Cisco Cisco Web Security Appliance S390 Guida Utente

Pagina di 606
 
3-3
Cisco IronPort AsyncOS 7.7 for Web User Guide
 
Chapter 3      Deployment
Appliance Interfaces
Figure 3-1
Web Security Appliance Ethernet Ports
Management Interface
Use M1 to administer the appliance. Optionally, you can also configure the M1 interface to handle Web 
Proxy data traffic. You might want to use the M1 interface for data traffic if your organization does not 
use a separate management network.
For more information about using the M1 port to set up and manage the appliance, see 
.
For more information about configuring the network interfaces, see 
.
Data Interfaces
The appliance uses the Data interfaces for Web Proxy data traffic. You can enable and use just the P1 
port or both the P1 and P2 ports for data traffic. 
  •
P1 only enabled. When only P1 is enabled, connect it to the network for both incoming and 
outgoing traffic. 
  •
P1 and P2 enabled. When both P1 and P2 are enabled, you must connect each interface to a 
different subnet. Typically, P1 is connected to the internal network and P2 toward the Internet. Note, 
however, that the appliance cannot be supported in inline mode.
Note
You can only enable and configure the P1 interface for data traffic in the System Setup Wizard. If you 
want to enable the P2 interface, you must do so after system setup in the web interface or using the 
ifconfig
 command. For more information about configuring the P2 interface, see 
How you physically connect the data interfaces to the network depends on how you deploy the appliance. 
For more information, see 
.
L4 Traffic Monitor Interfaces
The appliance uses the T1 and T2 interfaces for listening to traffic on all TCP ports. You can connect 
just T1 or both T1 and T2 using an Ethernet cable, depending on whether you use simplex or duplex 
communication. 
Use the “T” ports for the L4 Traffic Monitor.
Use the “P” ports for the Web Proxy.
Use the M1 port for administering 
the appliance.