Guest

Cisco ASA 5500-X Series Next-Generation Firewalls

Cisco ASA 5500 Series Content Security and Control Security Services Module

  • Viewing Options

  • PDF (116.5 KB)
  • Feedback

The Cisco ASA 5500 Series Content Security and Control Security Services Module (CSC-SSM) combines comprehensive malware protection with advanced traffic and message compliance for Cisco ASA Family of multifunction security appliances. The result is a powerful solution that provides strong protection and control for business network communications, stops network threats including viruses, worms, spyware, spam and phishing, controls unwanted visitors and web content while reducing the operational costs and complexity of deploying and managing multiple point solutions.

Product Overview

The Cisco ASA 5500 Series Content Security and Control Security Services Module (CSC-SSM) delivers industry-leading threat protection and content control at the Internet edge providing comprehensive antivirus, anti-spyware, file blocking, anti-spam, anti-phishing, URL blocking and filtering, and content filtering, all available in a comprehensive easy-to-manage solution delivered by industry leaders. The CSC-SSM bolsters the Cisco ASA 5500 Series' strong security capabilities providing customers with additional protection and control over the content of their business communications. The service module provides additional flexibility and choice over the functionality and deployment of Cisco's award-winning Cisco ASA 5500 Series Family of appliances.
The Cisco ASA 5500 Series CSC-SSM helps businesses more effectively protect their networks, increase network availability, and increase employee productivity through the following elements:

Comprehensive malware protection: Incorporates Trend Micro's award-winning antivirus and anti-spyware technologies. The CSC-SSM can prevent virtually all known malicious code from entering and propagating across the network. This helps prevent disruption of business critical applications and services, prevent valuable key systems and employee downtime and reduce the costly process of cleaning up after an infection.

Advanced content filtering: Integrates URL filtering, content filtering and anti-phishing technology that helps protect the business and individual employees from the theft of confidential information as well as reduce potential legal liabilities associated with content in violation of network use policies. It can also aid businesses comply with network content regulations such as Health Insurance Portability and Accountability Act (HIPAA), Sarbanes-Oxley (SOX) and the Data Protection Act.

Integrated message security: Integrates anti-spam technology that removes the vast majority of unsolicited e-mail before it gets to the mail server, increasing employee productivity and preventing wastage of valuable network bandwidth and storage resources.

Customization and tuning capabilities: Provides administrators with the ability to customize control over spam and content functions to suit specific corporate policies or network environments.

Ease of management and automatic update capabilities: Ships with intelligent default settings and an intuitive interface integrated with the ASA 5500 Adaptive Security Device Manager (ASDM) to ease initial configuration, deployment and ongoing operations. Automatic updates of all CSC-SSM components including scanning engines and pattern files, ensures that the network is always protected against the latest threats with minimal administrative effort.

Key Features and Benefits

The Cisco ASA 5500 CSC-SSM provides a wealth of security and control capabilities including those detailed in Table 1.

Table 1. Feature and Benefits for the CSC-SSM

Feature

Benefit

Antivirus

Award-winning antivirus technology shields internal network resources from virus attacks at the most effective point in your infrastructure, the Internet gateway. Cleaning e-mail and Internet web traffic at the perimeter helps ensures business continuity and eliminates the need for resource intensive malware infection clean-ups.

Anti-Spyware

Blocks spyware from entering the network through Internet web and e-mail traffic. Frees up IT support resources from costly spyware removal procedures and improves employee productivity by blocking spyware at the gateway.

Anti-Spam

Effectively blocks spam with extremely low false positives, helping to maintain the effectiveness of e-mail communications, so contact with customers, vendors, and partners continues uninterrupted and without distraction.

Anti-Phishing

Protection against spoofed identity and sourcing guards against phishing attacks thereby preventing employees from inadvertently disclosing company or personal details which can often lead to financial loss.

Automatic Updates from TrendLabs

Backed and supported by one of the largest teams of virus, spyware and spam experts in the industry, working 24x7 to ensure that your solution is providing the most up to date protection, automatically.

Central Administration

Easy "set-and-forget" administration through a remotely accessible Web-console and automated updates reduces deployment time and effort as well as recurring IT support costs.

Real-Time Protection for Web Access, Mail and File Transfers

Even if company e-mail is already protected, many employees will access their own private Webmail from company PCs or laptops introducing another entry point for Internet-borne threats. Employees may also directly download programs or files that may be contaminated. Real-time protection of all Web traffic at the Internet gateway greatly reduces this often-overlooked point of vulnerability.

Full URL Filtering Capability with Categories, Scheduling and Caching

URL filtering can be used to control employee Internet usage by blocking access to inappropriate or non-work-related websites, thereby improving employee productivity and limiting the risk of legal action being taken by employees exposed to offensive Web content.

E-Mail Content Filtering

E-mail filtering minimizes legal liability due to exposure to offensive material transferred by e-mail and enforces regulatory compliance, helping organizations meet the requirements of legislation such as Graham Leach Bliley and the Data Protection Act.

Product Licensing

Cisco ASA 5500 Series CSC-SSM provides licensing options to enable organizations to customize the features and capabilities to each group's needs with features that include advanced content services and increased user capacity. A detailed listing of these options is shown in Table 2.

Table 2. Standard and Optional Features

CSC-SSM Hardware

Standard Licenses

Optional Licenses

User Upgrades (Total Users)

Feature Upgrades

CSC-SSM-10

• 50 Users
• Antivirus, anti-spyware, file blocking
• 100 Users
• 250 Users
• 500 Users

Plus license: Adds anti-spam, anti-phishing, URL blocking/filtering and content control

CSC-SSM-20

• 500 Users
• Antivirus, anti-spyware, file blocking
• 750 Users
• 1000 Users

Plus license: Adds anti-spam, anti-phishing, URL blocking/filtering and content control

Feature Licenses

Optional Plus Licenses

The Cisco ASA 5500 Series CSC-SSM ships with a default feature set that provides antivirus, anti-spyware, and file blocking services. A premium Plus license is available for additional capabilities including anti-spam, anti-phishing, URL blocking/filtering and content control services. The optional Plus pack feature license is available for an additional charge for each CSC-SSM.

Platform Licenses

Optional User Upgrades

Businesses can extend the user capacity of the Cisco ASA 5500 Series CSC-SSM by purchasing and installing additional user licenses. By default, the CSC-SSM-10 and CSC-SSM-20 models ship with 50 and 500 users, respectively. Several tiers of user license upgrades are available, including 100-, 250-, and 500-user packs for the CSC-SSM-10 and 750-and 1,000-user packs for the CSC-SSM-20.

Product Specifications

See Tables 3-5 for system compatibility and characteristics of the Cisco ASA 5500 Series CSC-SSM.

Table 3. Software Compatibility

Hardware

Software Versions Supported

Cisco ASA 5500 Series Appliances

Cisco ASA Software Version 7.1(1) and higher

Cisco Adaptive Security Device Manager

Cisco ASDM Software Version 5.1(1) and higher

Cisco CSC-SSM

Cisco CSC Software Version 6.0(b1349) and higher

Table 4. Supported Platforms

Hardware

Appliances Supported

CSC-SSM-10

• Cisco ASA 5510 Adaptive Security Appliance
• Cisco ASA 5520 Adaptive Security Appliance

CSC-SSM-20

• Cisco ASA 5510 Adaptive Security Appliance
• Cisco ASA 5520 Adaptive Security Appliance
• Cisco ASA 5540 Adaptive Security Appliance

Table 5. Characteristics of Cisco ASA 5500 Series CSC-SSMs

 

Cisco ASA 5500 Series CSC-SSM-10

Cisco ASA 5500 Series CSC-SSM-20

 

Technical Specifications

Processor

2.0 GHz

2.4 GHz

Memory

1 GB

2 GB

System Flash

256 MB

256 MB

Cache

256 KB

512 KB

Environmental Operating Ranges

Operating

Temperature

32 to 104ºF (0º to 40ºC)

Relative Humidity

10 to 90 percent, non-condensing

Nonoperating

Temperature

-13 to 158ºF (-25 to 70ºC)

Power Consumption

90W Maximum

Physical Specifications

Dimensions (H x W x D)

1.70 x 6.80 x 11.00 in.

Weight (with Power Supply)

3.00 lb (1.36 kg)

Regulatory and Standards Compliance

Safety

UL 1950, CSA C22.2 No. 950, EN 60950 IEC 60950, AS/NZS3260, TS001

Electromagnetic Compatibility (EMC)

CE marking, FCC Part 15 Class A, AS/NZS 3548 Class A, VCCI Class A, EN55022 Class A, CISPR22 Class A, EN61000-3-2, EN61000-3-3

System Requirements

Table 6 lists system requirements for the Cisco ASA 5500 Series CSC-SSM running CSC Software Version 6.0(b1349).

Table 6. System Requirements

System Requirement

Description

Platforms Supported

• Cisco ASA 5500 Series CSC-SSM-10
• Cisco ASA 5500 Series CSC-SSM-20

Minimum RAM

• Cisco CSC-SSM-10: 1 GB
• Cisco CSC-SSM-10: 2 GB

Ordering Information

To place an order, visit the Cisco Ordering Home Page. See Table 7 for ordering information.

Table 7. Ordering Information

Product Name

Part Number

Cisco ASA 5500 Series Appliance and CSC-SSM Bundles

Cisco ASA 5510 Appliance with CSC-SSM-10 (50-User Antivirus, Anti-Spyware, 1-Year Subscription Service1)

ASA5510-CSC10-K9

Cisco ASA 5510 Appliance with CSC-SSM-20 (500-User Antivirus, Anti-Spyware, 1-Year Subscription ServiceText Box: 1)

ASA5510-CSC20-K9

Cisco ASA 5520 Appliance with CSC-SSM-10 (50-User Antivirus, Anti-Spyware, 1-Year Subscription ServiceText Box: 1)

ASA5520-CSC10-K9

Cisco ASA 5520 Appliance with CSC-SSM-20 (500-User Antivirus, Anti-Spyware, 1-Year Subscription ServiceText Box: 1)

ASA5520-CSC20-K9

Standalone CSC-SSMs

Cisco ASA 5500 Series CSC-SSM-10 (50-User Antivirus, Anti-Spyware, 1-Year Subscription ServiceText Box: 1)

ASA-SSM-CSC-10-K9=

Cisco ASA 5500 Series CSC-SSM-20 (500-User Antivirus, Anti-Spyware, 1-Year Subscription ServiceText Box: 1)

ASA-SSM-CSC-20-K9=

Content Security Feature Licenses (Optional)

 

Cisco ASA 5500 Series CSC-SSM-10 Plus License (Adds URL and Content Filtering, Anti-Phishing, Anti-Spam, 1 Year Subscription ServiceText Box: 1)

ASA-CSC10-PLUS=

Cisco ASA 5500 Series CSC-SSM-20 Plus License (Adds URL and Content Filtering, Anti-Phishing, Anti-Spam, 1 Year Subscription ServiceText Box: 1)

ASA-CSC20-PLUS=

Content Security User Licenses (Optional)

Cisco ASA 5500 Series CSC-SSM-10 100-User License (Total Users2)

ASA-CSC10-USR-100=

Cisco ASA 5500 Series CSC-SSM-10 250-User License (Total Users Text Box: 2)

ASA-CSC10-USR-250=

Cisco ASA 5500 Series CSC-SSM-10 500-User License (Total Users Text Box: 2)

ASA-CSC10-USR-500=

Cisco ASA 5500 Series CSC-SSM-20 750-User License (Total Users Text Box: 2)

ASA-CSC20-USR-750=

Cisco ASA 5500 Series CSC-SSM-20 1000-User License (Total Users Text Box: 2)

ASA-CSC20-USR-1k=

1Two services are required for the effective operation of the CSC-SSM: Software update service and Cisco SMARTnet®. First year of software update service for base feature set is included in the base price of the product for the first year of service as measured from time of license registration. Customers are required to purchase Cisco maintenance separately for an additional fee (SMARTnet or equivalent, for example). This SMARTnet service fee is not included in the base price of the product for the first or subsequent years.
2The optional user license upgrades are absolute relative to the base user license for each CSC-SSM model. A 250-user upgrade, for example, applied to a CSC SSM-10 will increase the base 50-user license an additional 200 users resulting in a total of a 250-user capacity license.

To Download The Software

Visit the Cisco Software Center to download Cisco ASA Software, Cisco ADSM Software or Cisco CSC Software.

Service and Support

Cisco offers a wide range of services programs to accelerate customer success. These innovative service programs are delivered through a unique combination of people, processes, tools, and partners, resulting in high levels of customer satisfaction. Cisco services help you to protect your network investment, optimize network operations, and prepare your network for new applications to extend network intelligence and the power of your business. For more information about Cisco Services please visit http://www.cisco.com/go/services/security.
Table 8 illustrates the unique value of the service and support contracts offered for the Cisco ASA 5500 Series CSC-SSM product. The service programs are comprised of hardware support, software support and content subscription elements. Customers are provided with the first year of the software subscription update service at no additional cost. For years two and beyond, customers will renew their software and subscription contracts for an annual fee beginning one year after the time of license registration. Cisco offers our award-winning SMARTnet support programs covering technical support and hardware support for the CSC-SSM for an additional annual fee. Both the software update service and the Cisco SMARTnet service are required to maximize the protection and optimal performance of your Cisco ASA 5500 Series CSC-SSM solution.

Table 8. Available Support Services

Support Deliverables

Cisco SMARTnet® (SNT) Service

Software Update Service

Cisco ASA 5500 Series Appliance Chassis Support

Registered Access to Cisco.com

Included

-

TAC Technical Support 24 x 7 x 365

Included

-

Operating System Software Releases (Maintenance, Major, Minor)

Included

-

Hardware Replacement Options

Included

-

Cisco ASA 5500 Series CSC-SSM Support

Registered Access to Cisco.com

Included

-

TAC Technical Support 24 x 7 x 365

Included

-

Operating System Software Releases (Maintenance, Major, Minor)

Included

-

Pattern File, Scan Engine and Signature Updates

-

Included

Advance Hardware Replacement Options

Included

-

Service and Support Ordering Information

First year of software update service is included in the product price. Cisco will arrange for initiation of the first year of service with Trend Micro. To order Cisco SMARTnet service, visit the  Cisco Ordering Home Page. See Table 9 for SMARTnet ordering information.

Table 9. Ordering Information

Product Part Number

SMARTnet® Service Part Number

Service Description

ASA5510-CSC10-K9

• CON-SNT-AS1C10K9
• CON-SNTE-AS1C10K9
• CON-SNTP-AS1C10K9
• CON-PREM-AS1C10K9
• CON-OS-AS1C10K9
• CON-OSE-AS1C10K9
• CON-OSP-AS1C10K9
• CON-S2P-AS1C10K9
• SMARTnet 8x5xNBD (Next Business Day)
• SMARTnet 8x5x4
• SMARTnet 24x7x4
• SMARTnet 24x7x2
• SMARTnet onsite 8x5xNBD
• SMARTnet onsite 8x5x4
• SMARTnet onsite 24x7x4
• SMARTnet onsite 24x7x2

ASA5510-CSC20-K9

• CON-SNT-AS1C20K9
• CON-SNTE-AS1C20K9
• CON-SNTP-AS1C20K9
• CON-PREM-AS1C20K9
• CON-OS-AS1C20K9
• CON-OSE-AS1C20K9
• CON-OSP-AS1C20K9
• CON-S2P-AS1C20K9
• SMARTnet 8x5xNBD
• SMARTnet 8x5x4
• SMARTnet 24x7x4
• SMARTnet 24x7x2
• SMARTnet onsite 8x5xNBD
• SMARTnet onsite 8x5x4
• SMARTnet onsite 24x7x4
• SMARTnet onsite 24x7x2

ASA5520-CSC10-K9

• CON-SNT-AS2C10K9
• CON-SNTE-AS2C10K9
• CON-SNTP-AS2C10K9
• CON-PREM-AS2C10K9
• CON-OS-AS2C10K9
• CON-OSE-AS2C10K9
• CON-OSP-AS2C10K9
• CON-S2P-AS2C10K9
• SMARTnet 8x5xNBD
• SMARTnet 8x5x4
• SMARTnet 24x7x4
• SMARTnet 24x7x2
• SMARTnet onsite 8x5xNBD
• SMARTnet onsite 8x5x4
• SMARTnet onsite 24x7x4
• SMARTnet onsite 24x7x2

ASA5520-CSC20-K9

• CON-SNT-AS2C20K9
• CON-SNTE-AS2C20K9
• CON-SNTP-AS2C20K9
• CON-PREM-AS2C20K9
• CON-OS-AS2C20K9
• CON-OSE-AS2C20K9
• CON-OSP-AS2C20K9
• CON-S2P-AS2C20K9
• SMARTnet 8x5xNBD
• SMARTnet 8x5x4
• SMARTnet 24x7x4
• SMARTnet 24x7x2
• SMARTnet onsite 8x5xNBD
• SMARTnet onsite 8x5x4
• SMARTnet onsite 24x7x4
• SMARTnet onsite 24x7x2

ASA-SSM-CSC-10-K9

• CON-SNT-ASCS10K9
• CON-SNTE-ASCS10K9
• CON-SNTP-ASCS10K9
• CON-PREM-ASCS10K9
• CON-OS-ASCS10K9
• CON-OSE-ASCS10K9
• CON-OSP-ASCS10K9
• CON-S2P-ASCS10K9
• SMARTnet 8x5xNBD
• SMARTnet 8x5x4
• SMARTnet 24x7x4
• SMARTnet 24x7x2
• SMARTnet onsite 8x5xNBD
• SMARTnet onsite 8x5x4
• SMARTnet onsite 24x7x4
• SMARTnet onsite 24x7x2

ASA-SSM-CSC-20-K9

• CON-SNT-ASCS20K9
• CON-SNTE-ASCS20K9
• CON-SNTP-ASCS20K9
• CON-PREM-ASCS20K9
• CON-OS-ASCS20K9
• CON-OSE-ASCS20K9
• CON-OSP-ASCS20K9
• CON-S2P-ASCS20K9
• SMARTnet 8x5xNBD
• SMARTnet 8x5x4
• SMARTnet 24x7x4
• SMARTnet 24x7x2
• SMARTnet onsite 8x5xNBD
• SMARTnet onsite 8x5x4
• SMARTnet onsite 24x7x4
• SMARTnet onsite 24x7x2

Additional SMARTnet service contracts are not required for the optional Plus license or the user license upgrades. These support fees are included in the base price of the offering. For the second and subsequent years, the annual software and subscription license renewal will include the license fees necessary to maintain these optional feature packs.

For More Information

For more information, please visit the following links:

Cisco ASA 5500 Series: http://www.cisco.com/go/asa

Cisco Adaptive Security Device Manager: http://www.cisco.com/go/asdm

Cisco Product Certifications: http://www.cisco.com/go/securitycert

Cisco Technical Support: http://www.cisco.com/en/US/products/svcs/ps3034/ps2827/serv_category_home.html

Cisco Advanced Services: http://www.cisco.com/go/services