ASA SSM

Security Service Modules adds an additional appliance in to the ASA

Gigabit ethernet port for out of band management

4GE-SSM - not a appliance, just adds 4 gigabit ethernet interfaces to the ASA

SSM-10 - 2.0Ghz, 1 GB RAM

SSM-20 - 2.4Ghz, 2 GB RAM

CSC-SSM-10/20

Content Security and Control SSM - Endpoint Protection - small to midsize businesses

• scans traffic for malware in SMTP, HTTP, Webmail, and FTP (Base License)
• scans traffic for known spyware files (Base License)
• blocks file types using true type technology (Base License)
• filters URL categories to limit web access (Plus License)
• blocks access to specified URLS and know phishing sites (Plus License)
• blocks known spam messages using Trend Micro (Plus License)
• blocks email attachments types using true type (Plus License)
• Up to 120 Mbps throughput

CSC-SSM-10

• base licence: 50 users
• plus licence upgrade options: 50, 100, 250, 500 users

CSC-SSM-20

• base licence: 500 users
• plus licence upgrade options: 500, 750, 1000 users

AIP-SSM-10/20

Advanced Inspection and Prevention SSM - Network Protection - Enterprise businesses

• Integrates an IPS sensor in the ASA
• Detects malicious use of the network
• defends against DOS style attacks
• Uses detection techniques:
  • Signature-based IPS
  • Anomaly-based IPS
  • Policy-based IPS
  • Protocol Analysis

• ASA 5510 + AIP-SSM-10: 150 Mbps IPS Throughput
• ASA 5520 + AIP-SSM-10: 225 Mbps IPS Throughput
• ASA 5520 + AIP-SSM-20: 375 Mbps IPS Throughput
• ASA 5540 + AIP-SSM-20: 450 Mbps IPS Throughput