Cisco Cisco Email Security Appliance X1070 Guía Del Usuario
Chapter 3 Setup and Installation
3-42
Cisco IronPort AsyncOS 7.1 for Email Configuration Guide
OL-22158-02
Note
The IronPort X1000/1050/1060, C60/600/650/660, and C30/300/350/360 Email
Security appliances have three available Ethernet interfaces by default. The
IronPort C10/100/150/160 Email Security appliances have two available Ethernet
interfaces.
Security appliances have three available Ethernet interfaces by default. The
IronPort C10/100/150/160 Email Security appliances have two available Ethernet
interfaces.
Advanced Configurations
In addition to this configurations shown in
and
, you can
also configure:
•
Multiple IronPort appliances using the Centralized Management feature
•
Redundancy at the network interface card level by “teaming” two of the
Ethernet interfaces on IronPort appliances using the NIC Pairing feature.
Ethernet interfaces on IronPort appliances using the NIC Pairing feature.
Both of these features are discussed in the Cisco IronPort AsyncOS for Email
Advanced Configuration Guide.
Advanced Configuration Guide.
Firewall Settings (NAT, Ports)
Depending on your network configuration, your firewall may need to be
configured to allow access on the following ports.
configured to allow access on the following ports.
SMTP and DNS services must have access to the Internet. For other system
functions, the following services may be required:
functions, the following services may be required:
Table 3-1
Firewall Ports
•
SMTP: port 25
•
DNS: port 53
•
HTTP: port 80
•
HTTPS: port 443
•
SSH: port 22
•
Telnet: port 23
•
LDAP: port 389 or 3268
•
NTP: port 123
•
LDAP over SSL: port 636
•
LDAP with SSL for Global Catalog queries: port
3269
3269
•
FTP: port 21, data port TCP 1024 and higher
•
IronPort Spam Quarantine: port 6025