Cisco S170 Web Manual de usuario

Web

Security

Appliance

303417

Cisco S170

Web

Security

Appliance

QUICK START GUIDE

Cisco S170 Web Security Appliance

1Welcome

2Before You Begin

3Document Network Settings

4Plan the Installation

5Install the Appliance in a Rack

6Plug In the Appliance

7Temporarily Change Your IP Address

8Connect to the Appliance

9Power Up the Appliance

10 Log In to the Appliance

11 Run the System Setup Wizard

12 Configure Network Settings

13 Configuration Summary

14 You’re Done!

15 Where to Go from Here

S170_QSG.fm Page 1 Wednesday, March 13, 2013 10:23 PM

Revised: March 13, 2013

Part Number: 78-19643-04

1 Welcome

Thank you for choosing the Cisco S170 Web Security Appliance

(Cisco S170). The Cisco S170 helps organizations secure and

control web traffic.

This guide describes how to physically install the Cisco S170

appliance and use the System Setup Wizard to configure basic

settings. You can also refer to the “Deployment” chapter in the

Cisco IronPort AsyncOS for Web User Guide for information

about how to configure appliance settings.

2 Before You Begin

Before you begin the installation, make sure that you have the

items needed. The following items are included with the Cisco

S170 Web Security Appliance:

• Quick Start Guide (this guide)

• Rails and adaptor kit

• Power cable(s)

• Ethernet cable for connecting the appliance to your

network

• Regulatory Safety and Compliance Information

You will need to provide the following items yourself:

• Rack cabinet enclosure (if rack-mounting the appliance)

• Phillips-head screwdriver for assembling rails

• 10/100 Gigabit Base-T TCP/IP LAN

• Desktop or laptop computer

• Web browser (or SSH and terminal software)

• Network and administrator information for the “Document

Network Settings” section on page 3 and “go live”

configuration

S170_QSG.fm Page 2 Wednesday, March 13, 2013 10:23 PM

3 Document Network Settings

Before you begin, write down the following information about

your network and administrator settings.

Deployment Options

• Web Proxy

–

Transparent with L4

–

Switch Transparent with

WCCP Router

–

Explicit Forward Proxy

• L4 Traffic Monitor

–

Simplex tap/Span

port

–

Duplex tap/Span

port

Network Context

Is there another proxy on the

network:

Yes

Other Proxy IP Address:

Other Proxy Port:

Network Settings

Default System Hostname:

DNS Servers: Use the Internet root DNS

servers.

Use the following DNS

servers (maximum 3):

Network Time Protocol (NTP)

Server:

Time Zone Region:

Time Zone Country:

Time Zone GMT Offset:

S170_QSG.fm Page 3 Wednesday, March 13, 2013 10:23 PM

Interface Settings

Management Port

IP Address:

Network Mask:

Hostname:

Data Port (Optional, see Note)

IP Address:

Network Mask:

Hostname:

Note The Web Proxy can share the management interface. If

configured separately, the Data interface IP address and

the management interface IP address cannot share the

same subnet.

Routes

Internal Routes for Management

Default Gateway:

Static Route Name:

Static Route Destination

Network:

Static Route Gateway:

Internal Routes for Data

Default Gateway:

Static Route Name:

Static Route Destination

Network:

Static Route Gateway:

S170_QSG.fm Page 4 Wednesday, March 13, 2013 10:23 PM

Transparent Routing Device

Device Type: • Layer 4 Switch or No

Device

• WCCP Router

–

Enable standard

service ID

(web-cache).

–

Router Addresses:

_________________

–

Enable router

security.

Password:

_________________

Note When you connect the appliance to a WCCP router, you

might need to configure the Web Security appliance to

create WCCP services after you run the System Setup

Wizard.

Administrative Settings

Administrator Password:

Email System Alerts To:

SMTP Relay Host: (Optional)

AutoSupport: Enable

SenderBase Network

Participation:

Enable

• Limited

• Standard

S170_QSG.fm Page 5 Wednesday, March 13, 2013 10:23 PM

Security Services

L4 Traffic Monitor: • Monitor only

• Block

Acceptable Use Controls: Enable

• IronPort URL Filters

• Cisco IronPort Web

Usage Controls

Web Reputation Filters: Enable

Malware and Spyware Scanning: • Enable Webroot

• Enable McAfee

• Enable Sophos

Action for Detected Malware: • Monitor only

• Block

IronPort Data Security Filtering: Enable

S170_QSG.fm Page 6 Wednesday, March 13, 2013 10:23 PM

4 Plan the Installation

Decide how you are going to configure the Cisco S170 Web

Security Appliance within your network.

The Cisco S170 appliance is typically installed as an additional

layer in the network between clients and the Internet.

Depending on how you deploy the appliance, you may or may

not need a Layer 4 (L4) switch or a WCCP router to direct client

traffic to the appliance.

Deployment options include:

• Transparent Proxy—Web proxy with an L4 switch

• Transparent Proxy—Web proxy with a WCCP router

• Explicit Forward Proxy—Connection to a network switch

• L4 Traffic Monitor—Ethernet tap (simplex or duplex)

–

Simplex Mode: Port T1 receives all outgoing traffic,

and port T2 receives all incoming traffic.

–

Duplex Mode: Port T1 receives all incoming and

outgoing traffic.

T1 T2P2P1

MGMT

CONSOLE

303416

Management PC

Clients L4 Switch/

WCCP

Router

Ethernet tap

Simplex/

Duplex

Firewall Internet

S170_QSG.fm Page 7 Wednesday, March 13, 2013 10:23 PM

Note To monitor true client IP addresses, the L4 traffic

monitor should always be configured inside the firewall

and before NAT (Network Address Translation).

5 Install the Appliance in a Rack

Install the Cisco S170 Web Security Appliance using either the

slide rails or fixed rack mount brackets. For information about

these installation options, see the Cisco 170 Series Hardware

Installation Guide.

Appliance Placement in a Rack

• Ambient Temperature—To prevent the appliance from

overheating, do not operate it in an area that exceeds an

ambient temperature of 104°F (40°C).

• Air Flow—Be sure that there is adequate air flow around

the appliance.

• Mechanical Loading—Be sure that the appliance is level

and stable to avoid any hazardous conditions.

CiscoC170

Web

Security

Appliance

104

303363

Temperature Limits

S170_QSG.fm Page 8 Wednesday, March 13, 2013 10:23 PM

6 Plug In the Appliance

Plug the female end of the power cable into the power supply on

the back panel of the appliance. Plug the male end into an

electrical outlet.

7JZ78-003E

T1 T2P2P1

MGMT

CONSOLE

303418

Plug the Cisco S170 power

cable into an electrical outlet

S170_QSG.fm Page 9 Wednesday, March 13, 2013 10:23 PM

7 Temporarily Change Your IP

Address

To connect to the Cisco S170 appliance, you must temporarily

change the IP address of your computer.

Note Make a note of your current IP configuration settings

because you will need to revert to these settings after

you finish the configuration.

For Windows

Step 1 Connect your laptop to the MGMT management Port

using the Ethernet cable included in the system box.

The Cisco S170 appliance uses the MGMT

management port only.

Step 2 Go to the Start menu and choose Control Panel.

Step 3 Double-click Network and Sharing Center.

Step 4 Click Local Area Connection and then click Properties.

Step 5 Select Internet Protocol (TCP/IP) and then click

Properties.

Step 6 Select Use the Following IP Address.

7JZ78-003E

T1 T2P2P1

MGMT

CONSOLE

MGMT

303414

Management Port

S170_QSG.fm Page 10 Wednesday, March 13, 2013 10:23 PM

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Hardware de red de Cisco

Cisco

Cisco Meraki Catalyst 9300/X/L-M Series Manual de usuario

Cisco

Cisco Mc3810 - 16MB Flash Memory Guía rápida

Cisco

Cisco FirePOWER 8000 Series Manual de usuario

Cisco

Cisco 220 Series Smart Plus Manual de usuario

Cisco

Cisco CATALYST 6000 Manual de instalación y operación

Cisco

Cisco SCE 1000 and Manual del operador

Cisco

Cisco ONS 15454 Manual de instrucciones

Cisco

Cisco ASR 9000 Series Manual de usuario

Cisco

Cisco Physical Access 1125 Appliance Manual de usuario

Cisco

Cisco 7606 Manual de usuario

Cisco

Cisco IPS-4240-K9 - Intrusion Protection Sys 4240 Manual de usuario

Cisco

Cisco Nexus 93180LC-EX Manual de usuario

Cisco

Cisco Catalyst 8300 Series Manual

Cisco

Cisco Catalyst 8510 Manual de usuario

Cisco

Cisco C8510MSR-SKIT-DC - Catalyst 8510 Multiservice Switch... Manual de usuario

Cisco

Cisco Aironet 340 Series Manual de usuario

Cisco

Cisco NCS 1000 Manual de usuario

Cisco

Cisco MultiRIP Ethernet Card Manual de usuario

Cisco

Cisco Cisco ASA Series Manual de usuario

Cisco

Cisco RSP7000 Manual de instrucciones

Cisco

Cisco Meraki MX68 Manual

Cisco

Cisco UCS-FI-6332-16UP Manual de usuario

Cisco

Cisco ASR 5000 Manual de instrucciones

Cisco

Cisco o UCS X440p Instrucciones de instalación y mantenimiento

Manuales populares de Hardware de red de otras marcas

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Manual de usuario

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Manual de usuario

Yudor

Yudor YDS-16 Manual de usuario

D-Link

D-Link ShareCenter DNS-320L Manual de usuario

Samsung

Samsung ES1642dc Instrucciones de uso

Honeywell Home

Honeywell Home LTEM-PV Instrucciones de montaje

evertz

evertz 7700 Series Manual de usuario

D-Link

D-Link ShareCenter DNS-343 Manual de usuario

Asante

Asante AsanteBridge 1012 Manual de usuario

FireBrick

FireBrick FB2700 Manual de usuario

Audiovox Electronics

Audiovox Electronics ARWH2T Manual de usuario

ADC

ADC DSX-1 Manual

NetComm

NetComm NF2 Manual de usuario

Alcatel-Lucent

Alcatel-Lucent 5620 Manual de usuario

Dell EMC

Dell EMC XC6420 Series Manual de usuario

Lanner

Lanner NCA-1020A Manual de usuario

Allied Telesis

Allied Telesis AT-TN121-A Manual de usuario

Arista

Arista CCA-ETM-Q12 Manual de usuario