Cisco M170 User manual

303495
1
0
1
0
Cisco M170
Email
Security
Appliance
QUICK START GUIDE
Cisco M170 Content Security
Management Appliance
1Welcome
2Before You Begin
3Document Network Settings
4Plan the Installation
5Install the Appliance in a Rack
6Plug In the Appliance
7Temporarily Change Your IP Address
8Connect to the Appliance
9Power Up the Appliance
10 Log In to the Appliance
11 Run the System Setup Wizard
12 Configure Network Settings
13 Configuration Summary
14 You’re Done!
15 Frequently Asked Questions
16 Where to Go From Here
M170_QSG.fm Page 1 Wednesday, March 13, 2013 10:01 PM

2
Revised: March 13, 2013
Part Number: 78-19644-04
1 Welcome
Thank you for choosing the Cisco M170 Content Security
Management Appliance (Cisco M170).
The Content Security Management appliance centralizes and
consolidates important policy and runtime data, providing
administrators and end-users with a single interface for
managing their email and web security systems. It ensures top
performance from Cisco C-Series and S-Series appliances, and
protects corporate network integrity by increasing deployment
flexibility.
The Content Security Management appliance provides the
central platform for managing all reporting and auditing
information for Cisco Email and Web Security appliances.
Optional management features allow you to coordinate all your
security operations from a single Content Security Management
appliance or to spread the load across multiple appliances.
This guide describes how to physically install the Cisco M170
appliance and use the System Setup Wizard to configure basic
settings.
M170_QSG.fm Page 2 Wednesday, March 13, 2013 10:01 PM

3
2 Before You Begin
Before you begin the installation, make sure that you have the
items you need.
The following items are included with the Cisco M170 Content
Security Management Appliance:
• Quick Start Guide (this guide)
• Rails and adaptor kit
• Power cable(s)
• Ethernet cable for connecting the appliance to your
network
• Regulatory Safety and Compliance Information
You will need to provide the following items yourself:
• Rack cabinet enclosure (if rack-mounting the appliance)
• Phillips-head screwdriver for assembling rails
• 10/100 Gigabit Base-T TCP/IP LAN
• Desktop or laptop computer
• Web browser (or SSH and terminal software)
• Network and administrator information for the “Document
Network Settings” section on page 4
M170_QSG.fm Page 3 Wednesday, March 13, 2013 10:01 PM

4
3 Document Network Settings
Before you begin, write down the following information about
your network and administrator settings.You will need this
information when running the System Setup Wizard.
System Settings
Default System Hostname:
Deliver Scheduled Reports To:
Time Zone Information:
NTP Server:
Admin Password:
AutoSupport: Enable/Disable
Network Integration
Default Gateway (Router) IP Address:
DNS (Internet or Specify Own):
Interfaces
Data Port 1
IP Address:
Network Mask:
Fully Qualified Hostname:
Data Port 2
IP Address:
Network Mask:
M170_QSG.fm Page 4 Wednesday, March 13, 2013 10:01 PM

5
4 Plan the Installation
The Cisco M170 Content Security Management Appliance is
designed to serve as an external or “off box” location to
monitor corporate policy settings and audit information. It
combines hardware, an operating system (AsyncOS), and
supporting services to centralize and consolidate important
policy and runtime data.
The Cisco M170 appliance is designed to sit within your inner
DMZ and receive quarantined spam from Cisco C-Series and
S-Series appliances in your outer DMZ. Internal users access the
Content Security Management appliance to view and manage
messages in their quarantines.
Plan for your network configuration to look something like this:
Internet
Firewall
Internal Users
Cisco IronPort C-Series
Outer DMZ
Inner DMZ
Cisco IronPort S-Series
Cisco IronPort M-Series
303492
1
0
1
0
CiscoIronPort C170
Email
Management
Appliance
1
0
1
0
CiscoIronPort C170
Email
Management
Appliance
1
0
1
0
CiscoIronPort S170
Email
Management
Appliance
1
0
1
0
CiscoIronPort M170
Email
Management
Appliance
1
0
1
0
CiscoIronPort M170
Email
Management
Appliance
M170_QSG.fm Page 5 Wednesday, March 13, 2013 10:01 PM

6
5 Install the Appliance in a Rack
Install the Cisco M170 Content Security Management
Appliance using either the slide rails or fixed rack mount
brackets. For information about these installation options, see
the Cisco 170 Series Hardware Installation Guide.
Appliance Placement
• Ambient Temperature—To prevent the appliance from
overheating, do not operate it in an area that exceeds an
ambient temperature of 104°F (40°C).
• Air Flow—Be sure that there is adequate air flow around
the appliance.
• Mechanical Loading—Be sure that the appliance is level
and stable to avoid any hazardous conditions.
1
0
1
0
CiscoC170
Web
Security
Appliance
50
104
F
C
40
10
303363
Temperature Limits
M170_QSG.fm Page 6 Wednesday, March 13, 2013 10:01 PM

7
6 Plug In the Appliance
Plug the female end of the power cable into the power supply on
the back panel of the appliance. Plug the male end(s) into an
electrical outlet.
7JZ78-004E
P1 P2CONSOLE
303393
Plug the M170 power cable
into an electrical outlet.
M170_QSG.fm Page 7 Wednesday, March 13, 2013 10:01 PM

8
7 Temporarily Change Your IP
Address
To connect to the Cisco M170, you must temporarily change the
IP address of your computer.
Note Make a note of your current IP configuration settings
as you will need to revert to these settings after you
finish the configuration.
For Windows
Step 1 Go to the Start menu and choose Control Panel.
Step 2 Double-click Network and Sharing Center.
Step 3 Click Local Area Connection and then click Properties.
Step 4 Select Internet Protocol (TCP/IP) and then click
Properties.
Step 5 Select Use the Following IP Address.
Step 6 Enter the following changes:
• IP Address: 192.168.42.43
• Subnet Mask: 255.255.255.0
• Default Gateway: 192.168.42.1
Step 7 Click OK and Close to exit the dialog box.
For Mac
Step 1 Launch the Apple menu and choose System Preferences.
Step 2 Click Network.
Step 3 Select the network configuration with the green icon.
This is your active connection. Then click Advanced.
Step 4 Click the TCP/IP tab and from Ethernet settings,
choose Manually from the drop-down list.
Step 5 Enter the following changes:
M170_QSG.fm Page 8 Wednesday, March 13, 2013 10:01 PM

9
• IP Address: 192.168.42.43
• Subnet Mask: 255.255.255.0
• Router: 192.168.42.1
Step 6 Click OK.
8 Connect to the Appliance
The Cisco M170 appliance has two gigabit network ports:
P1 and P2.
For the purposes of setup, connect to P1 as your management
interface and configure incoming web traffic or email on the P2
interface. These settings can be changed after the initial
installation.
7JZ78-004E
P1 P2CONSOLE
P1 P2
P1:
Management: 192.168.42.42
Connect the P1 port
to your computer using
an Ethernet cable.
P2:
Incoming web traffic or email
Connect the P2 port
to your network using
an Ethernet cable.
303494
M170_QSG.fm Page 9 Wednesday, March 13, 2013 10:01 PM

10
9 Power Up the Appliance
Power up the appliance by pressing the On/Off switch on the
front panel of the Cisco M170. You must wait five minutes for
the system to initialize each time you power up the system.
After the machine powers up, a solid green light indicates that
the appliance is operational.
10 Log In to the Appliance
You can log into the Cisco M170 using one of two interfaces:
the web-based interface or the command line interface.
Web-Based Interface
Step 1 For web browser access via the Ethernet port (see the
“Connect to the Appliance” section on page 9), go to the
Cisco M170 appliance management interface by
entering the following URL in a web browser:
http://192.168.42.42
1
0
1
0
Cisco C170
Email
Security
Appliance
303362
Wait five minutes.
M170_QSG.fm Page 10 Wednesday, March 13, 2013 10:01 PM