PDF(115.3 KB) View with Adobe Reader on a variety of devices
Updated:July 26, 2006
Document ID:1518604286839196
Bias-Free Language
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
The Cisco ASA 5500 Series Content Security and Control Security Services Module (CSC-SSM) combines comprehensive malware protection with advanced traffic and message compliance for Cisco ASA Family of multifunction security appliances. The result is a powerful solution that provides strong protection and control for business network communications, stops network threats including viruses, worms, spyware, spam and phishing, controls unwanted visitors and web content while reducing the operational costs and complexity of deploying and managing multiple point solutions.
Product Overview
The Cisco ASA 5500 Series Content Security and Control Security Services Module (CSC-SSM) delivers industry-leading threat protection and content control at the Internet edge providing comprehensive antivirus, anti-spyware, file blocking, anti-spam, anti-phishing, URL blocking and filtering, and content filtering, all available in a comprehensive easy-to-manage solution delivered by industry leaders. The CSC-SSM bolsters the Cisco ASA 5500 Series' strong security capabilities providing customers with additional protection and control over the content of their business communications. The service module provides additional flexibility and choice over the functionality and deployment of Cisco's award-winning Cisco ASA 5500 Series Family of appliances.
The Cisco ASA 5500 Series CSC-SSM helps businesses more effectively protect their networks, increase network availability, and increase employee productivity through the following elements:
• Comprehensive malware protection: Incorporates Trend Micro's award-winning antivirus and anti-spyware technologies. The CSC-SSM can prevent virtually all known malicious code from entering and propagating across the network. This helps prevent disruption of business critical applications and services, prevent valuable key systems and employee downtime and reduce the costly process of cleaning up after an infection.
• Advanced content filtering: Integrates URL filtering, content filtering and anti-phishing technology that helps protect the business and individual employees from the theft of confidential information as well as reduce potential legal liabilities associated with content in violation of network use policies. It can also aid businesses comply with network content regulations such as Health Insurance Portability and Accountability Act (HIPAA), Sarbanes-Oxley (SOX) and the Data Protection Act.
• Integrated message security: Integrates anti-spam technology that removes the vast majority of unsolicited e-mail before it gets to the mail server, increasing employee productivity and preventing wastage of valuable network bandwidth and storage resources.
• Customization and tuning capabilities: Provides administrators with the ability to customize control over spam and content functions to suit specific corporate policies or network environments.
• Ease of management and automatic update capabilities: Ships with intelligent default settings and an intuitive interface integrated with the ASA 5500 Adaptive Security Device Manager (ASDM) to ease initial configuration, deployment and ongoing operations. Automatic updates of all CSC-SSM components including scanning engines and pattern files, ensures that the network is always protected against the latest threats with minimal administrative effort.
Key Features and Benefits
The Cisco ASA 5500 CSC-SSM provides a wealth of security and control capabilities including those detailed in Table 1.
Table 1. Feature and Benefits for the CSC-SSM
Feature
Benefit
Antivirus
Award-winning antivirus technology shields internal network resources from virus attacks at the most effective point in your infrastructure, the Internet gateway. Cleaning e-mail and Internet web traffic at the perimeter helps ensures business continuity and eliminates the need for resource intensive malware infection clean-ups.
Anti-Spyware
Blocks spyware from entering the network through Internet web and e-mail traffic. Frees up IT support resources from costly spyware removal procedures and improves employee productivity by blocking spyware at the gateway.
Anti-Spam
Effectively blocks spam with extremely low false positives, helping to maintain the effectiveness of e-mail communications, so contact with customers, vendors, and partners continues uninterrupted and without distraction.
Anti-Phishing
Protection against spoofed identity and sourcing guards against phishing attacks thereby preventing employees from inadvertently disclosing company or personal details which can often lead to financial loss.
Automatic Updates from TrendLabs
Backed and supported by one of the largest teams of virus, spyware and spam experts in the industry, working 24x7 to ensure that your solution is providing the most up to date protection, automatically.
Central Administration
Easy "set-and-forget" administration through a remotely accessible Web-console and automated updates reduces deployment time and effort as well as recurring IT support costs.
Real-Time Protection for Web Access, Mail and File Transfers
Even if company e-mail is already protected, many employees will access their own private Webmail from company PCs or laptops introducing another entry point for Internet-borne threats. Employees may also directly download programs or files that may be contaminated. Real-time protection of all Web traffic at the Internet gateway greatly reduces this often-overlooked point of vulnerability.
Full URL Filtering Capability with Categories, Scheduling and Caching
URL filtering can be used to control employee Internet usage by blocking access to inappropriate or non-work-related websites, thereby improving employee productivity and limiting the risk of legal action being taken by employees exposed to offensive Web content.
E-Mail Content Filtering
E-mail filtering minimizes legal liability due to exposure to offensive material transferred by e-mail and enforces regulatory compliance, helping organizations meet the requirements of legislation such as Graham Leach Bliley and the Data Protection Act.
Product Licensing
Cisco ASA 5500 Series CSC-SSM provides licensing options to enable organizations to customize the features and capabilities to each group's needs with features that include advanced content services and increased user capacity. A detailed listing of these options is shown in Table 2.
Table 2. Standard and Optional Features
CSC-SSM Hardware
Standard Licenses
Optional Licenses
User Upgrades (Total Users)
Feature Upgrades
CSC-SSM-10
• 50 Users
• Antivirus, anti-spyware, file blocking
• 100 Users
• 250 Users
• 500 Users
Plus license: Adds anti-spam, anti-phishing, URL blocking/filtering and content control
CSC-SSM-20
• 500 Users
• Antivirus, anti-spyware, file blocking
• 750 Users
• 1000 Users
Plus license: Adds anti-spam, anti-phishing, URL blocking/filtering and content control
Feature Licenses
Optional Plus Licenses
The Cisco ASA 5500 Series CSC-SSM ships with a default feature set that provides antivirus, anti-spyware, and file blocking services. A premium Plus license is available for additional capabilities including anti-spam, anti-phishing, URL blocking/filtering and content control services. The optional Plus pack feature license is available for an additional charge for each CSC-SSM.
Platform Licenses
Optional User Upgrades
Businesses can extend the user capacity of the Cisco ASA 5500 Series CSC-SSM by purchasing and installing additional user licenses. By default, the CSC-SSM-10 and CSC-SSM-20 models ship with 50 and 500 users, respectively. Several tiers of user license upgrades are available, including 100-, 250-, and 500-user packs for the CSC-SSM-10 and 750-and 1,000-user packs for the CSC-SSM-20.
Product Specifications
See Tables 3-5 for system compatibility and characteristics of the Cisco ASA 5500 Series CSC-SSM.
Table 3. Software Compatibility
Hardware
Software Versions Supported
Cisco ASA 5500 Series Appliances
Cisco ASA Software Version 7.1(1) and higher
Cisco Adaptive Security Device Manager
Cisco ASDM Software Version 5.1(1) and higher
Cisco CSC-SSM
Cisco CSC Software Version 6.0(b1349) and higher
Table 4. Supported Platforms
Hardware
Appliances Supported
CSC-SSM-10
• Cisco ASA 5510 Adaptive Security Appliance
• Cisco ASA 5520 Adaptive Security Appliance
CSC-SSM-20
• Cisco ASA 5510 Adaptive Security Appliance
• Cisco ASA 5520 Adaptive Security Appliance
• Cisco ASA 5540 Adaptive Security Appliance
Table 5. Characteristics of Cisco ASA 5500 Series CSC-SSMs
Cisco ASA 5500 Series CSC-SSM-10
Cisco ASA 5500 Series CSC-SSM-20
Technical Specifications
Processor
2.0 GHz
2.4 GHz
Memory
1 GB
2 GB
System Flash
256 MB
256 MB
Cache
256 KB
512 KB
Environmental Operating Ranges
Operating
Temperature
32 to 104ºF (0º to 40ºC)
Relative Humidity
10 to 90 percent, non-condensing
Nonoperating
Temperature
-13 to 158ºF (-25 to 70ºC)
Power Consumption
90W Maximum
Physical Specifications
Dimensions (H x W x D)
1.70 x 6.80 x 11.00 in.
Weight (with Power Supply)
3.00 lb (1.36 kg)
Regulatory and Standards Compliance
Safety
UL 1950, CSA C22.2 No. 950, EN 60950 IEC 60950, AS/NZS3260, TS001
Electromagnetic Compatibility (EMC)
CE marking, FCC Part 15 Class A, AS/NZS 3548 Class A, VCCI Class A, EN55022 Class A, CISPR22 Class A, EN61000-3-2, EN61000-3-3
System Requirements
Table 6 lists system requirements for the Cisco ASA 5500 Series CSC-SSM running CSC Software Version 6.0(b1349).
Table 6. System Requirements
System Requirement
Description
Platforms Supported
• Cisco ASA 5500 Series CSC-SSM-10
• Cisco ASA 5500 Series CSC-SSM-20
Minimum RAM
• Cisco CSC-SSM-10: 1 GB
• Cisco CSC-SSM-10: 2 GB
Ordering Information
To place an order, visit the Cisco Ordering Home Page. See Table 7 for ordering information.
Table 7. Ordering Information
Product Name
Part Number
Cisco ASA 5500 Series Appliance and CSC-SSM Bundles
Cisco ASA 5500 Series CSC-SSM-10 Plus License (Adds URL and Content Filtering, Anti-Phishing, Anti-Spam, 1 Year Subscription Service)
ASA-CSC10-PLUS=
Cisco ASA 5500 Series CSC-SSM-20 Plus License (Adds URL and Content Filtering, Anti-Phishing, Anti-Spam, 1 Year Subscription Service)
ASA-CSC20-PLUS=
Content Security User Licenses (Optional)
Cisco ASA 5500 Series CSC-SSM-10 100-User License (Total Users2)
ASA-CSC10-USR-100=
Cisco ASA 5500 Series CSC-SSM-10 250-User License (Total Users )
ASA-CSC10-USR-250=
Cisco ASA 5500 Series CSC-SSM-10 500-User License (Total Users )
ASA-CSC10-USR-500=
Cisco ASA 5500 Series CSC-SSM-20 750-User License (Total Users )
ASA-CSC20-USR-750=
Cisco ASA 5500 Series CSC-SSM-20 1000-User License (Total Users )
ASA-CSC20-USR-1k=
1Two services are required for the effective operation of the CSC-SSM: Software update service and Cisco SMARTnet®. First year of software update service for base feature set is included in the base price of the product for the first year of service as measured from time of license registration. Customers are required to purchase Cisco maintenance separately for an additional fee (SMARTnet or equivalent, for example). This SMARTnet service fee is not included in the base price of the product for the first or subsequent years.
2The optional user license upgrades are absolute relative to the base user license for each CSC-SSM model. A 250-user upgrade, for example, applied to a CSC SSM-10 will increase the base 50-user license an additional 200 users resulting in a total of a 250-user capacity license.
To Download The Software
Visit the
Cisco Software Center to download Cisco ASA Software, Cisco ADSM Software or Cisco CSC Software.
Service and Support
Cisco offers a wide range of services programs to accelerate customer success. These innovative service programs are delivered through a unique combination of people, processes, tools, and partners, resulting in high levels of customer satisfaction. Cisco services help you to protect your network investment, optimize network operations, and prepare your network for new applications to extend network intelligence and the power of your business. For more information about Cisco Services please visit
http://www.cisco.com/go/services/security.
Table 8 illustrates the unique value of the service and support contracts offered for the Cisco ASA 5500 Series CSC-SSM product. The service programs are comprised of hardware support, software support and content subscription elements. Customers are provided with the first year of the software subscription update service at no additional cost. For years two and beyond, customers will renew their software and subscription contracts for an annual fee beginning one year after the time of license registration. Cisco offers our award-winning SMARTnet support programs covering technical support and hardware support for the CSC-SSM for an additional annual fee. Both the software update service and the Cisco SMARTnet service are required to maximize the protection and optimal performance of your Cisco ASA 5500 Series CSC-SSM solution.
Table 8. Available Support Services
Support Deliverables
Cisco SMARTnet® (SNT) Service
Software Update Service
Cisco ASA 5500 Series Appliance Chassis Support
Registered Access to Cisco.com
Included
-
TAC Technical Support 24 x 7 x 365
Included
-
Operating System Software Releases (Maintenance, Major, Minor)
Included
-
Hardware Replacement Options
Included
-
Cisco ASA 5500 Series CSC-SSM Support
Registered Access to Cisco.com
Included
-
TAC Technical Support 24 x 7 x 365
Included
-
Operating System Software Releases (Maintenance, Major, Minor)
Included
-
Pattern File, Scan Engine and Signature Updates
-
Included
Advance Hardware Replacement Options
Included
-
Service and Support Ordering Information
First year of software update service is included in the product price. Cisco will arrange for initiation of the first year of service with Trend Micro. To order Cisco SMARTnet service, visit the
Cisco Ordering Home Page. See Table 9 for SMARTnet ordering information.
Table 9. Ordering Information
Product Part Number
SMARTnet® Service Part Number
Service Description
ASA5510-CSC10-K9
• CON-SNT-AS1C10K9
• CON-SNTE-AS1C10K9
• CON-SNTP-AS1C10K9
• CON-PREM-AS1C10K9
• CON-OS-AS1C10K9
• CON-OSE-AS1C10K9
• CON-OSP-AS1C10K9
• CON-S2P-AS1C10K9
• SMARTnet 8x5xNBD (Next Business Day)
• SMARTnet 8x5x4
• SMARTnet 24x7x4
• SMARTnet 24x7x2
• SMARTnet onsite 8x5xNBD
• SMARTnet onsite 8x5x4
• SMARTnet onsite 24x7x4
• SMARTnet onsite 24x7x2
ASA5510-CSC20-K9
• CON-SNT-AS1C20K9
• CON-SNTE-AS1C20K9
• CON-SNTP-AS1C20K9
• CON-PREM-AS1C20K9
• CON-OS-AS1C20K9
• CON-OSE-AS1C20K9
• CON-OSP-AS1C20K9
• CON-S2P-AS1C20K9
• SMARTnet 8x5xNBD
• SMARTnet 8x5x4
• SMARTnet 24x7x4
• SMARTnet 24x7x2
• SMARTnet onsite 8x5xNBD
• SMARTnet onsite 8x5x4
• SMARTnet onsite 24x7x4
• SMARTnet onsite 24x7x2
ASA5520-CSC10-K9
• CON-SNT-AS2C10K9
• CON-SNTE-AS2C10K9
• CON-SNTP-AS2C10K9
• CON-PREM-AS2C10K9
• CON-OS-AS2C10K9
• CON-OSE-AS2C10K9
• CON-OSP-AS2C10K9
• CON-S2P-AS2C10K9
• SMARTnet 8x5xNBD
• SMARTnet 8x5x4
• SMARTnet 24x7x4
• SMARTnet 24x7x2
• SMARTnet onsite 8x5xNBD
• SMARTnet onsite 8x5x4
• SMARTnet onsite 24x7x4
• SMARTnet onsite 24x7x2
ASA5520-CSC20-K9
• CON-SNT-AS2C20K9
• CON-SNTE-AS2C20K9
• CON-SNTP-AS2C20K9
• CON-PREM-AS2C20K9
• CON-OS-AS2C20K9
• CON-OSE-AS2C20K9
• CON-OSP-AS2C20K9
• CON-S2P-AS2C20K9
• SMARTnet 8x5xNBD
• SMARTnet 8x5x4
• SMARTnet 24x7x4
• SMARTnet 24x7x2
• SMARTnet onsite 8x5xNBD
• SMARTnet onsite 8x5x4
• SMARTnet onsite 24x7x4
• SMARTnet onsite 24x7x2
ASA-SSM-CSC-10-K9
• CON-SNT-ASCS10K9
• CON-SNTE-ASCS10K9
• CON-SNTP-ASCS10K9
• CON-PREM-ASCS10K9
• CON-OS-ASCS10K9
• CON-OSE-ASCS10K9
• CON-OSP-ASCS10K9
• CON-S2P-ASCS10K9
• SMARTnet 8x5xNBD
• SMARTnet 8x5x4
• SMARTnet 24x7x4
• SMARTnet 24x7x2
• SMARTnet onsite 8x5xNBD
• SMARTnet onsite 8x5x4
• SMARTnet onsite 24x7x4
• SMARTnet onsite 24x7x2
ASA-SSM-CSC-20-K9
• CON-SNT-ASCS20K9
• CON-SNTE-ASCS20K9
• CON-SNTP-ASCS20K9
• CON-PREM-ASCS20K9
• CON-OS-ASCS20K9
• CON-OSE-ASCS20K9
• CON-OSP-ASCS20K9
• CON-S2P-ASCS20K9
• SMARTnet 8x5xNBD
• SMARTnet 8x5x4
• SMARTnet 24x7x4
• SMARTnet 24x7x2
• SMARTnet onsite 8x5xNBD
• SMARTnet onsite 8x5x4
• SMARTnet onsite 24x7x4
• SMARTnet onsite 24x7x2
Additional SMARTnet service contracts are not required for the optional Plus license or the user license upgrades. These support fees are included in the base price of the offering. For the second and subsequent years, the annual software and subscription license renewal will include the license fees necessary to maintain these optional feature packs.
For More Information
For more information, please visit the following links:
) 
) 
) 
) 
) 
) 
) 
) 
) 
) 
) 
Feedback