Cisco ISA500 Series User manual

Quick Start Guide

Cisco Small Business

ISA500 Series Integrated Security Appliances

Package Contents

•ISA500 Series Integrated Security Appliance

•Two Wi-Fi Antennas (for ISA550W and ISA570W only)

•Mounting Kits

•Power Cord and Adapter

•RJ-45 Ethernet Cable

•Quick Start Guide

•Product CD France French Version on CD

Italian Version on CD

German Version on CD

Spanish-ES Version on CD

2 Cisco ISA500 Series Integrated Security Appliances Quick Start Guide

Welcome

Thank you for choosing the Cisco ISA500 Series Integrated Security

Appliances, a member of the Small Business Family. The ISA500 Series

are a set of Unified Threat Management (UTM) security appliances that

provide business class security gateway solutions with dual WAN, DMZ,

zone-based firewall, Site-to-Site and remote access VPN (including Cisco

IPSec VPN and SSL VPN) support, and Internet threat protection, such as

Intrusion Prevention System, Gateway Anti-Virus, Web URL Filter, Web

Reputation Filter, Email Reputation Filter, and Network Reputation.

This guide describes how to physically install the device and how to

launch the Startup Wizard to configure it.

Before You Begin

Before you begin the installation, make sure that you have the following

equipments and services:

•An active Internet account.

•Mounting kits and tools for installing the hardware. The kits packed with

the device are used for desktop placement and rack mounting. The kits

include 4 rubber feet, 2 brackets, 2 silicon rubber spacers, 8 M3

screws, 4 M5 screws, and 4 washers.

NOTE The Wall-mounting kit is not included.

•RJ-45 Ethernet cables (Category 5 or higher) for connecting computers,

WAN and LAN interfaces, or other devices.

•A computer with Microsoft Internet Explorer 8.0, or Mozilla Firefox 3.6.x

(or later) for using the web-based device Configuration Utility.

Getting to Know the Cisco ISA500 Series

Integrated Security Appliances

This section lists the available model numbers to help you become familiar

with your security appliance, and shows the front panel and back panel of

the unit.

Cisco ISA500 Series Integrated Security Appliances Quick Start Guide 3

Product Models

NOTE Any Configurable port can be configured to be a WAN, DMZ, or

LAN port. Only one Configurable port can be configured as a WAN port

at a time. Up to 4 Configurable ports can be configured as DMZ ports.

Front Panel

ISA550 Front Panel

ISA550W Front Panel

ISA570 Front Panel

Models Description Configuration

ISA550 Cisco ISA550 Integrated

Security Appliance

1 WAN port, 2 LAN ports, 4

Configurable ports, and 1 USB 2.0 port

ISA550W Cisco ISA550 Integrated

Security Appliance with

WiFi

1 WAN port, 2 LAN ports, 4

Configurable ports, 1 USB 2.0 port, and

802.11b/g/n

ISA570 Cisco ISA570 Integrated

Security Appliance

1 WAN port, 4 LAN ports, 5

Configurable ports, and 1 USB 2.0 port

ISA570W Cisco ISA570 Integrated

Security Appliance with

WiFi

1 WAN port, 4 LAN ports, 5

Configurable ports, 1 USB 2.0 port, and

802.11b/g/n

282351

Small Business

VPN USB WAN LAN CONFIGURABLEPOWER/SYS

SPEED

LINK /ACT

234567

ISA550 Cisco

281983

Small Business

VPN USB WAN LAN CONFIGURABLEPOWER/SYS

SPEED

LINK /ACT

234567

WLAN

ISA550W Cisco

Small Business

VPN USB WAN LAN CONFIGURABLEPOWER/SYS

SPEED

LINK /ACT

910

2345678

282350

ISA570 Cisco

4 Cisco ISA500 Series Integrated Security Appliances Quick Start Guide

ISA570W Front Panel

Front Panel Lights

The following table describes the lights on the front panel of the security

appliance. These lights are used for monitoring system activity.

Lights Description

POWER/SYS Indicates the power status and system status.

•Solid green when the system is powered on and operates

normally.

•Flashes green when the system is booting.

•Solid amber when the system has a booting problem, a

device error occurs, or the system has a problem.

VPN Indicates the Site-to-Site VPN connection status.

•Solid green when the Site-to-Site VPN tunnel is

established.

•Flashes green when attempting to establish the Site-to-

Site VPN tunnel.

•Flashes amber when the system is experiencing problems

setting up the Site-to-Site VPN connection and there is no

VPN connection up and running.

USB Indicates the USB device status.

•Solid green when a USB device is detected and operates

normally.

•Flashes green when the USB device is transmitting and

receiving data.

WLAN

(ISA550W and

ISA570W only)

Indicates the WLAN status.

•Solid green when the WLAN is up.

•Flashes green when the WLAN is transmitting and

receiving data.

Small Business

VPN USB WAN LAN CONFIGURABLEPOWER/SYS

SPEED

LINK /ACT

910

2345678

WLAN

281980

ISA570W Cisco

Cisco ISA500 Series Integrated Security Appliances Quick Start Guide 5

Back Panel

The back panel is where you connect the network devices. The ports on

the back panel vary depending on the model.

ISA550 and ISA550W Back Panel

ISA570 and ISA570W Back Panel

SPEED Indicates the traffic rate of the associated port.

•Off when the traffic rate is 10 or 100 Mbps.

•Solid green when the traffic rate is 1000 Mbps.

LINK/ACT Indicates a connection is being made through the port.

•Solid green when the link is up.

•Flashes green when the port is transmitting and receiving

data.

Lights Description

281984

ANT02ANT01

RESET

OPOWER

12VDC

CONFIGURABLE

LAN

WAN

ANT01 ANT02

Reset

Button

Power

Switch

Power

Connector

WAN

Port

USB

Port Configurable

Ports

LAN

Ports

281981

RESET

ANT02ANT01

8910

WAN

CONFIGURABLE POWER

12VDC

LAN

ANT01 ANT02

Reset

Button

Power

Switch

Power

Connector

WAN

Port

USB

Port Configurable

Ports

LAN

Ports

281981

RESET

ANT02ANT01

8910

WAN

CONFIGURABLE POWER

12VDC

LAN

ANT01 ANT02

Reset

Button

Power

Switch

Power

Connector

WAN

Port

USB

Port Configurable

Ports

LAN

Ports

6 Cisco ISA500 Series Integrated Security Appliances Quick Start Guide

Back Panel Descriptions

Default Settings

Mounting the Cisco ISA500 Series

Integrated Security Appliances

You can place your security appliance on a desktop, mount it on a wall, or

mount it in a rack.

Feature Description

ANT01/ANT02 Threaded connectors for the antennas (ISA550W and

ISA570W only).

USB Port Connects the unit to a USB device. You can use a USB

device to save and restore the configurations, or to upgrade

the firmware images.

Configurable

Ports

Can be set to operate as WAN, LAN, or DMZ ports. The

ISA550 and ISA550W have 4 Configurable ports. The

ISA570 and ISA570W have 5 Configurable ports.

NOTE Only one Configurable port can be configured as a

WAN port at a time. Up to 4 Configurable ports can be

configured as DMZ ports.

LAN Ports Connects PCs and other network appliances to the unit.

The ISA550 and ISA550W have 2 Dedicated LAN ports.

The ISA570 and ISA570W have 4 Dedicated LAN ports.

WAN Port Connects the unit to a DSL or cable modem, or other WAN

connectivity device.

RESET Button To restore the factory default settings, push and hold the

RESET button for minimum of 3 seconds while the unit is

powered on. The POWER/SYS light will flash green when

the system is rebooting.

Power Switch Powers the unit on or off.

Power Connector Connects the unit to power using the supplied power cord

and adapter.

Parameter Default Value

Username cisco

Password cisco

LAN IP 192.168.1.1

DHCP Range 192.168.1.100 to 200

Netmask 255.255.255.0

GUEST VLAN 192.168.2.1

Cisco ISA500 Series Integrated Security Appliances Quick Start Guide 7

Placement Tips

• Ambient Temperature: To prevent the security appliance from

overheating, do not operate it in an area that exceeds an ambient

temperature of 104°F (40°C).

•AirFlow:Be sure that there is adequate air flow around the security

appliance.

• Mechanical Loading: Be sure that the security appliance is level and

stable to avoid any hazardous conditions.

To place your security appliance on a desktop, install the supplied four

rubber feet on the bottom of the security appliance. Place the security

appliance on a flat surface.

Wall Mounting

There is no wall-mounting kit included with your security appliance. We

recommend that you use the following mounting screws to install your

security appliance to the wall or the ceiling:

WARNING Insecure mounting might damage the device or cause injury.

Cisco is not responsible for damages incurred by improper

wall-mounting.

STEP 1Determine where you want to mount the security appliance. Verify

that the surface is smooth, flat, dry, and sturdy.

STEP 2Insert two 18.6 mm (0.73 inch) screws, with anchors, into the wall

234 mm apart (9.21 inches) horizontally. Leave 3 to 4 mm (about 1/

8 inch) of the screw threads beneath the screw head exposed.

1 8 mm/0.32 in 2 25 mm/0.98 in 3 6.5 mm/0.26 in 4 18.6 mm/0.73 in

196243

8 Cisco ISA500 Series Integrated Security Appliances Quick Start Guide

STEP 3Place the wall-mount slots over the screws and slide the unit down

until the screws fit snugly into the wall-mount slots.

Rack Mounting

You can mount the security appliance in any standard size, 19-inch (about

48 cm) wide rack. The security appliance requires 1 rack unit (RU) of

space, which is 1.75-inch (44.45 mm) high. The rack-mounting kit is

included with the unit.

CAUTION Do not overload the power outlet or circuit when installing

multiple devices in a rack.

STEP 1Place one of the supplied silicon rubber spacers on the side of the

security appliance so that the four holes align to the screw holes.

Place the rack mount bracket next to the silicon rubber spacer and

install the M3 screws.

If the M3 screws are not long enough to reattach the bracket with

the silicon rubber spacer, attach the bracket directly to the case

without the silicon rubber spacer.

STEP 2Install the security appliance into a standard rack as shown below.

Place the washers on the brackets so that the holes align to the

screw holes and then install the M5 screws.

281985

Step 1 Step 2

Cisco ISA500 Series Integrated Security Appliances Quick Start Guide 9

Connecting the Cisco ISA500 Series

Integrated Security Appliances

STEP 1Connect the security appliance to power using the supplied power

cord and adapter. Make sure that the power switch is turned off.

STEP 2If you are installing the ISA550W or ISA570W, screw each antenna

onto a threaded connector on the back panel. Orient each antenna

to point upward.

STEP 3For a DSL or cable modem, or other WAN connectivity devices,

connect an Ethernet network cable from the device to the WAN

port on the back panel. Cisco strongly recommends using Cat5E or

better cable.

STEP 4(Optional) For network devices, connect an Ethernet network cable

from the network device to an available LAN port on the back

panel. For a Cisco UC500 or UC300 network device, connect the

WAN port of the UC500 or UC300 to an available LAN port on the

back panel.

STEP 5Power on the connected devices.

STEP 6Power on the security appliance. The lights on the front panel for

all connected ports light up to show active connections.

A sample configuration is illustrated below.

281982

RESET

ANT02ANT01

8910

WAN

CONFIGURABLE POWER

12VDC

LAN

Internet

Access

Device

Public

Web Server Power

Network

Devices

10 Cisco ISA500 Series Integrated Security Appliances Quick Start Guide

Getting Started with the Configuration

After you install the security appliance, configure it by using the Startup

Wizard.

STEP 1Connect a computer to an available LAN port on the back panel of

the security appliance.

Your PC will become a DHCP client of the security appliance and

will receive an IP address in the 192.168.1.x range.

STEP 2Start a web browser. In the Address bar, enter the default LAN IP

address of the security appliance: 192.168.1.1.

STEP 3When the login page opens, enter the username and password.

The default username is “cisco”. The default password is “cisco”.

Usernames and passwords are case sensitive.

STEP 4Click Login.

For the first login, you are forced to change the default username

and password of the default administrator account. After you

change them, the Startup Wizard launches.

STEP 5Follow the on-screen prompts to complete the initial configuration

such as remote management, port, WAN, LAN, DMZ, WAN

redundancy, and WLAN (for ISA550W and ISA570W only).

Suggested Next Steps

Congratulations, you are now ready to start using your security appliance.

You may want to consider taking some of the following tasks to secure

your security appliance and network:

•Configure the VLANs, DMZs, and WLANs.

•Configure the zones.

•Configure the WAN redundancy if you have two ISP links.

•Configure the zone-based firewall.

•Configure the UTM services such as Intrusion Prevention System, Anti-

Virus, Email Reputation Filter, Web URL Filter, and Web Reputation Filter.

•Configure the VPNs for Site-to-Site and remote secure access.

•Configure the WAN, LAN, and Wireless QoS settings.

Other manuals for ISA500 Series

Table of contents

Other Cisco Network Hardware manuals

Cisco

Cisco NCS 2002 Instruction Manual

Cisco

Cisco IAD2430 Series Manual

Cisco

Cisco WAE-674-K9 - Wide Area Application Engine... Manual

Cisco

Cisco VIC-2FXS - 3600 Voice Interface Card-Fxs... Instruction Manual

Cisco

Cisco C7200-I - Input/Output Controller - Control... User manual

Cisco

Cisco 5500 Series User manual

Cisco

Cisco Firepower 2130 Maintenance and service guide

Cisco

Cisco Linksys WES610N User manual

Cisco

Cisco ONS 15540 ESP Manual

Cisco

Cisco Linksys Business Series Network Storage System... User manual

Cisco

Cisco ONS 15454 Series Manual

Cisco

Cisco Firepower 1010 User manual

Cisco

Cisco Aironet 340 Series User manual

Cisco

Cisco CiscoWorks Wireless LAN Solution Engine Operator's manual

Cisco

Cisco Secure Firewall Management Center 1700 User manual

Cisco

Cisco 2600 Series Technical document

Cisco

Cisco ME 1200 Series Manual

Cisco

Cisco NCS 1002 Firmware update

Cisco

Cisco ESR-PRE2 User manual

Cisco

Cisco 5400 Instruction Manual

Cisco

Cisco EXPLORER 3100 User manual

Cisco

Cisco NCS 540 User manual

Cisco

Cisco NCS 1004 User manual

Cisco

Cisco NCS 2000 series User manual

Popular Network Hardware manuals by other brands

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL product manual

B&B Electronics

B&B Electronics ZXT9-IO-222R2 product manual

Yudor

Yudor YDS-16 user manual

D-Link

D-Link ShareCenter DNS-320L datasheet

Samsung

Samsung ES1642dc Hardware user manual

Honeywell Home

Honeywell Home LTEM-PV Installation and setup guide

evertz

evertz 7700 Series manual

D-Link

D-Link ShareCenter DNS-343 Quick installation guide

Asante

Asante AsanteBridge 1012 user guide

FireBrick

FireBrick FB2700 user manual

Audiovox Electronics

Audiovox Electronics ARWH2T user manual

ADC

ADC DSX-1 Operational Procedures Guide

NetComm

NetComm NF2 user guide

Alcatel-Lucent

Alcatel-Lucent 5620 user guide

Dell EMC

Dell EMC XC6420 Series Solution guide

Lanner

Lanner NCA-1020A user manual

Allied Telesis

Allied Telesis AT-TN121-A Specifications

Arista

Arista CCA-ETM-Q12 quick start guide