Cisco S170 Web Manuel utilisateur

Web

Security

Appliance

303417

Cisco S170

Web

Security

Appliance

QUICK START GUIDE

Cisco S170 Web Security Appliance

1Welcome

2Before You Begin

3Document Network Settings

4Plan the Installation

5Install the Appliance in a Rack

6Plug In the Appliance

7Temporarily Change Your IP Address

8Connect to the Appliance

9Power Up the Appliance

10 Log In to the Appliance

11 Run the System Setup Wizard

12 Configure Network Settings

13 Configuration Summary

14 You’re Done!

15 Where to Go from Here

S170_QSG.fm Page 1 Wednesday, March 13, 2013 10:23 PM

Revised: March 13, 2013

Part Number: 78-19643-04

1 Welcome

Thank you for choosing the Cisco S170 Web Security Appliance

(Cisco S170). The Cisco S170 helps organizations secure and

control web traffic.

This guide describes how to physically install the Cisco S170

appliance and use the System Setup Wizard to configure basic

settings. You can also refer to the “Deployment” chapter in the

Cisco IronPort AsyncOS for Web User Guide for information

about how to configure appliance settings.

2 Before You Begin

Before you begin the installation, make sure that you have the

items needed. The following items are included with the Cisco

S170 Web Security Appliance:

• Quick Start Guide (this guide)

• Rails and adaptor kit

• Power cable(s)

• Ethernet cable for connecting the appliance to your

network

• Regulatory Safety and Compliance Information

You will need to provide the following items yourself:

• Rack cabinet enclosure (if rack-mounting the appliance)

• Phillips-head screwdriver for assembling rails

• 10/100 Gigabit Base-T TCP/IP LAN

• Desktop or laptop computer

• Web browser (or SSH and terminal software)

• Network and administrator information for the “Document

Network Settings” section on page 3 and “go live”

configuration

S170_QSG.fm Page 2 Wednesday, March 13, 2013 10:23 PM

3 Document Network Settings

Before you begin, write down the following information about

your network and administrator settings.

Deployment Options

• Web Proxy

–

Transparent with L4

–

Switch Transparent with

WCCP Router

–

Explicit Forward Proxy

• L4 Traffic Monitor

–

Simplex tap/Span

port

–

Duplex tap/Span

port

Network Context

Is there another proxy on the

network:

Yes

Other Proxy IP Address:

Other Proxy Port:

Network Settings

Default System Hostname:

DNS Servers: Use the Internet root DNS

servers.

Use the following DNS

servers (maximum 3):

Network Time Protocol (NTP)

Server:

Time Zone Region:

Time Zone Country:

Time Zone GMT Offset:

S170_QSG.fm Page 3 Wednesday, March 13, 2013 10:23 PM

Interface Settings

Management Port

IP Address:

Network Mask:

Hostname:

Data Port (Optional, see Note)

IP Address:

Network Mask:

Hostname:

Note The Web Proxy can share the management interface. If

configured separately, the Data interface IP address and

the management interface IP address cannot share the

same subnet.

Routes

Internal Routes for Management

Default Gateway:

Static Route Name:

Static Route Destination

Network:

Static Route Gateway:

Internal Routes for Data

Default Gateway:

Static Route Name:

Static Route Destination

Network:

Static Route Gateway:

S170_QSG.fm Page 4 Wednesday, March 13, 2013 10:23 PM

Transparent Routing Device

Device Type: • Layer 4 Switch or No

Device

• WCCP Router

–

Enable standard

service ID

(web-cache).

–

Router Addresses:

_________________

–

Enable router

security.

Password:

_________________

Note When you connect the appliance to a WCCP router, you

might need to configure the Web Security appliance to

create WCCP services after you run the System Setup

Wizard.

Administrative Settings

Administrator Password:

Email System Alerts To:

SMTP Relay Host: (Optional)

AutoSupport: Enable

SenderBase Network

Participation:

Enable

• Limited

• Standard

S170_QSG.fm Page 5 Wednesday, March 13, 2013 10:23 PM

Security Services

L4 Traffic Monitor: • Monitor only

• Block

Acceptable Use Controls: Enable

• IronPort URL Filters

• Cisco IronPort Web

Usage Controls

Web Reputation Filters: Enable

Malware and Spyware Scanning: • Enable Webroot

• Enable McAfee

• Enable Sophos

Action for Detected Malware: • Monitor only

• Block

IronPort Data Security Filtering: Enable

S170_QSG.fm Page 6 Wednesday, March 13, 2013 10:23 PM

4 Plan the Installation

Decide how you are going to configure the Cisco S170 Web

Security Appliance within your network.

The Cisco S170 appliance is typically installed as an additional

layer in the network between clients and the Internet.

Depending on how you deploy the appliance, you may or may

not need a Layer 4 (L4) switch or a WCCP router to direct client

traffic to the appliance.

Deployment options include:

• Transparent Proxy—Web proxy with an L4 switch

• Transparent Proxy—Web proxy with a WCCP router

• Explicit Forward Proxy—Connection to a network switch

• L4 Traffic Monitor—Ethernet tap (simplex or duplex)

–

Simplex Mode: Port T1 receives all outgoing traffic,

and port T2 receives all incoming traffic.

–

Duplex Mode: Port T1 receives all incoming and

outgoing traffic.

T1 T2P2P1

MGMT

CONSOLE

303416

Management PC

Clients L4 Switch/

WCCP

Router

Ethernet tap

Simplex/

Duplex

Firewall Internet

S170_QSG.fm Page 7 Wednesday, March 13, 2013 10:23 PM

Note To monitor true client IP addresses, the L4 traffic

monitor should always be configured inside the firewall

and before NAT (Network Address Translation).

5 Install the Appliance in a Rack

Install the Cisco S170 Web Security Appliance using either the

slide rails or fixed rack mount brackets. For information about

these installation options, see the Cisco 170 Series Hardware

Installation Guide.

Appliance Placement in a Rack

• Ambient Temperature—To prevent the appliance from

overheating, do not operate it in an area that exceeds an

ambient temperature of 104°F (40°C).

• Air Flow—Be sure that there is adequate air flow around

the appliance.

• Mechanical Loading—Be sure that the appliance is level

and stable to avoid any hazardous conditions.

CiscoC170

Web

Security

Appliance

104

303363

Temperature Limits

S170_QSG.fm Page 8 Wednesday, March 13, 2013 10:23 PM

6 Plug In the Appliance

Plug the female end of the power cable into the power supply on

the back panel of the appliance. Plug the male end into an

electrical outlet.

7JZ78-003E

T1 T2P2P1

MGMT

CONSOLE

303418

Plug the Cisco S170 power

cable into an electrical outlet

S170_QSG.fm Page 9 Wednesday, March 13, 2013 10:23 PM

7 Temporarily Change Your IP

Address

To connect to the Cisco S170 appliance, you must temporarily

change the IP address of your computer.

Note Make a note of your current IP configuration settings

because you will need to revert to these settings after

you finish the configuration.

For Windows

Step 1 Connect your laptop to the MGMT management Port

using the Ethernet cable included in the system box.

The Cisco S170 appliance uses the MGMT

management port only.

Step 2 Go to the Start menu and choose Control Panel.

Step 3 Double-click Network and Sharing Center.

Step 4 Click Local Area Connection and then click Properties.

Step 5 Select Internet Protocol (TCP/IP) and then click

Properties.

Step 6 Select Use the Following IP Address.

7JZ78-003E

T1 T2P2P1

MGMT

CONSOLE

MGMT

303414

Management Port

S170_QSG.fm Page 10 Wednesday, March 13, 2013 10:23 PM

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Cisco Matériel réseau

Cisco

Cisco SCE 1000 and Manuel de l'opérateur

Cisco

Cisco VPN 3002 Hardware Client Manager Manuel utilisateur

Cisco

Cisco CE-507 - Content Engine 507 Manuel utilisateur

Cisco

Cisco Secure Network Server 3700 Series Manuel

Cisco

Cisco UCS-FI-6332-16UP Manuel utilisateur

Cisco

Cisco VIP-4R/4T Instructions d'utilisation et d'entretien

Cisco

Cisco NM-1A-T3 - 1port Ds3 Atm Network Module Manuel utilisateur

Cisco

Cisco ONS 15454 Feuille d'instructions

Cisco

Cisco ASR 5000 Mode d’emploi

Cisco

Cisco SOURCEfire 3D500 Manuel utilisateur

Cisco

Cisco Firepower 4100 Series Manuel utilisateur

Cisco

Cisco ONS 15454 SDH Manuel

Cisco

Cisco Gigabit Switch Router Cisco 12012 Manuel utilisateur

Cisco

Cisco CMX 3375 Manuel utilisateur

Cisco

Cisco Physical Access 1125 Appliance Manuel utilisateur

Cisco

Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet... Manuel de l'opérateur

Cisco

Cisco Firepower 9300 Manuel

Cisco

Cisco 2431 - IAD Router Manuel utilisateur

Cisco

Cisco IAD2430 Series Manuel

Cisco

Cisco CTE 1400 Series Manuel utilisateur

Cisco

Cisco MC3810 Series Manuel utilisateur

Cisco

Cisco NCS 1004 Manuel utilisateur

Cisco

Cisco NCS 1001 Mode d’emploi

Cisco

Cisco MERAKI MX75 Manuel utilisateur

Manuels Matériel réseau populaires d'autres marques

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Manuel utilisateur

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Manuel utilisateur

Yudor

Yudor YDS-16 Manuel utilisateur

D-Link

D-Link ShareCenter DNS-320L Manuel utilisateur

Samsung

Samsung ES1642dc Instructions d'utilisation

Honeywell Home

Honeywell Home LTEM-PV Instructions de montage

evertz

evertz 7700 Series Manuel utilisateur

D-Link

D-Link ShareCenter DNS-343 Manuel utilisateur

Asante

Asante AsanteBridge 1012 Manuel utilisateur

FireBrick

FireBrick FB2700 Manuel utilisateur

Audiovox Electronics

Audiovox Electronics ARWH2T Manuel utilisateur

ADC

ADC DSX-1 Manuel

NetComm

NetComm NF2 Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 5620 Manuel utilisateur

Dell EMC

Dell EMC XC6420 Series Manuel utilisateur

Lanner

Lanner NCA-1020A Manuel utilisateur

Allied Telesis

Allied Telesis AT-TN121-A Manuel utilisateur

Arista

Arista CCA-ETM-Q12 Manuel utilisateur