Руководство Пользователя для Cisco Cisco Web Security Appliance S670
3-6
AsyncOS 9.2 for Cisco Web Security Appliances User Guide
Chapter 3 Connect, Install, and Configure
Task Overview for Connecting, Installing, and Configuring
Task Overview for Connecting, Installing, and Configuring
Connecting the Appliance
Before You Begin
•
To mount the appliance, cable the appliance for management, and connect the appliance to power,
follow the instructions in the hardware guide for your appliance. For the location of this document
for your model, see
follow the instructions in the hardware guide for your appliance. For the location of this document
for your model, see
.
•
If you plan to physically connect the appliance to a WCCP v2 router for transparent redirection, first
verify that the WCCP router supports Layer 2 redirection.
verify that the WCCP router supports Layer 2 redirection.
•
Be aware of Cisco configuration recommendations:
–
Use simplex cabling (separate cables for incoming and outgoing traffic) if possible for enhanced
performance and security.
performance and security.
Step 1
Connect the Management interface if you have not already done so:
Task
More Information
1.
Connect the appliance to Internet traffic.
2.
Gather and record set-up information.
3.
Run the System Setup Wizard.
4.
Configure HTTPS proxy settings,
Authentication Realms and Identification
Profiles.
Authentication Realms and Identification
Profiles.
This step must be completed for Hybrid Web
Security mode.
Security mode.
5.
(Optional) Connect upstream proxies.
Ethernet Port
Notes
M1
Connect M1 to where it can:
•
Send and receive Management traffic.
•
(Optional) Send and receive web proxy data traffic.
You can connect a laptop directly to M1 to administer the appliance.
To connect to the management interface using a hostname
(http://hostname:8080), add the appliance hostname and IP address to your DNS
server database.
(http://hostname:8080), add the appliance hostname and IP address to your DNS
server database.
P1 and P2 (optional)
•
Available for outbound management services traffic but not administration.
•
Enable Use M1 port for management only (Network > Interfaces page).
•
Set routing for the service to use the Data interface.