Cisco Cisco Email Security Appliance C160 Mode D'Emploi
15-527
Cisco IronPort AsyncOS 7.1 for Email Configuration Guide
OL-22158-02
Chapter 15 System Administration
Configuring IP-Based Network Access
You can control from which IP addresses users access the Email Security
appliance. Users can access the appliance from any machine with an IP address
from the access list you define. When creating the network access list, you can
specify IP addresses, subnets, or CIDR addresses.
appliance. Users can access the appliance from any machine with an IP address
from the access list you define. When creating the network access list, you can
specify IP addresses, subnets, or CIDR addresses.
AsyncOS displays a warning if you do not include the IP address of your current
machine in the network access list. If your current machine’s IP address is not in
the list, it will not be able to access the appliance after you commit your changes.
machine in the network access list. If your current machine’s IP address is not in
the list, it will not be able to access the appliance after you commit your changes.
You can create the network access list either via the Network Access page in the
GUI or the
GUI or the
adminaccessconfig > ipaccess
CLI command.
shows
the Network Access page with a list of IP addresses that are allowed to connect to
the Email Security appliance.
the Email Security appliance.
Figure 15-16
The Network Access Page
To create a user access list via the GUI:
Step 1
Use the System Administration > Network Access page.
Step 2
Click Edit Settings.
Step 3
Select Only Allow Specific Connections.
Step 4
Enter the IP addresses that will be allowed to connect to the appliance.
You can enter an IP address, IP address range or CIDR range. Use commas to
separate multiple entries.
separate multiple entries.
Step 5
Submit and commit your changes.