Cisco Cisco Web Security Appliance S390 Guida Utente
3-3
Cisco IronPort AsyncOS 7.7 for Web User Guide
Chapter 3 Deployment
Appliance Interfaces
Figure 3-1
Web Security Appliance Ethernet Ports
Management Interface
Use M1 to administer the appliance. Optionally, you can also configure the M1 interface to handle Web
Proxy data traffic. You might want to use the M1 interface for data traffic if your organization does not
use a separate management network.
Proxy data traffic. You might want to use the M1 interface for data traffic if your organization does not
use a separate management network.
For more information about using the M1 port to set up and manage the appliance, see
.
For more information about configuring the network interfaces, see
.
Data Interfaces
The appliance uses the Data interfaces for Web Proxy data traffic. You can enable and use just the P1
port or both the P1 and P2 ports for data traffic.
port or both the P1 and P2 ports for data traffic.
•
P1 only enabled. When only P1 is enabled, connect it to the network for both incoming and
outgoing traffic.
outgoing traffic.
•
P1 and P2 enabled. When both P1 and P2 are enabled, you must connect each interface to a
different subnet. Typically, P1 is connected to the internal network and P2 toward the Internet. Note,
however, that the appliance cannot be supported in inline mode.
different subnet. Typically, P1 is connected to the internal network and P2 toward the Internet. Note,
however, that the appliance cannot be supported in inline mode.
Note
You can only enable and configure the P1 interface for data traffic in the System Setup Wizard. If you
want to enable the P2 interface, you must do so after system setup in the web interface or using the
want to enable the P2 interface, you must do so after system setup in the web interface or using the
ifconfig
command. For more information about configuring the P2 interface, see
How you physically connect the data interfaces to the network depends on how you deploy the appliance.
For more information, see
For more information, see
.
L4 Traffic Monitor Interfaces
The appliance uses the T1 and T2 interfaces for listening to traffic on all TCP ports. You can connect
just T1 or both T1 and T2 using an Ethernet cable, depending on whether you use simplex or duplex
communication.
just T1 or both T1 and T2 using an Ethernet cable, depending on whether you use simplex or duplex
communication.
Use the “T” ports for the L4 Traffic Monitor.
Use the “P” ports for the Web Proxy.
Use the M1 port for administering
the appliance.
the appliance.