Cisco Cisco Web Security Appliance S170 사용자 가이드
3-3
Cisco IronPort AsyncOS 7.5.7 for Web User Guide
Chapter 3 Deployment
Appliance Interfaces
•
L4 Traffic Monitor. The L4 Traffic Monitor interfaces include T1 and T2. Use these interfaces for
monitoring and blocking L4 Traffic Monitor traffic. For more information, see
monitoring and blocking L4 Traffic Monitor traffic. For more information, see
.
shows the Ethernet ports on the back of the Web Security appliance blade.
Figure 3-1
Web Security Appliance Ethernet Ports
Management Interface
Use M1 to administer the appliance. Optionally, you can also configure the M1 interface to handle Web
Proxy data traffic. You might want to use the M1 interface for data traffic if your organization does not
use a separate management network.
Proxy data traffic. You might want to use the M1 interface for data traffic if your organization does not
use a separate management network.
For more information about using the M1 port to set up and manage the appliance, see
.
For more information about configuring the network interfaces, see
.
Data Interfaces
The appliance uses the Data interfaces for Web Proxy data traffic. You can enable and use just the P1
port or both the P1 and P2 ports for data traffic.
port or both the P1 and P2 ports for data traffic.
•
P1 only enabled. When only P1 is enabled, connect it to the network for both incoming and
outgoing traffic.
outgoing traffic.
•
P1 and P2 enabled. When both P1 and P2 are enabled, you must connect each interface to a
different subnet. Typically, P1 is connected to the internal network and P2 toward the Internet. Note,
however, that the appliance cannot be supported in inline mode.
different subnet. Typically, P1 is connected to the internal network and P2 toward the Internet. Note,
however, that the appliance cannot be supported in inline mode.
Note
You can only enable and configure the P1 interface for data traffic in the System Setup Wizard. If you
want to enable the P2 interface, you must do so after system setup in the web interface or using the
want to enable the P2 interface, you must do so after system setup in the web interface or using the
ifconfig
command. For more information about configuring the P2 interface, see
How you physically connect the data interfaces to the network depends on how you deploy the appliance.
For more information, see
For more information, see
.
Use the “T” ports for the L4 Traffic Monitor.
Use the “P” ports for the Web Proxy.
Use the M1 port for administering
the appliance.
the appliance.