Cisco Cisco ASA 5512-X Adaptive Security Appliance Merkblatt

Seite von 16
10
 
8단계
ASA FirePOWER 모듈에 대한 세션을 엽니다. 전 기능 모듈로 로그인했으므로 다른 로그인 프롬프트가 표시될 것입니다.
asa3# session sfr 
Opening command session with module sfr.
Connected to module sfr. Escape character sequence is 'CTRL-^X'.
Sourcefire ASA5555 v5.3.1 (build 44)
Sourcefire3D login: 
9단계
사용자 이름 admin 및 비밀번호 Sourcefire로 로그인합니다.
10단계 프롬프트에
 따라 시스템 구성을 완료합니다.
먼저 EULA(최종 사용자 라이센스 계약)를 읽고 동의해야 합니다. 그런 다음 프롬프트에 따라 admin 비밀번호를 변경하고 
관리 주소 및 NDS 설정을 구성합니다. IPv4 및 IPv6 관리 주소 모두 구성할 수 있습니다. 예를 들면 다음과 같습니다.
System initialization in progress.  Please stand by.  
You must change the password for 'admin' to continue.
Enter new password: <new password> 
Confirm new password: <repeat password> 
You must configure the network to continue.
You must configure at least one of IPv4 or IPv6.
Do you want to configure IPv4? (y/n) [y]: y 
Do you want to configure IPv6? (y/n) [n]: 
Configure IPv4 via DHCP or manually? (dhcp/manual) [manual]: 
Enter an IPv4 address for the management interface [192.168.45.45]: 10.86.118.3 
Enter an IPv4 netmask for the management interface [255.255.255.0]: 255.255.252.0 
Enter the IPv4 default gateway for the management interface []: 10.86.116.1 
Enter a fully qualified hostname for this system [Sourcefire3D]: asasfr.example.com 
Enter a comma-separated list of DNS servers or 'none' []: 10.100.10.15, 
10.120.10.14
Enter a comma-separated list of search domains or 'none' [example.net]: example.com 
If your networking information has changed, you will need to reconnect.
For HTTP Proxy configuration, run 'configure network http-proxy'
(Wait for the system to reconfigure itself.)
This sensor must be managed by a Defense Center.  A unique alphanumeric
registration key is always required.  In most cases, to register a sensor
to a Defense Center, you must provide the hostname or the IP address along
with the registration key.
'configure manager add [hostname | ip address ] [registration key ]'
However, if the sensor and the Defense Center are separated by a NAT device,
you must enter a unique NAT ID, along with the unique registration key.
'configure manager add DONTRESOLVE [registration key ] [ NAT ID ]'
Later, using the web interface on the Defense Center, you must use the same
registration key and, if necessary, the same NAT ID when you add this
sensor to the Defense Center.
11단계
 configure manager add 명령을 사용하여 이 디바이스를 구성할 FireSIGHT Management Center 어플라이언스를 식별
합니다.
등록 키가 제공되는데, 이는 FireSIGHT Management Center에서 인벤토리에 디바이스를 추가할 때 사용합니다. 다음 
예는 간단한 사례를 보여줍니다. NAT 경계가 있을 경우 명령이 달라집니다. 
를 참조하십시오.
configure manager add 10.89.133.202 123456 
Manager successfully configured.
12단계 브라우저에서
 HTTPS 연결을 통해 FireSIGHT Management Center에 로그인합니다. 위에서 입력한 호스트 이름 또는 
주소를 사용합니다. 예를 들면, https://DC.example.com으로 연결합니다. 
디바이스 관리(Devices(디바이스) > Device Management(디바이스 관리)) 페이지를 사용하여 디바이스를 추가합니다. 
자세한 내용은 온라인 도움말 또는 FireSIGHT System 
사용자
 
설명서
의 디바이스 관리(Managing Devices) 장을 참조하
십시오.