Руководство Пользователя для Cisco Cisco Content Security Management Appliance M160
8-3
AsyncOS 10.0 for Cisco Content Security Management Appliances User Guide
Chapter 8 Centralized Policy, Virus, and Outbreak Quarantines
Centralizing Policy, Virus, and Outbreak Quarantines
Centralizing Policy, Virus, and Outbreak Quarantines
Do This
More Information
Step 1
If your Email Security appliance is in your DMZ and your Security
Management appliance is behind your firewall, open a port in the firewall
to allow the appliances to exchange centralized policy, virus, and
outbreak quarantine data.
Management appliance is behind your firewall, open a port in the firewall
to allow the appliances to exchange centralized policy, virus, and
outbreak quarantine data.
Appendix C, “Firewall Information”
Step 2
On the Security Management appliance, enable the feature.
Step 3
On the Security Management appliance, allocate disk space for non-spam
quarantines.
quarantines.
Managing Disk Space, page 14-57
Step 4
(Optional)
•
Create centralized policy quarantines on the Security Management
appliance with desired settings.
appliance with desired settings.
•
Configure settings for the centralized virus and outbreak quarantines,
and for the default policy quarantines.
and for the default policy quarantines.
If you configure these settings before migration, you can refer to the
existing settings on your Email Security appliances.
existing settings on your Email Security appliances.
You can also create required quarantines while configuring custom
migration, or quarantines will be created for you during automatic
migration. All quarantines created during migration have default settings.
migration, or quarantines will be created for you during automatic
migration. All quarantines created during migration have default settings.
Local quarantine settings are not retained in the centralized quarantine,
even if the quarantine name is the same.
even if the quarantine name is the same.
•
•
.
Step 5
On the Security Management appliance, add Email Security appliances to
manage, or select the Policy, Virus and Outbreak Quarantines option from
the centralized services of an already-added appliance.
manage, or select the Policy, Virus and Outbreak Quarantines option from
the centralized services of an already-added appliance.
If your Email Security appliances are clustered, all appliances that belong
to a particular level (machine, group, or cluster) must be added to the
Security Management appliance before you enable centralized Policy,
Virus and Outbreak Quarantines on any Email Security appliance in the
cluster.
to a particular level (machine, group, or cluster) must be added to the
Security Management appliance before you enable centralized Policy,
Virus and Outbreak Quarantines on any Email Security appliance in the
cluster.
Step 6
Commit your changes.
—
Step 7
On the Security Management appliance, configure migration of existing
policy quarantines from Email Security appliances.
policy quarantines from Email Security appliances.
Step 8
On an Email Security appliance, enable the centralized policy, virus, and
outbreak quarantines feature.
outbreak quarantines feature.
Important!
If you have policy, virus, and outbreak quarantines configured on an
Email Security appliance, migration of quarantines and all their messages
begins as soon as you commit this change.
Email Security appliance, migration of quarantines and all their messages
begins as soon as you commit this change.
See the “Centralizing Services on a
Cisco Content Security Management
appliance” chapter in the documentation
for your Email Security appliance,
specifically the following sections:
Cisco Content Security Management
appliance” chapter in the documentation
for your Email Security appliance,
specifically the following sections:
•
“About Migration of Policy, Virus,
and Outbreak Quarantines”
and Outbreak Quarantines”
•
“Centralizing Policy, Virus, and
Outbreak Quarantines”
Outbreak Quarantines”