Cisco 5510 Getting Started Guide - Page 185

Chapter 14 Configuring the CSC SSM About Deploying the Adaptive Security Appliance with the CSC SSM Figure 14-1 CSC SSM Traffic Flow Adaptive Security Appliance Main System Request sent inside Reply forwarded Client modular service policy Diverted Traffic Request forwarded outside Reply sent Server 148386 content security scan CSC SSM In this example, clients could be network users who are accessing a website, downloading files from an FTP server, or retrieving mail from a POP3 server. In this configuration, the traffic flow is as follows: 1. The client initiates a request. 2. The adaptive security appliance receives the request and forwards it to the Internet. 3. When the requested content is retrieved, the adaptive security appliance determines whether its service policies define this content type as one that should be diverted to the CSC SSM for scanning, and does so if appropriate. 4. The CSC SSM receives the content from the adaptive security appliance, scans it and compares it to its latest update of the Trend Micro content filters. 5. If the content is suspicious, the CSC SSM blocks the content and reports the event. If the content is not suspicious, the CSC SSM forwards the requested content back to the adaptive security appliance for routing. 78-19186-01 Cisco ASA 5500 Series Getting Started Guide 14-3