BenutzerhandbuchInhaltsverzeichnisContents3Before You Begin7ASA 55007ASA 5500 with AIP SSM8ASA 5500 with CSC SSM9ASA 5500 with 4GE SSM10Installing the Cisco ASA 550011Verifying the Package Contents12Installing the Chassis13Rack-Mounting the Chassis14Ports and LEDs15What to Do Next19Installing Optional SSMs21Cisco 4GE SSM214GE SSM Components22Installing the Cisco 4GE SSM23Installing the SFP Modules24SFP Module25Installing the SFP Module26Cisco AIP SSM and CSC SSM28Installing an SSM29What to Do Next30Connecting Interface Cables31Connecting Cables to Interfaces32What to Do Next40Configuring the Adaptive Security Appliance41About the Factory-Default Configuration41About the Adaptive Security Device Manager42Before Launching the Startup Wizard43Using the Startup Wizard44What to Do Next45Scenario: DMZ Configuration47Example DMZ Network Topology47Configuring the Security Appliance for a DMZ Deployment50Configuration Requirements51Starting ASDM52Creating IP Pools for Network Address Translation53Configuring NAT for Inside Clients to Communicate with the DMZ Web Server58Configuring NAT for Inside Clients to Communicate with Devices on the Internet61Configuring an External Identity for the DMZ Web Server62Providing Public HTTP Access to the DMZ Web Server64What to Do Next70Scenario: Remote-Access VPN Configuration73Example IPsec Remote-Access VPN Network Topology73Implementing the IPsec Remote-Access VPN Scenario74Information to Have Available75Starting ASDM76Configuring the FWSM for an IPsec Remote-Access VPN77Selecting VPN Client Types78Specifying the VPN Tunnel Group Name and Authentication Method79Specifying a User Authentication Method80(Optional) Configuring User Accounts82Configuring Address Pools83Configuring Client Attributes84Configuring the IKE Policy85Configuring IPsec Encryption and Authentication Parameters87Specifying Address Translation Exception and Split Tunneling88Verifying the Remote-Access VPN Configuration89What to Do Next90Scenario: Site-to-Site VPN Configuration93Example Site-to-Site VPN Network Topology93Implementing the Site-to-Site Scenario94Information to Have Available94Configuring the Site-to-Site VPN95Starting ASDM95Configuring the Security Appliance at the Local Site96Providing Information About the Remote VPN Peer98Configuring the IKE Policy99Configuring IPSec Encryption and Authentication Parameters101Specifying Hosts and Networks102Viewing VPN Attributes and Completing the Wizard103Configuring the Other Side of the VPN Connection105What to Do Next105Configuring the AIP SSM107AIP SSM Configuration107Overview of Configuration Process108Configuring the ASA 5500 to Divert Traffic to the AIP SSM108Sessioning to the AIP SSM and Running Setup111What to Do Next113Configuring the CSC SSM115About the CSC SSM115About Deploying the Security Appliance with the CSC SSM116Scenario: Security Appliance with CSC SSM Deployed for Content Security118Configuration Requirements119Configuring the CSC SSM for Content Security119Obtain Software Activation Key from Cisco.com120Gather Information120Launch ASDM121Verify Time Settings122Run the CSC Setup Wizard123Divert Traffic to the CSC SSM for Content Scanning128What to Do Next134Configuring the 4GE SSM for Fiber137Cabling 4GE SSM Interfaces138Setting the 4GE SSM Media Type for Fiber Interfaces (Optional)139What to Do Next141Obtaining a DES License or a 3DES-AES License143Größe: 3,21 MBSeiten: 144Language: EnglishHandbuch öffnen
