Cisco Cisco Web Security Appliance S360 Guía Del Usuario
4-2
Cisco IronPort AsyncOS 7.7 for Web User Guide
Chapter 4 Installation and Configuration
Before You Begin
Connecting a Laptop to the Appliance
In order to run the System Setup Wizard the first time, you must connect a computer, such as a laptop,
to the appliance. To connect to the appliance, the laptop subnet must be the same as the appliance subnet.
The Management ports are labeled M1 and M2. The Web Security appliance only uses the M1
Management port. It does not use M2.
to the appliance. To connect to the appliance, the laptop subnet must be the same as the appliance subnet.
The Management ports are labeled M1 and M2. The Web Security appliance only uses the M1
Management port. It does not use M2.
Configure the laptop IP address so it is on the same subnet as the appliance (192.168.42.xx). Then,
connect the laptop to the M1 port on the back of the appliance.
connect the laptop to the M1 port on the back of the appliance.
Connecting the Appliance to the Network
You must plug the Ethernet cables into the appropriate ports on the back panel of the appliance. For more
information about the Ethernet ports on the appliance, see
information about the Ethernet ports on the appliance, see
How you deploy the appliance determines which Ethernet cables to plug in where:
•
Web proxy in transparent mode. If you want to use one proxy port for all traffic, connect port P1
to an Layer 4 switch or a WCCP router using an Ethernet cable. If you want to use two proxy ports
for traffic, connect port P2 to an Layer 4 switch or a WCCP router using an Ethernet cable, and
connect port P1 to the internal network.
to an Layer 4 switch or a WCCP router using an Ethernet cable. If you want to use two proxy ports
for traffic, connect port P2 to an Layer 4 switch or a WCCP router using an Ethernet cable, and
connect port P1 to the internal network.
For more information about deploying the Web Proxy in transparent mode, see
Note
When you configure the proxy in transparent mode and connect it to a WCCP router, you must
configure the appliance after you run the System Setup Wizard to create at least one WCCP
service. For more information about creating WCCP services, see
configure the appliance after you run the System Setup Wizard to create at least one WCCP
service. For more information about creating WCCP services, see
•
Web proxy in explicit forward mode. If you want to use one proxy port for all traffic, connect port
P1 to a network switch using an Ethernet cable. If you want to use two proxy ports for traffic,
connect port P2 to a network switch using an Ethernet cable, and connect port P1 to the internal
network.
P1 to a network switch using an Ethernet cable. If you want to use two proxy ports for traffic,
connect port P2 to a network switch using an Ethernet cable, and connect port P1 to the internal
network.
For more information about deploying the Web Proxy in explicit forward mode, see
.
•
L4 Traffic Monitor. Connect the Traffic Monitor ports to the Ethernet tap according to the tap
communication type:
communication type:
–
Ethernet tap using simplex. Connect port T1 to the Ethernet tap so it receives all outgoing
traffic (from the clients to the Internet), and connect port T2 to the Ethernet tap so it receives
all incoming traffic (from the Internet to the clients).
traffic (from the clients to the Internet), and connect port T2 to the Ethernet tap so it receives
all incoming traffic (from the Internet to the clients).
–
Ethernet tap using duplex. Connect port T1 to the Ethernet tap so it receives all incoming and
outgoing traffic.
outgoing traffic.
For more information about deploying the L4 Traffic Monitor, see
.