Cisco Cisco Web Security Appliance S690 Guida Utente

M1 and P1

M1, P1, and P2

P1 only

P1 and P2

You can enable the M1 and P1 ports during or after System Setup. However, you 
can only enable the P2 port after System Setup in the web interface or using the 

ifconfig

 CLI command.

The Web Proxy listens for client web requests on different network interfaces 
depending on how you configure the Web Security appliance: 

M1. The Web Proxy listens for requests on this interface when it is not 
configured to be restricted to appliance management services only.

P1. The Web Proxy listens for requests on this interface when it is enabled.

P2. By default, the Web Proxy does not listen for requests on this interface, 
even when enabled. However, you can configure it to listen for requests on P2 
using the 

advancedproxyconfig > miscellaneous

 CLI command.

To configure the appliance to use P2 as a second data interface:

Configure the appliance to use P1 as the interface for data traffic. You can do this 
during System Setup or after initial setup on the Network > Interfaces page.

Enable P2 in the web interface (see 

) or using the 

ifconfig

 CLI command. 

If the Management and Data interfaces are all configured, each must be 
assigned IP addresses on different subnets.

In the web interface, go to the Network > Routes page. Change the Default Route 
for data traffic to specify the next IP address that the P2 interface is connected to.

If you enable P2 to listen for client requests using the 

advancedproxyconfig > 

miscellaneous

 CLI command, you can choose whether to use P1 or P2 for 

outgoing traffic. To use P1 for outgoing traffic, change the Default Route for data 
traffic to specify the next IP address that the P1 interface is connected to.