Table of Contents
Advertisement
Quick Links
Q
S
UICK
TART
Cisco S170 Web Security Appliance
1
Welcome
2
Before You Begin
3
Document Network Settings
4
Plan the Installation
5
Install the Appliance in a Rack
6
Plug In the Appliance
7
Temporarily Change Your IP Address
8
Connect to the Appliance
9
Power Up the Appliance
10
Log In to the Appliance
11
Run the System Setup Wizard
12
Configure Network Settings
13
Configuration Summary
14
You're Done!
15
Where to Go from Here
G
UIDE
Advertisement
Table of Contents
Related Manuals for Cisco S170 Web
Summary of Contents for Cisco S170 Web
- Page 1 UICK TART UIDE Cisco S170 Web Security Appliance Welcome Before You Begin Document Network Settings Plan the Installation Install the Appliance in a Rack Plug In the Appliance Temporarily Change Your IP Address Connect to the Appliance Power Up the Appliance...
-
Page 2: Before You Begin
Revised: March 13, 2013 Part Number: 78-19643-04 Welcome Thank you for choosing the Cisco S170 Web Security Appliance (Cisco S170). The Cisco S170 helps organizations secure and control web traffic. This guide describes how to physically install the Cisco S170 appliance and use the System Setup Wizard to configure basic settings. -
Page 3: Document Network Settings
Document Network Settings Before you begin, write down the following information about your network and administrator settings. Deployment Options • Web Proxy • L4 Traffic Monitor – Transparent with L4 – Simplex tap/Span port – Switch Transparent with WCCP Router –... - Page 4 Interface Settings Management Port IP Address: Network Mask: Hostname: Data Port (Optional, see Note) IP Address: Network Mask: Hostname: Note The Web Proxy can share the management interface. If configured separately, the Data interface IP address and the management interface IP address cannot share the same subnet.
- Page 5 Transparent Routing Device Device Type: • Layer 4 Switch or No Device • WCCP Router – Enable standard service ID (web-cache). – Router Addresses: _________________ – Enable router security. Password: _________________ Note When you connect the appliance to a WCCP router, you might need to configure the Web Security appliance to create WCCP services after you run the System Setup Wizard.
- Page 6 Security Services L4 Traffic Monitor: • Monitor only • Block Acceptable Use Controls: Enable • IronPort URL Filters • Cisco IronPort Web Usage Controls Web Reputation Filters: Enable Malware and Spyware Scanning: • Enable Webroot • Enable McAfee • Enable Sophos Action for Detected Malware: •...
-
Page 7: Plan The Installation
Plan the Installation Decide how you are going to configure the Cisco S170 Web Security Appliance within your network. The Cisco S170 appliance is typically installed as an additional layer in the network between clients and the Internet. Depending on how you deploy the appliance, you may or may not need a Layer 4 (L4) switch or a WCCP router to direct client traffic to the appliance. -
Page 8: Install The Appliance In A Rack
NAT (Network Address Translation). Install the Appliance in a Rack Install the Cisco S170 Web Security Appliance using either the slide rails or fixed rack mount brackets. For information about these installation options, see the Cisco 170 Series Hardware Installation Guide. -
Page 9: Plug In The Appliance
Plug the female end of the power cable into the power supply on the back panel of the appliance. Plug the male end into an electrical outlet. MGMT 7JZ78-003E CONSOLE Plug the Cisco S170 power cable into an electrical outlet... - Page 10 Temporarily Change Your IP Address To connect to the Cisco S170 appliance, you must temporarily change the IP address of your computer. Make a note of your current IP configuration settings Note because you will need to revert to these settings after you finish the configuration.
- Page 11 Enter the following changes: Step 7 • IP Address: 192.168.42.43 • Subnet Mask: 255.255.255.0 • Default Gateway: 192.168.42.1 Click OK and Close to exit the dialog box. Step 8 For Mac Launch the Apple menu and choose System Preferences. Step 1 Click Network.
-
Page 12: Connect To The Appliance
Connect to the Appliance Plug the Ethernet cables into the appropriate ports on the back panel of the Cisco S170 appliance. • The proxy ports are labeled P1 and P2. P1 only enabled: When only P1 is enabled, connect it to –... -
Page 13: Power Up The Appliance
Security Appliance Wait five minutes. Log In to the Appliance You can log in to the Cisco S170 appliance using one of two interfaces: the web-based interface or the command-line interface. Web-Based Interface For web browser access via the Ethernet port (see the Step 1 “Connect to the Appliance”... -
Page 14: Command Line Interface
Enter the following login information: Step 2 • Username: admin • Password: ironport The hostname parameter is assigned during system Note setup. Before you can connect to the management interface using a hostname (http://hostname:8080), you must add the appliance hostname and IP address to your DNS server database. -
Page 15: Run The System Setup Wizard
Step 7 and the new password that you set in the System Setup Wizard. The Cisco S170 Web Security Appliance uses a self-signed certificate that may trigger a warning from your web browser. You can simply accept the certificate and ignore this warning. -
Page 16: Configure Network Settings
Configure Network Settings Depending on your network configuration, your firewall may need to be configured to allow access using the following ports. SMTP and DNS services must have access to the Internet. The web security appliance must be able to listen on the following ports: •... -
Page 17: Configuration Summary
Configuration Summary Item Description You can manage the web security appliance Management from the management port (MGMT port) by entering http://192.168.42.42:8080 or by using the IP address assigned to the management interface after you have completed the System Setup Wizard. If you reset your configuration to factory default settings (for example, by re-running the System Setup Wizard), you can access... - Page 18 Item Description After running the System Setup Wizard, one Traffic Monitor or both L4 traffic monitor ports (T1 only or both T1 and T2) are configured to listen to traffic on all TCP ports. The default setting for the L4 traffic monitor is monitor only. During or after setup, you can configure the L4 traffic monitor to both monitor and block suspicious traffic.
-
Page 19: You're Done
You’re Done! Congratulations. You are now ready to start using your Cisco S170 Web Security Appliance. You may wish to consider taking some of the following steps to get more out of the appliance: User Policies Use the web interface to create policies that define which users can access which web resources as necessary. -
Page 20: Where To Go From Here
Cisco S170 appliance. For more information about configuring feature keys, end user notifications, logging, and for details about other available web security appliance features, see the Cisco S170 Web Security Appliance documentation. Where to Go from Here Support Cisco IronPort Support http://www.cisco.com/en/US/products/... - Page 21 Cisco 170 Series http://www.cisco.com/en/US/docs/ Hardware Installation security/esa/hw/170Series_HW_Install Guide .pdf Includes information about LEDs, technical specifications, and rack-mounting options. Cisco Web Security http://www.cisco.com/en/US/products/ Appliance ps10164/tsd_products_support_series Documentation _home.html Includes documentation about configuring the appliance features, CLI commands, and release notes. Safety and Compliance http://www.cisco.com/en/US/docs/secu...
-
Page 22: Obtaining Documentation And Submitting A Service Request
The RSS feeds are a free service. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. - Page 24 Cisco Systems International BV Amsterdam, San Jose, CA Singapore The Netherlands Cisco has more than 200 offices worldwide. Addresses, phone numbers, and fax numbers are listed on the Cisco Website at www.cisco.com/go/offices. Printed in the USA on recycled paper containing 10% postconsumer waste. 78-19643-04...