Cisco Cisco Email Security Appliance C160 Guía Del Usuario
3-3
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
OL-25136-01
Chapter 3 Setup and Installation
Installation Scenarios
You may want to review all features of the appliance prior to installing.
provides an overview of all functions available on the appliance that may affect the
placement of the Cisco IronPort appliance within your infrastructure.
Most customers’ network configurations are represented in the following scenarios. If your network
configuration varies significantly and you would like assistance planning an installation, please contact
Cisco IronPort Customer Support (see
configuration varies significantly and you would like assistance planning an installation, please contact
Cisco IronPort Customer Support (see
).
Configuration Overview
The following figure shows the typical placement of the Cisco IronPort appliance in an enterprise
network environment:
network environment:
Figure 3-1
Enterprise Network Environment
In some scenarios, the Cisco IronPort appliance resides inside the network “DMZ,” in which case an
additional firewall sits between the Cisco IronPort appliance and the groupware server.
additional firewall sits between the Cisco IronPort appliance and the groupware server.
The following network scenarios are described:
•
Behind the Firewall (see
)
Choose the configuration that best matches your infrastructure. Then proceed to the next section,
Incoming
•
Incoming mail is accepted for the local domains you specify. (See )
•
All other domains are rejected.
•
External systems connect directly to the Cisco IronPort appliance to transmit email for the local
domains, and the Cisco IronPort appliance relays the mail to the appropriate groupware servers (for
example, Exchange™, Groupwise™, Domino™) via SMTP routes. (See “Routing Email for Local
Domains” in the Cisco IronPort AsyncOS for Email Advanced Configuration Guide.)
domains, and the Cisco IronPort appliance relays the mail to the appropriate groupware servers (for
example, Exchange™, Groupwise™, Domino™) via SMTP routes. (See “Routing Email for Local
Domains” in the Cisco IronPort AsyncOS for Email Advanced Configuration Guide.)
Outgoing
•
Outgoing mail sent by internal users is routed by the groupware server to the Cisco IronPort
appliance.
appliance.
•
The Cisco IronPort appliance accepts outbound email based on settings in the Host Access Table for
the private listener. (For more information, see
the private listener. (For more information, see
.)
Ethernet Interfaces
•
Only one of the available Ethernet interfaces on the Cisco IronPort appliance is required in these
configurations. However, you can configure two Ethernet interfaces and segregate your internal
network from your external Internet network connection.
configurations. However, you can configure two Ethernet interfaces and segregate your internal
network from your external Internet network connection.