Cisco M690 User manual

Cisco Systems, Inc.
www.cisco.com
Cisco M690 Content Security
Management Appliance 
Quick Start Guide
• Welcome
• Before You Begin
• Plan the Installation
• Document Required Settings
• Install the Appliance in a Rack
• Temporarily Change Your IP Address for Remote Access
• Connect to the Appliance
• Plug In and Power Up the Appliance
• Log In to the Appliance
• Run the System Setup Wizard
• Check for Available Upgrades
• Configure Network Settings
• Additional Configurations
• Additional Configurations

2
• Cisco Notification Service
Welcome
Thank you for choosing the Cisco M690 Content Security Management
Appliance (Cisco M690).
The Cisco M690 Content Security Management Appliance centralizes reporting
and tracking, management of quarantined email messages, and web security
appliance configuration settings. It also allows automated data backups.
This guide describes the basic steps for setting up your appliance.
Before You Begin
Before you begin the installation, make sure that you have the items you need.
The following items are included with the 
Cisco M690 Content Security Management Appliance:
• Rail kit
• Power cords
• Console cable
• A card listing the location of online documentation for your appliance.
You will need to provide the following items yourself:
• Rack cabinet enclosure (if rack-mounting the appliance)
• Phillips-head screwdriver for assembling rails
• 10/100/1000 Base TX TCP/IP LAN
• Ethernet cable for connecting the appliance to your network
• Desktop or laptop computer
• Web browser (or SSH and terminal software)
• Network and administrator information for the “Plan the Installation”
section on page 3

3
Plan the Installation
The Cisco M690 appliance is designed to sit within your inner DMZ and
communicate with Cisco C-Series and S-Series appliances in your outer DMZ.
Plan for your network configuration to look something like this:

4
Document Required Settings
Before you begin, write down the following information about your system,
network, and administrator settings.You will need this information when
running the System Setup Wizard.
System Settings
The default password will not work after you
enter this new password.
Your password must contain at least 8
characters, one number, one upper-case letter,
one lower-case letter, and one special
character.)
Network Settings
Locking Faceplate
Email system alerts to:
Time Zone Information:
NTP Server:
Admin Password:
AutoSupport: Enable/Disable
Fully Qualified Appliance Hostname
IP Address (Management port)
Network Mask:
Default Gateway (Router) IP Address:
DNS (Use the Internet’s root DNS servers or
specify your own):
Data Port 2
IP Address:
Network Mask:
4-digit code (for the M690-LKFP appliance)
System Settings
Default System Hostname:
Deliver Scheduled Reports To:
Time Zone Information:

5
Install the Appliance in a Rack
Install the Cisco M690 Content Security Management Appliance following the
instructions in the Cisco x90 Series Content Security Appliances Installation and
Maintenance Guide.
Appliance Placement
• Ambient Temperature—To prevent the appliance from overheating, do not
operate it in an area that exceeds an ambient temperature of 104°F (40°C).
• Air Flow—Be sure that there is adequate air flow around the appliance.
• Mechanical Loading—Be sure that the appliance is level and stable to avoid
any hazardous conditions.
NTP Server:
Admin Password:
AutoSupport: Enable/Disable
Network Integration
Default Gateway (Router) IP Address:
DNS (Internet or Specify Own):
Interfaces
Data Port 1
IP Address:
Network Mask:
Fully Qualified Hostname:
Data Port 2
IP Address:
Network Mask:
Locking Faceplate
4-digit code (for the M690-LKFP appliance)
System Settings

6
Temporarily Change Your IP Address for Remote
Access
To remotely configure the Cisco M690 using the network connection, you must
temporarily change the IP address of your computer. Alternatively, you can use
the serial console to configure the Cisco M690, without changing the IP address.
If you use the serial console, proceed to section below.
Note Make a note of your current IP configuration settings as you will need
to revert to these settings after you finish the configuration.
For Windows
The exact steps depend on your operating system version.
Step 1 Go to the Start menu and choose Control Panel.
Step 2 Click Network and Internet, then Network and Sharing Center.
Step 3 Click the Change adapter settings link.
Step 4 Right-click Local Area Connection and choose Properties.
Step 5 Click Internet Protocol Version 4, then choose Properties.
Step 6 Note your current settings.
Step 7 Select Use the Following IP Address.
Step 8 Enter the following changes:
– IP Address: 192.168.42.43
– Subnet Mask: 255.255.255.0
– Default Gateway: 192.168.42.1
Step 9 Click OK and OK again to exit the dialog box.

7
For Mac
The exact steps depend on your operating system version.
Step 1 Launch the Apple menu and choose System Preferences.
Step 2 Click Network.
Step 3 Click the lock icon to allow changes.
Step 4 Select the network configuration with the green icon. This is your active
connection. Then click Advanced.
Step 5 Click the TCP/IP tab and from Ethernet settings, choose Manually from
the drop-down list.
Step 6 Enter the following changes:
– IP Address: 192.168.42.43
– Subnet Mask: 255.255.255.0
– Router: 192.168.42.1
Step 7 Click OK.
Connect to the Appliance
Connect your laptop to the Management port using the Ethernet cable included
in the system box. The Cisco M690 appliance uses the Management port only.
The following illustration shows a model with Ethernet ports. Fiber Optic ports
are available with the following models of the Cisco Content Security
Management Appliance: M690-1G and M690-10G. Both of these models have
two Fiber Optic ports. These ports are located above the Ethernet ports show in
the following illustration. For the Fiber Optic models, the four Ethernet data
ports are not present. For details, see the Cisco x90 Series Content Security
Appliances Installation and Maintenance Guide.
Caution Use only the transceiver modules supplied with the 10-Gigabit fiber
optic interfaces. The use of any other transceiver modules may
damage the fiber optic interface card.

Item Port Description
1Data 1 A Gigabit Ethernet customer data
interface.
2Data 2 A Gigabit Ethernet customer data
interface.
3Data 3 A Gigabit Ethernet customer data
interface.
4Data 4 A Gigabit Ethernet customer data
interface.
5Remote
Power Cycle
The port that is used for Remote
Power Cycle (RPC).
6Console The console port that directly
connects a computer to the
appliance.
7Data 5 A Gigabit Ethernet customer data
interface.
8Management
interface
The Gigabit Ethernet interface that is
restricted to management use only.
8

9
Plug In and Power Up the Appliance
Plug in the appliance, then power up the appliance by pressing the On/Off
switch on the front panel of the Cisco M690. You must wait 10 minutes for the
system to initialize each time you power up the system.
After the machine powers up, solid green lights on the front of the appliance
indicate that the appliance is operational. The network activity light will be
green but may not be solid.
Caution If turned on quickly after connecting power to the appliance, the
appliance powers up, the fans spin and the LEDs turn on. Within
30-60 seconds, the fans stop and all LEDs turn off. The appliance
powers on 31 seconds later. This behavior is by design to allow the
system firmware and controller to synchronize. 

Wait at least 10 minutes for the system to complete the power up
sequence and the LEDs to turn green. 
If you turn the power off before the initialization is complete, the
appliance will NOT reach an operational state and must be
returned to Cisco.
Log In to the Appliance
You can log into the Cisco M690 using one of two interfaces: the web-based
interface or the command line interface.
Web-Based Interface
Step 1 For web browser access via the Ethernet port (see the “Connect to the
Appliance” section on page 7), go to the Cisco M690 appliance
management interface by entering the following URL in a web browser:
http://192.168.42.42
Step 2 Enter the following login information:
• Username: admin

10
• Password: ironport
Note The hostname parameter is assigned during system setup. Before you
can connect to the management interface using a hostname
(http://hostname), you must add the appliance hostname and IP address
to your DNS server database.
Step 3 Click Login.
Command-Line Interface
Step 1 Access the command-line interface locally or remotely:
• To access the CLI locally, set up a terminal to connect to the serial
port using 9600 bits, 8 bits, no parity, 1 stop bit (9600, 8, N, 1) and
flow control set to Hardware. To physically connect the terminal,
see the “Connect to the Appliance” section on page 7).
• To access the CLI remotely, initiate an SSH session to the IP address
192.168.42.42.
Step 2 Log in as admin with the password ironport.
Step 3 At the prompt, run the systemsetup command.
Run the System Setup Wizard
Run the System Setup Wizard to configure basic settings and enable a set of
system defaults. The System Setup Wizard starts automatically when you access
the appliance via the web-based interface (or when you run the systemsetup
command from the command-line interface.)
Step 1 Accept the end user license agreement.
Step 2 Enter system and network information from the “Plan the Installation”
section on page 3.