Cisco Cisco Web Security Appliance S190 Guía Del Usuario
25-4
Cisco IronPort AsyncOS 7.7 for Web User Guide
Chapter 25 Configuring Network Settings
Configuring TCP/IP Traffic Routes
Step 3
Specify whether or not to have separate routing for the Management Services using the “Restrict M1 port
to appliance management services only” field.
to appliance management services only” field.
If this checkbox is selected, the M1 port is used for appliance management services only and is not used
for the data (Web Proxy) traffic. You will need to configure another port for data traffic as well as
separate routes for management and data traffic. For more information about configuring routes, see
for the data (Web Proxy) traffic. You will need to configure another port for data traffic as well as
separate routes for management and data traffic. For more information about configuring routes, see
.
Step 4
Configure Appliance Management Services.
Choose whether or not to use HTTP or HTTPS to administer AsyncOS through the web interface. You
must specify the port to access AsyncOS with each protocol you configure.
must specify the port to access AsyncOS with each protocol you configure.
You can also choose to redirect HTTP requests to HTTPS. When you do this, AsyncOS automatically
enables both HTTP and HTTPS.
enables both HTTP and HTTPS.
Step 5
Choose the type of wired connections plugged into the “T” network interfaces:
•
Duplex TAP. Choose Duplex TAP when the T1 port receives both incoming and outgoing traffic.
You can use half- or full-duplex Ethernet connections.
You can use half- or full-duplex Ethernet connections.
•
Simplex TAP. Choose Simplex TAP when you connect the T1 port to the internal network (traffic
flows from the clients to the Internet) and you connect the T2 port to the external network (traffic
flows from the Internet to the clients).
flows from the clients to the Internet) and you connect the T2 port to the external network (traffic
flows from the Internet to the clients).
Note
Cisco recommends using simplex when possible because it can increase performance and
security.
security.
Step 6
Submit and commit your changes.
Configuring TCP/IP Traffic Routes
You can define routes for appliance traffic, add static routes, load IP routing tables, and modify the
default gateway using the Network > Routes page or the
default gateway using the Network > Routes page or the
routeconfig
command.
Routes are used for determining where to send traffic (routing traffic). The Web Security appliance needs
to route the following kinds of traffic:
to route the following kinds of traffic:
•
Data traffic. Traffic the Web Proxy processes from end users browsing the web.
•
Management traffic. Traffic created by managing the appliance through the web interface and
traffic the appliance creates for management services, such as AsyncOS upgrades, component
updates, DNS, authentication, and more.
traffic the appliance creates for management services, such as AsyncOS upgrades, component
updates, DNS, authentication, and more.
Netmask
Enter the network mask to use when managing the Web Security appliance on this
network interface.
network interface.
Hostname
Enter the hostname to use when managing the Web Security appliance on this
network interface.
network interface.
Table 25-2
Interface Settings (continued)
Interface Setting
Description