Cisco Cisco Firepower Management Center 4000 Installationsanleitung

Seite von 50
 
1-9
Cisco NGIPS for Blue Coat X-Series Installation and Configuration Guide
 
Chapter 1      Introduction to Cisco NGIPS for Blue Coat X-Series
  What’s Next?
Note that the system allows you to change the management port (8305/tcp); see the FireSIGHT System 
User Guide
. However, Cisco strongly recommends that you keep the default setting. If you change the 
management port, you must change it for all appliances in your deployment that need to communicate 
with each other.
The following table lists the open ports required so that you can take full advantage of FireSIGHT 
System features.
What’s Next?
The following chapters explain how to install and configure Cisco NGIPS for Blue Coat X-Series:
  •
 describes some of the ways you might want to deploy the 
FireSIGHT System within your network environment, depending on the capabilities of your 
X-Series platform and on the components you are licensed to use.
  •
 explains how to install Cisco NGIPS for 
Blue Coat X-Series on your X-Series platform, how to make sure the Cisco Defense Center can 
communicate with the Cisco NGIPS for Blue Coat X-Series installations, and how to configure the 
X-Series platform so that Cisco NGIPS for Blue Coat X-Series receives network traffic. It also 
explains how to uninstall Cisco NGIPS for Blue Coat X-Series.
  •
 explains how to set up a Cisco Defense Center to manage 
Cisco NGIPS for Blue Coat X-Series.
  •
 explains how to perform tasks such as 
adding VAPs to a VAP group, changing interfaces for VAP groups, editing load-balanced VAP 
groups, and resetting the communications channel for a VAP. It also contains a command reference.
Table 1-4
FireSIGHT System Open Communication Ports Requirements 
Port
Description
Direction
To...
22/tcp
SSH/SSL
Bidirectional
allow a secure remote connection to the 
appliance.
25/tcp
SMTP
Outbound
send email notices and alerts from the 
appliance.
53/tcp
DNS
Outbound
use DNS.
162/udp
SNMP
Outbound
send SNMP alerts to a remote trap server.
514/udp
syslog 
Outbound
send alerts to a remote syslog server.
8305/tcp
appliance comms.
Bidirectional
securely communicate between appliances in 
a deployment. 
Required.