Cisco S170 Web User manual

Web

Security

Appliance

303417

Cisco S170

Web

Security

Appliance

QUICK START GUIDE

Cisco S170 Web Security Appliance

1Welcome

2Before You Begin

3Document Network Settings

4Plan the Installation

5Install the Appliance in a Rack

6Plug In the Appliance

7Temporarily Change Your IP Address

8Connect to the Appliance

9Power Up the Appliance

10 Log In to the Appliance

11 Run the System Setup Wizard

12 Configure Network Settings

13 Configuration Summary

14 You’re Done!

15 Where to Go from Here

S170_QSG.fm Page 1 Wednesday, March 13, 2013 10:23 PM

Revised: March 13, 2013

Part Number: 78-19643-04

1 Welcome

Thank you for choosing the Cisco S170 Web Security Appliance

(Cisco S170). The Cisco S170 helps organizations secure and

control web traffic.

This guide describes how to physically install the Cisco S170

appliance and use the System Setup Wizard to configure basic

settings. You can also refer to the “Deployment” chapter in the

Cisco IronPort AsyncOS for Web User Guide for information

about how to configure appliance settings.

2 Before You Begin

Before you begin the installation, make sure that you have the

items needed. The following items are included with the Cisco

S170 Web Security Appliance:

• Quick Start Guide (this guide)

• Rails and adaptor kit

• Power cable(s)

• Ethernet cable for connecting the appliance to your

network

• Regulatory Safety and Compliance Information

You will need to provide the following items yourself:

• Rack cabinet enclosure (if rack-mounting the appliance)

• Phillips-head screwdriver for assembling rails

• 10/100 Gigabit Base-T TCP/IP LAN

• Desktop or laptop computer

• Web browser (or SSH and terminal software)

• Network and administrator information for the “Document

Network Settings” section on page 3 and “go live”

configuration

S170_QSG.fm Page 2 Wednesday, March 13, 2013 10:23 PM

3 Document Network Settings

Before you begin, write down the following information about

your network and administrator settings.

Deployment Options

• Web Proxy

–

Transparent with L4

–

Switch Transparent with

WCCP Router

–

Explicit Forward Proxy

• L4 Traffic Monitor

–

Simplex tap/Span

port

–

Duplex tap/Span

port

Network Context

Is there another proxy on the

network:

Yes

Other Proxy IP Address:

Other Proxy Port:

Network Settings

Default System Hostname:

DNS Servers: Use the Internet root DNS

servers.

Use the following DNS

servers (maximum 3):

Network Time Protocol (NTP)

Server:

Time Zone Region:

Time Zone Country:

Time Zone GMT Offset:

S170_QSG.fm Page 3 Wednesday, March 13, 2013 10:23 PM

Interface Settings

Management Port

IP Address:

Network Mask:

Hostname:

Data Port (Optional, see Note)

IP Address:

Network Mask:

Hostname:

Note The Web Proxy can share the management interface. If

configured separately, the Data interface IP address and

the management interface IP address cannot share the

same subnet.

Routes

Internal Routes for Management

Default Gateway:

Static Route Name:

Static Route Destination

Network:

Static Route Gateway:

Internal Routes for Data

Default Gateway:

Static Route Name:

Static Route Destination

Network:

Static Route Gateway:

S170_QSG.fm Page 4 Wednesday, March 13, 2013 10:23 PM

Transparent Routing Device

Device Type: • Layer 4 Switch or No

Device

• WCCP Router

–

Enable standard

service ID

(web-cache).

–

Router Addresses:

_________________

–

Enable router

security.

Password:

_________________

Note When you connect the appliance to a WCCP router, you

might need to configure the Web Security appliance to

create WCCP services after you run the System Setup

Wizard.

Administrative Settings

Administrator Password:

Email System Alerts To:

SMTP Relay Host: (Optional)

AutoSupport: Enable

SenderBase Network

Participation:

Enable

• Limited

• Standard

S170_QSG.fm Page 5 Wednesday, March 13, 2013 10:23 PM

Security Services

L4 Traffic Monitor: • Monitor only

• Block

Acceptable Use Controls: Enable

• IronPort URL Filters

• Cisco IronPort Web

Usage Controls

Web Reputation Filters: Enable

Malware and Spyware Scanning: • Enable Webroot

• Enable McAfee

• Enable Sophos

Action for Detected Malware: • Monitor only

• Block

IronPort Data Security Filtering: Enable

S170_QSG.fm Page 6 Wednesday, March 13, 2013 10:23 PM

4 Plan the Installation

Decide how you are going to configure the Cisco S170 Web

Security Appliance within your network.

The Cisco S170 appliance is typically installed as an additional

layer in the network between clients and the Internet.

Depending on how you deploy the appliance, you may or may

not need a Layer 4 (L4) switch or a WCCP router to direct client

traffic to the appliance.

Deployment options include:

• Transparent Proxy—Web proxy with an L4 switch

• Transparent Proxy—Web proxy with a WCCP router

• Explicit Forward Proxy—Connection to a network switch

• L4 Traffic Monitor—Ethernet tap (simplex or duplex)

–

Simplex Mode: Port T1 receives all outgoing traffic,

and port T2 receives all incoming traffic.

–

Duplex Mode: Port T1 receives all incoming and

outgoing traffic.

T1 T2P2P1

MGMT

CONSOLE

303416

Management PC

Clients L4 Switch/

WCCP

Router

Ethernet tap

Simplex/

Duplex

Firewall Internet

S170_QSG.fm Page 7 Wednesday, March 13, 2013 10:23 PM

Note To monitor true client IP addresses, the L4 traffic

monitor should always be configured inside the firewall

and before NAT (Network Address Translation).

5 Install the Appliance in a Rack

Install the Cisco S170 Web Security Appliance using either the

slide rails or fixed rack mount brackets. For information about

these installation options, see the Cisco 170 Series Hardware

Installation Guide.

Appliance Placement in a Rack

• Ambient Temperature—To prevent the appliance from

overheating, do not operate it in an area that exceeds an

ambient temperature of 104°F (40°C).

• Air Flow—Be sure that there is adequate air flow around

the appliance.

• Mechanical Loading—Be sure that the appliance is level

and stable to avoid any hazardous conditions.

CiscoC170

Web

Security

Appliance

104

303363

Temperature Limits

S170_QSG.fm Page 8 Wednesday, March 13, 2013 10:23 PM

6 Plug In the Appliance

Plug the female end of the power cable into the power supply on

the back panel of the appliance. Plug the male end into an

electrical outlet.

7JZ78-003E

T1 T2P2P1

MGMT

CONSOLE

303418

Plug the Cisco S170 power

cable into an electrical outlet

S170_QSG.fm Page 9 Wednesday, March 13, 2013 10:23 PM

7 Temporarily Change Your IP

Address

To connect to the Cisco S170 appliance, you must temporarily

change the IP address of your computer.

Note Make a note of your current IP configuration settings

because you will need to revert to these settings after

you finish the configuration.

For Windows

Step 1 Connect your laptop to the MGMT management Port

using the Ethernet cable included in the system box.

The Cisco S170 appliance uses the MGMT

management port only.

Step 2 Go to the Start menu and choose Control Panel.

Step 3 Double-click Network and Sharing Center.

Step 4 Click Local Area Connection and then click Properties.

Step 5 Select Internet Protocol (TCP/IP) and then click

Properties.

Step 6 Select Use the Following IP Address.

7JZ78-003E

T1 T2P2P1

MGMT

CONSOLE

MGMT

303414

Management Port

S170_QSG.fm Page 10 Wednesday, March 13, 2013 10:23 PM

This manual suits for next models

Table of contents

Other Cisco Network Hardware manuals

Cisco

Cisco CVPN3002-K9 - Fast Ethernet VPN Gateway User manual

Cisco

Cisco CRS-1 - Carrier Routing System Router User guide

Cisco

Cisco Octal-Port DMT ATU-C Line Card Technical manual

Cisco

Cisco IAD1101 User manual

Cisco

Cisco UCS 6248 UP User manual

Cisco

Cisco CiscoWorks Wireless LAN Solution Engine Operator's manual

Cisco

Cisco Edge Concentrator MGX 8220 Reference manual

Cisco

Cisco IAD2430 Series Installation guide

Cisco

Cisco Firepower 1010 User manual

Cisco

Cisco SA520-K9 - SA 500 Series Security Appliances User manual

Cisco

Cisco 8011-2X2XP4L Manual

Cisco

Cisco NCS 4201 Manual

Cisco

Cisco ONS 15454 User manual

Cisco

Cisco DS-X9530-SF1-K9 - Supervisor-1 Module - Control... User manual

Cisco

Cisco ONS 15454 DWDM User manual

Cisco

Cisco Firepower 4100 Series User manual

Cisco

Cisco ISA 3000 Quick start guide

Cisco

Cisco MERAKI MX75 User manual

Cisco

Cisco ONS 15454 SDH Manual

Cisco

Cisco Mc3810 - 16MB Flash Memory Quick guide

Cisco

Cisco Content Delivery Engine 100/200/300/400 Manual

Cisco

Cisco ASR 9000 Series User manual

Cisco

Cisco Firepower 4100 Series User manual

Cisco

Cisco MERAKI MX85 Series Manual

Popular Network Hardware manuals by other brands

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL product manual

B&B Electronics

B&B Electronics ZXT9-IO-222R2 product manual

Yudor

Yudor YDS-16 user manual

D-Link

D-Link ShareCenter DNS-320L datasheet

Samsung

Samsung ES1642dc Hardware user manual

Honeywell Home

Honeywell Home LTEM-PV Installation and setup guide

evertz

evertz 7700 Series manual

D-Link

D-Link ShareCenter DNS-343 Quick installation guide

Asante

Asante AsanteBridge 1012 user guide

FireBrick

FireBrick FB2700 user manual

Audiovox Electronics

Audiovox Electronics ARWH2T user manual

ADC

ADC DSX-1 Operational Procedures Guide

NetComm

NetComm NF2 user guide

Alcatel-Lucent

Alcatel-Lucent 5620 user guide

Dell EMC

Dell EMC XC6420 Series Solution guide

Lanner

Lanner NCA-1020A user manual

Allied Telesis

Allied Telesis AT-TN121-A Specifications

Arista

Arista CCA-ETM-Q12 quick start guide