Cisco Cisco Web Security Appliance S170 사용자 가이드

다운로드
페이지 784
 
3-5
Cisco IronPort AsyncOS 7.0 for Web User Guide
OL-23079-01
Chapter 3      Deployment
Appliance Interfaces
Note
You can only enable and configure the P1 interface for data traffic in the System 
Setup Wizard. If you want to enable the P2 interface, you must do so after system 
setup in the web interface or using the 
ifconfig
 command. For more information 
about configuring the P2 interface, see 
.
How you physically connect the data interfaces to the network depends on how 
you deploy the appliance. For more information, see 
 an
L4 Traffic Monitor Interfaces
The appliance uses the T1 and T2 interfaces for listening to traffic on all TCP 
ports. You can connect just T1 or both T1 and T2 using an Ethernet cable, 
depending on whether you use simplex or duplex communication. 
  •
T1 only connected (duplex). When you configure the appliance to use 
duplex communication, connect T1 to the network so it receives all incoming 
and outgoing traffic.
  •
T1 and T2 connected (simplex). When you configure the appliance to use 
simplex communication, connect T1 to the network so it receives all outgoing 
traffic (from the clients to the Internet), and connect T2 to the network so it 
receives all incoming traffic (from the Internet to the clients).
For more information about how to connect the L4 Traffic Monitor ports to the 
network, see 
.
Example Deployment
 shows a sample deployment scenario with both the Web 
Proxy and L4 Traffic Monitor enabled. In this example, the Web Proxy is 
deployed in transparent mode and only the P1 port is connected to either a L4 
switch or a WCCP router.