Cisco ISA550 Mode d’emploi

Cisco ISA500 Series Integrated Security Appliances Administration Guide 19

Getting Started

This chapter provides an overview of the Cisco ISA500 Series Integrated Security

Appliance and describes basic configuration tasks to help you configure your

security appliance. It includes the following sections:

•Introduction, page 20

•Product Overview, page 21

•Getting Started with the Configuration Utility, page 25

•Factory Default Settings, page 30

•Performing Basic Configuration Tasks, page 32

NOTE For information about how to physically install your security appliance, see the

Cisco ISA500 Series Integrated Security Appliances Quick Start Guide at:

www.cisco.com/go/isa500resources.

Getting Started

Introduction

Cisco ISA500 Series Integrated Security Appliances Administration Guide 20

Introduction

Thank you for choosing the Cisco ISA500 Series Integrated Security Appliance, a

member of the Small Business Family. The ISA500 Series is a set of Unified Threat

Management (UTM) security appliances that provide business-class security

gateway solutions with dual WAN, DMZ, zone-based firewall, site-to-site and

remote access VPN (including IPsec Remote Access, Teleworker VPN Client, and

SSL VPN) support, and Internet threat protection, such as Intrusion Prevention

(IPS), Anti-Virus, Application Control, Web URL Filtering, Web Reputation Filtering,

Spam Filter, and Network Reputation. The ISA550W and ISA570W include

802.11b/g/n access point capabilities.

The following table lists the available model numbers.

NOTE Any configurable port can be configured to be a WAN, DMZ, or LAN port. Only one

configurable port can be configured as a WAN port at a time. Up to 4 configurable

ports can be configured as DMZ ports.

Model Description Configuration

ISA550 Cisco ISA550 Integrated

Security Appliance

1 WAN port, 2 LAN ports,

4 configurable ports, and 1 USB 2.0

port

ISA550W Cisco ISA550 Integrated

Security Appliance with

Wi-Fi

1 WAN port, 2 LAN ports,

4 configurable ports, 1 USB 2.0 port,

and 802.11b/g/n

ISA570 Cisco ISA570 Integrated

Security Appliance

1 WAN port, 4 LAN ports,

5 configurable ports, and 1 USB 2.0

port

ISA570W Cisco ISA570 Integrated

Security Appliance with

Wi-Fi

1 WAN port, 4 LAN ports,

5 configurable ports, 1 USB 2.0 port,

and 802.11b/g/n

Getting Started

Product Overview

Cisco ISA500 Series Integrated Security Appliances Administration Guide 21

Product Overview

Before you use the security appliance, become familiar with the lights on the front

panel and the ports on the rear panel.

•Front Panel, page 21

•Back Panel, page 23

Front Panel

ISA550 Front Panel

ISA550W Front Panel

ISA570 Front Panel

ISA570W Front Panel

282351

Small Business

VPN USB WAN LAN CONFIGURABLEPOWER/SYS

SPEED

LINK /ACT

234567

ISA550 Cisco

281983

Small Business

VPN USB WAN LAN CONFIGURABLEPOWER/SYS

SPEED

LINK /ACT

234567

WLAN

ISA550W Cisco

Small Business

VPN USB WAN LAN CONFIGURABLEPOWER/SYS

SPEED

LINK /ACT

910

2345678

282350

ISA570 Cisco

Small Business

VPN USB WAN LAN CONFIGURABLEPOWER/SYS

SPEED

LINK /ACT

910

2345678

WLAN

281980

ISA570W Cisco

Getting Started

Product Overview

Cisco ISA500 Series Integrated Security Appliances Administration Guide 22

Front Panel Lights

The following table describes the lights on the front panel of the security

appliance. These lights are used for monitoring system activity.

Light Description

POWER/SYS Indicates the power and system status.

• Solid green when the system is powered on and is

operating normally.

• Flashes green when the system is booting.

• Solid amber when the system has a booting problem,

a device error occurs, or the system has a problem.

VPN Indicates the site-to-site VPN connection status.

• Solid green when there are active site-to-site VPN

connections.

• Flashes green when attempting to establish a

site-to-site VPN tunnel.

• Flashes amber when the system is experiencing

problems setting up a site-to-site VPN connection

and there is no VPN connection.

USB Indicates the USB device status.

• Solid green when a USB device is detected and is

operating normally.

• Flashes green when the USB device is transmitting

and receiving data.

WLAN

(ISA550W and

ISA570W only)

Indicates the WLAN status.

• Solid green when the WLAN is up.

• Flashes green when the WLAN is transmitting and

receiving data.

Getting Started

Product Overview

Cisco ISA500 Series Integrated Security Appliances Administration Guide 23

Back Panel

The back panel is where you connect the network devices. The ports on the panel

vary depending on the model.

ISA550 and ISA550W Back Panel

SPEED Indicates the traffic rate of the associated port.

• Off when the traffic rate is 10 or 100 Mbps.

• Solid green when the traffic rate is 1000 Mbps.

LINK/ACT Indicates that a connection is being made through the port.

• Solid green when the link is up.

• Flashes green when the port is transmitting and

receiving data.

Light Description

281984

ANT02ANT01

RESET

OPOWER

12VDC

CONFIGURABLE

LAN

WAN

ANT01 ANT02

Reset

Button

Power

Switch

Power

Connector

WAN

Port

USB

Port Configurable

Ports

LAN

Ports

Getting Started

Product Overview

Cisco ISA500 Series Integrated Security Appliances Administration Guide 24

ISA570 and ISA570W Back Panel

Back Panel Descriptions

281981

RESET

ANT02ANT01

8910

WAN

CONFIGURABLE POWER

12VDC

LAN

ANT01 ANT02

Reset

Button

Power

Switch

Power

Connector

WAN

Port

USB

Port Configurable

Ports

LAN

Ports

Feature Description

ANT01/ANT02 Threaded connectors for the antennas (for ISA550W and

ISA570W only).

USB Port Connects the unit to a USB device. You can use a USB

device to save and restore system configuration, or to

upgrade the firmware.

Configurable

Ports

Can be set to operate as WAN, LAN, or DMZ ports. ISA550

and ISA550W have 4 configurable ports. ISA570 and

ISA570W have 5 configurable ports.

NOTE: Only one configurable port can be configured as a

WAN port at a time. Up to 4 configurable ports can be

configured as DMZ ports.

LAN Ports Connects PCs and other network appliances to the unit.

ISA550 and ISA550W have 2 dedicated LAN ports. ISA570

and ISA570W have 4 dedicated LAN ports.

WAN Port Connects the unit to a DSL or a cable modem, or other WAN

connectivity device.

Getting Started

Getting Started with the Configuration Utility

Cisco ISA500 Series Integrated Security Appliances Administration Guide 25

Getting Started with the Configuration Utility

The ISA500 Series Configuration Utility is a web-based device manager that is

used to provision the security appliance. To use this utility, you must be able to

connect to the security appliance from a PC or laptop. You can access the

Configuration Utility by using the following web browsers:

• Microsoft Internet Explorer 8 and 9

• Mozilla Firefox 3.6.x, 5, and 6

NOTE The minimum recommended display resolution for the PC running the Web

browser used to access the Configuration Utility is 1024 x 768.

This section includes the following topics:

•Logging in to the Configuration Utility, page 26

•Navigating Through the Configuration Utility, page 27

•Using the Help System, page 28

•Configuration Utility Icons, page 28

RESET Button To reboot the unit, push and release the RESET button for

less than 3 seconds.

To restore the unit to its factory default settings, push and

hold the RESET button for more than 3 seconds while the

unit is powered on and the POWER/SYS light is solid green.

The POWER/SYS light will flash green when the system is

rebooting.

Power Switch Powers the unit on or off.

Power

Connector

Connects the unit to power using the supplied power cord

and adapter.

Feature Description

Getting Started

Getting Started with the Configuration Utility

Cisco ISA500 Series Integrated Security Appliances Administration Guide 26

Logging in to the Configuration Utility

STEP 1 Connect your computer to an available LAN port on the back panel.

Your PC will become a DHCP client of the security appliance and will receive an IP

address in the 192.168.75.x range.

STEP 2 Start a web browser. In the address bar, enter the default IP address of the

security appliance: 192.168.75.1.

NOTE: The above address is the factory default LAN address. If you change this

setting, enter the new IP address to connect to the Configuration Utility.

STEP 3 When the login page opens, enter the username and password.

The default username is cisco. The default password is cisco. Usernames and

passwords are case sensitive.

STEP 4 Click Login.

STEP 5 For security purposes, you must change the default password of the default

administrator account. Set a new administrator password and click OK.

STEP 6 If you can access the Internet and a newer firmware is detected, the Firmware

Upgrade window opens. Follow the on-screen prompts to download and install

the firmware. See Upgrading your Firmware After your First Login, page 33.

STEP 7 If you cannot access the Internet or you are using the latest firmware, the Setup

Wizard will now launch. Follow the on-screen prompts to complete the initial

configuration. See Using the Setup Wizard for the Initial Configuration, page 36.

Getting Started

Getting Started with the Configuration Utility

Cisco ISA500 Series Integrated Security Appliances Administration Guide 27

Navigating Through the Configuration Utility

Use the left hand navigation pane to perform the tasks in the Configuration Utility.

Number Component Description

1LeftHand

Navigation

Pane

The left hand navigation pane provides easy

navigation through the configurable features. The

main branches expand to provide the features. Click

the main branch title to expand its contents. Click

the triangle next to a feature to expand or contract

its sub-features. Click the title of a feature or

sub-feature to open it.

2 Main Content The main content of the feature or sub-feature

appears in this area.

Getting Started

Getting Started with the Configuration Utility

Cisco ISA500 Series Integrated Security Appliances Administration Guide 28

Using the Help System

The Configuration Utility provides a context-sensitive help file for all configuration

tasks. To view the Help page, click the Help link in the top right corner of the

screen. A new window opens with information about the page that you are

currently viewing.

Configuration Utility Icons

The Configuration Utility has icons for commonly used configuration options. The

following table describes these icons:

Icon Description Action

Add icon Add an entry.

Edit icon Edit an entry.

Duplicate icon Create a copy of an existing entry.

Delete icon Delete an entry or delete multiple selected

entries.

Move icon Move an item to a specific location.

Move down icon Move an item down one position.

Move up icon Move an item up one position.

Expand triangle

icon

Expand the sub-features of a feature in the left

navigation pane or expand the items under a

category.

Contract triangle

icon

Contract the sub-features of a feature in the left

navigation pane or contract the items under a

category.

Connect icon Establish a VPN connection.

Disconnect or

Logout icon

Terminate a VPN connection or an active user

session.

Autres manuels pour ISA550

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Cisco Système de sécurité

Cisco

Cisco PIX-515-RPS - PIX 515-R - Firewall Manuel utilisateur

Cisco

Cisco WVC200 - Wireless-G PTZ Internet Camera Mode d’emploi

Cisco

Cisco Firepower 2100 Series Manuel

Cisco

Cisco Firepower 1100 Series Manuel utilisateur

Cisco

Cisco ISA 3000 Manuel utilisateur

Cisco

Cisco MARS Instructions d'utilisation

Cisco

Cisco NCS 4000 Series Manuel utilisateur

Cisco

Cisco 500 Series Manuel utilisateur

Cisco

Cisco PIX 501 - Security Appliance Manuel utilisateur

Cisco

Cisco ASA 55 Series Guide de démarrage rapide

Cisco

Cisco MS410-16 Manuel utilisateur

Cisco

Cisco Small Business Pro SA 500 Series Manuel utilisateur

Cisco

Cisco Codec C Series Manuel utilisateur

Cisco

Cisco ISA550 Manuel utilisateur

Cisco

Cisco 6400E Manuel utilisateur

Cisco

Cisco Firepower 2100 Series Manuel

Cisco

Cisco C195 Guide de démarrage rapide

Cisco

Cisco ASA 5506W-X Manuel

Cisco

Cisco Meraki MX67 Manuel utilisateur

Cisco

Cisco M5 Manuel utilisateur

Cisco

Cisco C395 Manuel

Cisco

Cisco ISA 3000 Manuel de l'opérateur

Cisco

Cisco IronPort S670 Manuel utilisateur

Cisco

Cisco 4116 - EtherFast Switch Mode d’emploi

Manuels Système de sécurité populaires d'autres marques

Inner Range

Inner Range Concept 2000 Manuel utilisateur

Climax

Climax Mobile Lite R32 Instructions de montage

CADDX

CADDX NX-6 Manuel utilisateur

FBII

FBII XL-31 Series Manuel utilisateur

Johnson Controls

Johnson Controls PENN Connected PC10 Manuel utilisateur

Aeotec

Aeotec Siren Gen5 Manuel utilisateur

Blaupunkt

Blaupunkt SA 2700 Manuel utilisateur

IDEAL

IDEAL Accenta Manuel du propriétaire

AJAX

AJAX DoubleButton Manuel utilisateur

Swann

Swann SW-P-MC2 Manuel utilisateur

Ecolink

Ecolink Siren+Chime Manuel utilisateur

Digital Monitoring Products

Digital Monitoring Products XR150 Manuel utilisateur

EDM

EDM Solution 6+6 Wireless-AE Manuel utilisateur

Highway Safety Group

Highway Safety Group EA401 Manuel utilisateur

Siren

Siren LED GSM Manuel utilisateur

Detection Systems

Detection Systems 7090i Instructions de montage

Se-Kure Controls

Se-Kure Controls MicroMini SK-4841 Manuel utilisateur

Siemens

Siemens FDM273 Manuel utilisateur