
Security
Appliance
Main System
outside
10.6.13.67
CSC SSM
management
port
Step 6.
Step 2.
Cisco Security Appliance Command Line Configuration Guide
Managing the CSC SSM
Trend Micro
Update Server
Internet
CSC SSM uses the management
22-7