Cisco Cisco Web Security Appliance S170 사용자 가이드
3-1
Cisco IronPort AsyncOS 7.7.5 for Web User Guide
Chapter 3 Deployment
Deployment Overview
3
Deployment
•
•
•
•
•
•
•
•
, page 3-13
Deployment Overview
The Web Security appliance is typically installed as an additional layer in the network between clients
and the Internet. Depending on how you deploy the appliance, you may or may not need a Layer 4 (L4)
switch or a WCCP router to direct client traffic to the appliance.
and the Internet. Depending on how you deploy the appliance, you may or may not need a Layer 4 (L4)
switch or a WCCP router to direct client traffic to the appliance.
When you deploy the Web Security appliance, you can enable one or both of the following features:
•
Secure web proxy. The appliance web proxy service monitors and scans web traffic for malicious
content. When you enable the web proxy, you can configure it to be in transparent or explicit forward
mode.
content. When you enable the web proxy, you can configure it to be in transparent or explicit forward
mode.
•
L4 Traffic Monitor. The L4 Traffic Monitor detects and blocks rogue traffic across all ports and IP
addresses. The L4 Traffic Monitor listens to network traffic that comes in over all ports and IP
addresses on the appliance and matches domain names and IP addresses against entries in its own
database tables to determine whether to allow outgoing traffic.
addresses. The L4 Traffic Monitor listens to network traffic that comes in over all ports and IP
addresses on the appliance and matches domain names and IP addresses against entries in its own
database tables to determine whether to allow outgoing traffic.
By default, both the L4 Traffic Monitor and Web Proxy are enabled in the System Setup Wizard. If you
need to disable both or one of these features, you can do so after initial setup from the web interface.
need to disable both or one of these features, you can do so after initial setup from the web interface.
The features you enable determine how you deploy and physically connect the appliance to the network.
For more information about how the features you enable affect appliance deployment, see
For more information about how the features you enable affect appliance deployment, see
. For more information about the Ethernet ports used to physically connect the
appliance to the network, see
.
Preparing for Deployment
Before installing the Web Security appliance, read through the following questions and use the responses
to each question to help you decide how to deploy the appliance and where to locate it in your network.
Each response includes a reference to a different section that covers the response in more detail.
to each question to help you decide how to deploy the appliance and where to locate it in your network.
Each response includes a reference to a different section that covers the response in more detail.
1.
Will you deploy the Web Security appliance as a transparent proxy or an explicit forward proxy?