Cisco Cisco Email Security Appliance C650 Guía Del Usuario
3-3
Cisco AsyncOS 8.0.2 for Email User Guide
Chapter 3 Setup and Installation
Installation Planning
Most customers’ network configurations are represented in the following scenarios. If your network
configuration varies significantly and you would like assistance planning an installation, please contact
Cisco Customer Support (see
configuration varies significantly and you would like assistance planning an installation, please contact
Cisco Customer Support (see
).
Configuration Overview
The following figure shows the typical placement of the Cisco appliance in an enterprise network
environment:
environment:
In some scenarios, the Cisco appliance resides inside the network “DMZ,” in which case an additional
firewall sits between the Cisco appliance and the groupware server.
firewall sits between the Cisco appliance and the groupware server.
The following network scenarios are described:
•
Behind the Firewall: two listeners configuration (
)
Choose the configuration that best matches your infrastructure. Then proceed to the next section,
Incoming
•
Incoming mail is accepted for the local domains you specify.
•
All other domains are rejected.
•
External systems connect directly to the Cisco appliance to transmit email for the local domains, and
the Cisco appliance relays the mail to the appropriate groupware servers (for example, Exchange™,
Groupwise™, Domino™) via SMTP routes. (See
the Cisco appliance relays the mail to the appropriate groupware servers (for example, Exchange™,
Groupwise™, Domino™) via SMTP routes. (See
Outgoing
•
Outgoing mail sent by internal users is routed by the groupware server to the Cisco appliance.
•
The Cisco appliance accepts outbound email based on settings in the Host Access Table for the
private listener. (For more information, see
private listener. (For more information, see
.)
Ethernet Interfaces
Only one of the available Ethernet interfaces on the Cisco appliance is required in these configurations.
However, you can configure two Ethernet interfaces and segregate your internal network from your
external Internet network connection.
However, you can configure two Ethernet interfaces and segregate your internal network from your
external Internet network connection.
For more information about assigning multiple IP addresses to the available interfaces, see
and
Note
The Cisco X1060/1070, C660/670, and C360/370 Email Security appliances have three available
Ethernet interfaces by default. The Cisco C160/170 Email Security appliances have two available
Ethernet interfaces.
Ethernet interfaces by default. The Cisco C160/170 Email Security appliances have two available
Ethernet interfaces.