Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 630
Chapter 3      Setup and Installation
3-42
Cisco IronPort AsyncOS 7.1 for Email Configuration Guide
OL-22158-02
Note
The IronPort X1000/1050/1060, C60/600/650/660, and C30/300/350/360 Email 
Security appliances have three available Ethernet interfaces by default. The 
IronPort C10/100/150/160 Email Security appliances have two available Ethernet 
interfaces. 
Advanced Configurations
In addition to this configurations shown in 
 and 
, you can 
also configure:
Multiple IronPort appliances using the Centralized Management feature
Redundancy at the network interface card level by “teaming” two of the 
Ethernet interfaces on IronPort appliances using the NIC Pairing feature. 
Both of these features are discussed in the Cisco IronPort AsyncOS for Email 
Advanced Configuration Guide.
Firewall Settings (NAT, Ports)
Depending on your network configuration, your firewall may need to be 
configured to allow access on the following ports.
SMTP and DNS services must have access to the Internet. For other system 
functions, the following services may be required:
Table 3-1
Firewall Ports
SMTP: port 25
DNS: port 53
HTTP: port 80
HTTPS: port 443
SSH: port 22
Telnet: port 23
LDAP: port 389 or 3268
NTP: port 123
LDAP over SSL: port 636
LDAP with SSL for Global Catalog queries: port 
3269
FTP: port 21, data port TCP 1024 and higher
IronPort Spam Quarantine: port 6025