Cisco Cisco Firepower Management Center 2000 Installationsanleitung
1-6
Cisco NGIPS for Blue Coat X-Series Installation and Configuration Guide
Chapter 1 Introduction to Cisco NGIPS for Blue Coat X-Series
Understanding Cisco NGIPS for Blue Coat X-Series Capabilities
– stacking
– virtual switching
– virtual routing
– Cisco-based dynamic load balancing
– Cisco-based high availability
– site-to-site VPN
– NAT
– automatic application bypass
– fast-path
– user and application control
– advanced malware protection
•
You cannot use Cisco NGIPS for Blue Coat X-Series to filter network traffic based on its country or
continent of origin or destination (geolocation-based access control).
continent of origin or destination (geolocation-based access control).
•
You cannot use the Defense Center web interface to configure Cisco NGIPS for Blue Coat X-Series
interfaces.
interfaces.
•
You cannot use the Defense Center to shut down, restart, or otherwise manage Cisco NGIPS for Blue
Coat X-Series processes.
Coat X-Series processes.
•
You cannot use the Defense Center to create backups from or restore backups to Cisco NGIPS for
Blue Coat X-Series.
Blue Coat X-Series.
•
You cannot apply health or system policies to Cisco NGIPS for Blue Coat X-Series. This includes
managing time settings.
managing time settings.
Cisco NGIPS for Blue Coat X-Series does not have a web interface. However, it has a command line
interface (CLI) unique to the X-Series platform. You use this CLI to install the system and to perform
other platform-specific administrative tasks, such as:
interface (CLI) unique to the X-Series platform. You use this CLI to install the system and to perform
other platform-specific administrative tasks, such as:
•
creating Virtual Appliance Processor (VAP) groups, which allow you to take advantage of the
X-Series platform’s load balancing and redundancy benefits (comparable to Cisco physical device
clustering)
X-Series platform’s load balancing and redundancy benefits (comparable to Cisco physical device
clustering)
•
configuring passive and inline sensing interfaces, including configuring the interface’s maximum
transmission unit (MTU)
transmission unit (MTU)
•
managing processes
•
managing time settings, including NTP settings
Licensing the FireSIGHT System
You can license a variety of features to create an optimal FireSIGHT System deployment for your
organization. You must use the Defense Center to control licenses for itself and the devices it manages.
organization. You must use the Defense Center to control licenses for itself and the devices it manages.
Cisco recommends you add the licenses your organization has purchased during the initial setup of your
Defense Center. Otherwise, any devices you register during initial setup are added to the Defense Center
as unlicensed. You must then enable licenses on each device individually after the initial setup process
is over.
Defense Center. Otherwise, any devices you register during initial setup are added to the Defense Center
as unlicensed. You must then enable licenses on each device individually after the initial setup process
is over.