Cisco Cisco AMP Threat Grid 5000 Appliance Guide De Montage
Cisco AMP Threat Grid Appliance Setup and Configuration Guide
SERVER SETUP
SERVER SETUP
14
Network Interface Setup Diagram
This section describes the most logical/recommended setup for an AMP Threat Grid Appliance. However, each
customer's interface setup is different. Depending on your network requirements, you may well decide to connect
the Dirty interface to the inside, or the Clean interface to the outside with appropriate network security measures
in place, for example.
customer's interface setup is different. Depending on your network requirements, you may well decide to connect
the Dirty interface to the inside, or the Clean interface to the outside with appropriate network security measures
in place, for example.
Figure 7 - Network Interfaces Setup Diagram
AMP Threat Grid Appliance
Dirty
Clean
Admin
CIMC
Corp
Network
Internet
Threat Grid
Support + Update
Servers
DNS / NTP
SMTP Server
Integrated Appliances
(ESA, WSA,
FireAMP, etc.)
- User Interface and API
(HTTPS)
- Sample Submissions
- SMTP Traffic to Local
Mail Server
- Recovery Mode Support Connections
- Syslog
- DNS over clean if configured
(HTTPS)
- Sample Submissions
- SMTP Traffic to Local
Mail Server
- Recovery Mode Support Connections
- Syslog
- DNS over clean if configured
- Out-of-Band Server
Management
Management
- OpAdmin Management
Traffic (HTTPS)
- SSH
Traffic (HTTPS)
- SSH
External Facing
Internal Facing
- Sample-Initiated Traffic
- DNS for the appliance
- NTP for the appliance
- Software Updates
- User-Initiated Support Connections
- Outbound Traffic ONLY!
- DNS for the appliance
- NTP for the appliance
- Software Updates
- User-Initiated Support Connections
- Outbound Traffic ONLY!