Traffic scanning with ASA-5520 and CSC module

May 23, 2007 0 Replies

Hello,



I have an ASA-5520 here with CSC-10 module. I'd like to filter SMTP traffic (which works at the moment, unfortunately not with the results we wish) as well as http traffic.



Somehow I don't get it managed to do so.



Help is greatly appreciated -- thanks in advance. Here the lines from it's config that come into play...



ASA Version 7.2(2)10 ! class-map inside-class match port tcp eq smtp class-map inspection_default match default-inspection-traffic class-map outside-class match port tcp eq smtp class-map outside-ftp match port tcp eq ftp ! ! policy-map type inspect dns global_dns_map parameters message-length maximum 2048 policy-map global_policy class inspection_default inspect ftp inspect esmtp inspect http policy-map outside-policy class outside-class inspect esmtp csc fail-open policy-map inside-policy class inside-class inspect esmtp csc fail-open ! service-policy global_policy global service-policy outside-policy interface outside service-policy inside-policy interface inside


Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required