Cisco S170 Web Bedienungsanleitung

Web

Security

Appliance

303417

Cisco S170

Web

Security

Appliance

QUICK START GUIDE

Cisco S170 Web Security Appliance

1Welcome

2Before You Begin

3Document Network Settings

4Plan the Installation

5Install the Appliance in a Rack

6Plug In the Appliance

7Temporarily Change Your IP Address

8Connect to the Appliance

9Power Up the Appliance

10 Log In to the Appliance

11 Run the System Setup Wizard

12 Configure Network Settings

13 Configuration Summary

14 You’re Done!

15 Where to Go from Here

S170_QSG.fm Page 1 Wednesday, March 13, 2013 10:23 PM

Revised: March 13, 2013

Part Number: 78-19643-04

1 Welcome

Thank you for choosing the Cisco S170 Web Security Appliance

(Cisco S170). The Cisco S170 helps organizations secure and

control web traffic.

This guide describes how to physically install the Cisco S170

appliance and use the System Setup Wizard to configure basic

settings. You can also refer to the “Deployment” chapter in the

Cisco IronPort AsyncOS for Web User Guide for information

about how to configure appliance settings.

2 Before You Begin

Before you begin the installation, make sure that you have the

items needed. The following items are included with the Cisco

S170 Web Security Appliance:

• Quick Start Guide (this guide)

• Rails and adaptor kit

• Power cable(s)

• Ethernet cable for connecting the appliance to your

network

• Regulatory Safety and Compliance Information

You will need to provide the following items yourself:

• Rack cabinet enclosure (if rack-mounting the appliance)

• Phillips-head screwdriver for assembling rails

• 10/100 Gigabit Base-T TCP/IP LAN

• Desktop or laptop computer

• Web browser (or SSH and terminal software)

• Network and administrator information for the “Document

Network Settings” section on page 3 and “go live”

configuration

S170_QSG.fm Page 2 Wednesday, March 13, 2013 10:23 PM

3 Document Network Settings

Before you begin, write down the following information about

your network and administrator settings.

Deployment Options

• Web Proxy

–

Transparent with L4

–

Switch Transparent with

WCCP Router

–

Explicit Forward Proxy

• L4 Traffic Monitor

–

Simplex tap/Span

port

–

Duplex tap/Span

port

Network Context

Is there another proxy on the

network:

Yes

Other Proxy IP Address:

Other Proxy Port:

Network Settings

Default System Hostname:

DNS Servers: Use the Internet root DNS

servers.

Use the following DNS

servers (maximum 3):

Network Time Protocol (NTP)

Server:

Time Zone Region:

Time Zone Country:

Time Zone GMT Offset:

S170_QSG.fm Page 3 Wednesday, March 13, 2013 10:23 PM

Interface Settings

Management Port

IP Address:

Network Mask:

Hostname:

Data Port (Optional, see Note)

IP Address:

Network Mask:

Hostname:

Note The Web Proxy can share the management interface. If

configured separately, the Data interface IP address and

the management interface IP address cannot share the

same subnet.

Routes

Internal Routes for Management

Default Gateway:

Static Route Name:

Static Route Destination

Network:

Static Route Gateway:

Internal Routes for Data

Default Gateway:

Static Route Name:

Static Route Destination

Network:

Static Route Gateway:

S170_QSG.fm Page 4 Wednesday, March 13, 2013 10:23 PM

Transparent Routing Device

Device Type: • Layer 4 Switch or No

Device

• WCCP Router

–

Enable standard

service ID

(web-cache).

–

Router Addresses:

_________________

–

Enable router

security.

Password:

_________________

Note When you connect the appliance to a WCCP router, you

might need to configure the Web Security appliance to

create WCCP services after you run the System Setup

Wizard.

Administrative Settings

Administrator Password:

Email System Alerts To:

SMTP Relay Host: (Optional)

AutoSupport: Enable

SenderBase Network

Participation:

Enable

• Limited

• Standard

S170_QSG.fm Page 5 Wednesday, March 13, 2013 10:23 PM

Security Services

L4 Traffic Monitor: • Monitor only

• Block

Acceptable Use Controls: Enable

• IronPort URL Filters

• Cisco IronPort Web

Usage Controls

Web Reputation Filters: Enable

Malware and Spyware Scanning: • Enable Webroot

• Enable McAfee

• Enable Sophos

Action for Detected Malware: • Monitor only

• Block

IronPort Data Security Filtering: Enable

S170_QSG.fm Page 6 Wednesday, March 13, 2013 10:23 PM

4 Plan the Installation

Decide how you are going to configure the Cisco S170 Web

Security Appliance within your network.

The Cisco S170 appliance is typically installed as an additional

layer in the network between clients and the Internet.

Depending on how you deploy the appliance, you may or may

not need a Layer 4 (L4) switch or a WCCP router to direct client

traffic to the appliance.

Deployment options include:

• Transparent Proxy—Web proxy with an L4 switch

• Transparent Proxy—Web proxy with a WCCP router

• Explicit Forward Proxy—Connection to a network switch

• L4 Traffic Monitor—Ethernet tap (simplex or duplex)

–

Simplex Mode: Port T1 receives all outgoing traffic,

and port T2 receives all incoming traffic.

–

Duplex Mode: Port T1 receives all incoming and

outgoing traffic.

T1 T2P2P1

MGMT

CONSOLE

303416

Management PC

Clients L4 Switch/

WCCP

Router

Ethernet tap

Simplex/

Duplex

Firewall Internet

S170_QSG.fm Page 7 Wednesday, March 13, 2013 10:23 PM

Note To monitor true client IP addresses, the L4 traffic

monitor should always be configured inside the firewall

and before NAT (Network Address Translation).

5 Install the Appliance in a Rack

Install the Cisco S170 Web Security Appliance using either the

slide rails or fixed rack mount brackets. For information about

these installation options, see the Cisco 170 Series Hardware

Installation Guide.

Appliance Placement in a Rack

• Ambient Temperature—To prevent the appliance from

overheating, do not operate it in an area that exceeds an

ambient temperature of 104°F (40°C).

• Air Flow—Be sure that there is adequate air flow around

the appliance.

• Mechanical Loading—Be sure that the appliance is level

and stable to avoid any hazardous conditions.

CiscoC170

Web

Security

Appliance

104

303363

Temperature Limits

S170_QSG.fm Page 8 Wednesday, March 13, 2013 10:23 PM

6 Plug In the Appliance

Plug the female end of the power cable into the power supply on

the back panel of the appliance. Plug the male end into an

electrical outlet.

7JZ78-003E

T1 T2P2P1

MGMT

CONSOLE

303418

Plug the Cisco S170 power

cable into an electrical outlet

S170_QSG.fm Page 9 Wednesday, March 13, 2013 10:23 PM

7 Temporarily Change Your IP

Address

To connect to the Cisco S170 appliance, you must temporarily

change the IP address of your computer.

Note Make a note of your current IP configuration settings

because you will need to revert to these settings after

you finish the configuration.

For Windows

Step 1 Connect your laptop to the MGMT management Port

using the Ethernet cable included in the system box.

The Cisco S170 appliance uses the MGMT

management port only.

Step 2 Go to the Start menu and choose Control Panel.

Step 3 Double-click Network and Sharing Center.

Step 4 Click Local Area Connection and then click Properties.

Step 5 Select Internet Protocol (TCP/IP) and then click

Properties.

Step 6 Select Use the Following IP Address.

7JZ78-003E

T1 T2P2P1

MGMT

CONSOLE

MGMT

303414

Management Port

S170_QSG.fm Page 10 Wednesday, March 13, 2013 10:23 PM

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere Cisco Netzwerk-Hardware Handbücher

Cisco

Cisco MA-UMNT-MR-A3 Bedienungsanleitung

Cisco

Cisco CVPN3002-K9 - Fast Ethernet VPN Gateway Bedienungsanleitung

Cisco

Cisco Content Engine 510 Bedienungsanleitung

Cisco

Cisco OSM-12CT3/T1 - Optical Services Module... Kurzanleitung

Cisco

Cisco Physical Access 1125 Appliance Bedienungsanleitung

Cisco

Cisco Aironet 340 Series Bedienungsanleitung

Cisco

Cisco AIR-BR1410A-A-K9 - Aironet 1410 Wireless... Kurzanleitung

Cisco

Cisco ISA500 Series Bedienungsanleitung

Cisco

Cisco Firepower 4100 Series Bedienungsanleitung

Cisco

Cisco Cisco 5400 ENCS Handbuch

Cisco

Cisco Secure Network Server 3700 Series Handbuch

Cisco

Cisco IP/VC 3500 Originalbetriebsanleitung

Cisco

Cisco ONS 15454 Bedienungsanleitung

Cisco

Cisco GS7000 Bedienungsanleitung

Cisco

Cisco Wide Area Application Engine 612 Handbuch

Cisco

Cisco Firepower 1010 Bedienungsanleitung

Cisco

Cisco Mc3810 - 16MB Flash Memory Kurzanleitung

Cisco

Cisco Engine 611 Bedienungsanleitung

Cisco

Cisco GS7000 Betriebsanleitung

Cisco

Cisco Versatile Interface Processor (VIP6-80)... Bedienerhandbuch

Cisco

Cisco Firepower 1010 Series Handbuch

Cisco

Cisco MDS 9500 Series Handbuch

Cisco

Cisco WAE-674-K9 - Wide Area Application Engine... Handbuch

Cisco

Cisco Cisco ASA Series Bedienungsanleitung

Beliebte Netzwerk-Hardware Handbücher anderer Marken

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Bedienungsanleitung

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Bedienungsanleitung

Yudor

Yudor YDS-16 Bedienungsanleitung

D-Link

D-Link ShareCenter DNS-320L Bedienungsanleitung

Samsung

Samsung ES1642dc Gebrauchsanweisung

Honeywell Home

Honeywell Home LTEM-PV Montageanleitung

evertz

evertz 7700 Series Bedienungsanleitung

D-Link

D-Link ShareCenter DNS-343 Bedienungsanleitung

Asante

Asante AsanteBridge 1012 Bedienungsanleitung

FireBrick

FireBrick FB2700 Bedienungsanleitung

Audiovox Electronics

Audiovox Electronics ARWH2T Bedienungsanleitung

ADC

ADC DSX-1 Handbuch

NetComm

NetComm NF2 Bedienungsanleitung

Alcatel-Lucent

Alcatel-Lucent 5620 Bedienungsanleitung

Dell EMC

Dell EMC XC6420 Series Bedienungsanleitung

Lanner

Lanner NCA-1020A Bedienungsanleitung

Allied Telesis

Allied Telesis AT-TN121-A Bedienungsanleitung

Arista

Arista CCA-ETM-Q12 Bedienungsanleitung