Cisco S170 Web Manuale utente

Web

Security

Appliance

303417

Cisco S170

Web

Security

Appliance

QUICK START GUIDE

Cisco S170 Web Security Appliance

1Welcome

2Before You Begin

3Document Network Settings

4Plan the Installation

5Install the Appliance in a Rack

6Plug In the Appliance

7Temporarily Change Your IP Address

8Connect to the Appliance

9Power Up the Appliance

10 Log In to the Appliance

11 Run the System Setup Wizard

12 Configure Network Settings

13 Configuration Summary

14 You’re Done!

15 Where to Go from Here

S170_QSG.fm Page 1 Wednesday, March 13, 2013 10:23 PM

Revised: March 13, 2013

Part Number: 78-19643-04

1 Welcome

Thank you for choosing the Cisco S170 Web Security Appliance

(Cisco S170). The Cisco S170 helps organizations secure and

control web traffic.

This guide describes how to physically install the Cisco S170

appliance and use the System Setup Wizard to configure basic

settings. You can also refer to the “Deployment” chapter in the

Cisco IronPort AsyncOS for Web User Guide for information

about how to configure appliance settings.

2 Before You Begin

Before you begin the installation, make sure that you have the

items needed. The following items are included with the Cisco

S170 Web Security Appliance:

• Quick Start Guide (this guide)

• Rails and adaptor kit

• Power cable(s)

• Ethernet cable for connecting the appliance to your

network

• Regulatory Safety and Compliance Information

You will need to provide the following items yourself:

• Rack cabinet enclosure (if rack-mounting the appliance)

• Phillips-head screwdriver for assembling rails

• 10/100 Gigabit Base-T TCP/IP LAN

• Desktop or laptop computer

• Web browser (or SSH and terminal software)

• Network and administrator information for the “Document

Network Settings” section on page 3 and “go live”

configuration

S170_QSG.fm Page 2 Wednesday, March 13, 2013 10:23 PM

3 Document Network Settings

Before you begin, write down the following information about

your network and administrator settings.

Deployment Options

• Web Proxy

–

Transparent with L4

–

Switch Transparent with

WCCP Router

–

Explicit Forward Proxy

• L4 Traffic Monitor

–

Simplex tap/Span

port

–

Duplex tap/Span

port

Network Context

Is there another proxy on the

network:

Yes

Other Proxy IP Address:

Other Proxy Port:

Network Settings

Default System Hostname:

DNS Servers: Use the Internet root DNS

servers.

Use the following DNS

servers (maximum 3):

Network Time Protocol (NTP)

Server:

Time Zone Region:

Time Zone Country:

Time Zone GMT Offset:

S170_QSG.fm Page 3 Wednesday, March 13, 2013 10:23 PM

Interface Settings

Management Port

IP Address:

Network Mask:

Hostname:

Data Port (Optional, see Note)

IP Address:

Network Mask:

Hostname:

Note The Web Proxy can share the management interface. If

configured separately, the Data interface IP address and

the management interface IP address cannot share the

same subnet.

Routes

Internal Routes for Management

Default Gateway:

Static Route Name:

Static Route Destination

Network:

Static Route Gateway:

Internal Routes for Data

Default Gateway:

Static Route Name:

Static Route Destination

Network:

Static Route Gateway:

S170_QSG.fm Page 4 Wednesday, March 13, 2013 10:23 PM

Transparent Routing Device

Device Type: • Layer 4 Switch or No

Device

• WCCP Router

–

Enable standard

service ID

(web-cache).

–

Router Addresses:

_________________

–

Enable router

security.

Password:

_________________

Note When you connect the appliance to a WCCP router, you

might need to configure the Web Security appliance to

create WCCP services after you run the System Setup

Wizard.

Administrative Settings

Administrator Password:

Email System Alerts To:

SMTP Relay Host: (Optional)

AutoSupport: Enable

SenderBase Network

Participation:

Enable

• Limited

• Standard

S170_QSG.fm Page 5 Wednesday, March 13, 2013 10:23 PM

Security Services

L4 Traffic Monitor: • Monitor only

• Block

Acceptable Use Controls: Enable

• IronPort URL Filters

• Cisco IronPort Web

Usage Controls

Web Reputation Filters: Enable

Malware and Spyware Scanning: • Enable Webroot

• Enable McAfee

• Enable Sophos

Action for Detected Malware: • Monitor only

• Block

IronPort Data Security Filtering: Enable

S170_QSG.fm Page 6 Wednesday, March 13, 2013 10:23 PM

4 Plan the Installation

Decide how you are going to configure the Cisco S170 Web

Security Appliance within your network.

The Cisco S170 appliance is typically installed as an additional

layer in the network between clients and the Internet.

Depending on how you deploy the appliance, you may or may

not need a Layer 4 (L4) switch or a WCCP router to direct client

traffic to the appliance.

Deployment options include:

• Transparent Proxy—Web proxy with an L4 switch

• Transparent Proxy—Web proxy with a WCCP router

• Explicit Forward Proxy—Connection to a network switch

• L4 Traffic Monitor—Ethernet tap (simplex or duplex)

–

Simplex Mode: Port T1 receives all outgoing traffic,

and port T2 receives all incoming traffic.

–

Duplex Mode: Port T1 receives all incoming and

outgoing traffic.

T1 T2P2P1

MGMT

CONSOLE

303416

Management PC

Clients L4 Switch/

WCCP

Router

Ethernet tap

Simplex/

Duplex

Firewall Internet

S170_QSG.fm Page 7 Wednesday, March 13, 2013 10:23 PM

Note To monitor true client IP addresses, the L4 traffic

monitor should always be configured inside the firewall

and before NAT (Network Address Translation).

5 Install the Appliance in a Rack

Install the Cisco S170 Web Security Appliance using either the

slide rails or fixed rack mount brackets. For information about

these installation options, see the Cisco 170 Series Hardware

Installation Guide.

Appliance Placement in a Rack

• Ambient Temperature—To prevent the appliance from

overheating, do not operate it in an area that exceeds an

ambient temperature of 104°F (40°C).

• Air Flow—Be sure that there is adequate air flow around

the appliance.

• Mechanical Loading—Be sure that the appliance is level

and stable to avoid any hazardous conditions.

CiscoC170

Web

Security

Appliance

104

303363

Temperature Limits

S170_QSG.fm Page 8 Wednesday, March 13, 2013 10:23 PM

6 Plug In the Appliance

Plug the female end of the power cable into the power supply on

the back panel of the appliance. Plug the male end into an

electrical outlet.

7JZ78-003E

T1 T2P2P1

MGMT

CONSOLE

303418

Plug the Cisco S170 power

cable into an electrical outlet

S170_QSG.fm Page 9 Wednesday, March 13, 2013 10:23 PM

7 Temporarily Change Your IP

Address

To connect to the Cisco S170 appliance, you must temporarily

change the IP address of your computer.

Note Make a note of your current IP configuration settings

because you will need to revert to these settings after

you finish the configuration.

For Windows

Step 1 Connect your laptop to the MGMT management Port

using the Ethernet cable included in the system box.

The Cisco S170 appliance uses the MGMT

management port only.

Step 2 Go to the Start menu and choose Control Panel.

Step 3 Double-click Network and Sharing Center.

Step 4 Click Local Area Connection and then click Properties.

Step 5 Select Internet Protocol (TCP/IP) and then click

Properties.

Step 6 Select Use the Following IP Address.

7JZ78-003E

T1 T2P2P1

MGMT

CONSOLE

MGMT

303414

Management Port

S170_QSG.fm Page 10 Wednesday, March 13, 2013 10:23 PM

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali Cisco Hardware di rete

Cisco

Cisco PC4000 Manuale utente

Cisco

Cisco Aironet 1040 Series Manuale utente

Cisco

Cisco Firepower 4100 Series Manuale utente

Cisco

Cisco NCS 4206 Manuale di istruzioni

Cisco

Cisco ISA500 Series Manuale utente

Cisco

Cisco MultiRIP Ethernet Card Manuale utente

Cisco

Cisco ONS 15454 Manuale di istruzioni

Cisco

Cisco 8011-2X2XP4L Manuale

Cisco

Cisco NCS 4201 Manuale

Cisco

Cisco CVPN3002-K9 - Fast Ethernet VPN Gateway Manuale utente

Cisco

Cisco IPS-4240-K9 - Intrusion Protection Sys 4240 Manuale utente

Cisco

Cisco CiscoWorks Wireless LAN Solution Engine Manuale dell'operatore

Cisco

Cisco IDS 4210 - Intrusion Detection Sys 4210... Manuale utente

Cisco

Cisco 3600 Series Istruzioni operative e di sicurezza

Cisco

Cisco WAE-674-K9 - Wide Area Application Engine... Manuale

Cisco

Cisco Nexus 93600CD-GX Manuale

Cisco

Cisco ISE - Line Card ISE Manuale utente

Cisco

Cisco MERAKI MX85 Series Manuale

Cisco

Cisco Catalyst 2960-XR Manuale utente

Cisco

Cisco IAD1101 Manuale utente

Cisco

Cisco GRP= Guida rapida

Cisco

Cisco Aironet 1430 Series Manuale utente

Cisco

Cisco CSS11501 - 100Mbps Ethernet Load Balancing... Manuale utente

Cisco

Cisco Firepower 1010 Manuale utente

Manuali Hardware di rete popolari di altre marche

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Manuale utente

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Manuale utente

Yudor

Yudor YDS-16 Manuale utente

D-Link

D-Link ShareCenter DNS-320L Manuale utente

Samsung

Samsung ES1642dc Istruzioni per l’uso

Honeywell Home

Honeywell Home LTEM-PV Istruzioni per il montaggio

evertz

evertz 7700 Series Manuale utente

D-Link

D-Link ShareCenter DNS-343 Manuale utente

Asante

Asante AsanteBridge 1012 Manuale utente

FireBrick

FireBrick FB2700 Manuale utente

Audiovox Electronics

Audiovox Electronics ARWH2T Manuale utente

ADC

ADC DSX-1 Manuale

NetComm

NetComm NF2 Manuale utente

Alcatel-Lucent

Alcatel-Lucent 5620 Manuale utente

Dell EMC

Dell EMC XC6420 Series Manuale utente

Lanner

Lanner NCA-1020A Manuale utente

Allied Telesis

Allied Telesis AT-TN121-A Manuale utente

Arista

Arista CCA-ETM-Q12 Manuale utente