Cisco ISA500 Series User manual

Quick Start Guide
Cisco Small Business
ISA500 Series Integrated Security Appliances
Package Contents
•ISA500 Series Integrated Security Appliance
•Two Wi-Fi Antennas (for ISA550W and ISA570W only)
•Mounting Kits
•Power Cord and Adapter
•RJ-45 Ethernet Cable
•Quick Start Guide
•Product CD France French Version on CD
Italian Version on CD
German Version on CD
Spanish-ES Version on CD

2 Cisco ISA500 Series Integrated Security Appliances Quick Start Guide
Welcome
Thank you for choosing the Cisco ISA500 Series Integrated Security
Appliances, a member of the Small Business Family. The ISA500 Series
are a set of Unified Threat Management (UTM) security appliances that
provide business class security gateway solutions with dual WAN, DMZ,
zone-based firewall, Site-to-Site and remote access VPN (including Cisco
IPSec VPN and SSL VPN) support, and Internet threat protection, such as
Intrusion Prevention System, Gateway Anti-Virus, Web URL Filter, Web
Reputation Filter, Email Reputation Filter, and Network Reputation.
This guide describes how to physically install the device and how to
launch the Startup Wizard to configure it.
Before You Begin
Before you begin the installation, make sure that you have the following
equipments and services:
•An active Internet account.
•Mounting kits and tools for installing the hardware. The kits packed with
the device are used for desktop placement and rack mounting. The kits
include 4 rubber feet, 2 brackets, 2 silicon rubber spacers, 8 M3
screws, 4 M5 screws, and 4 washers.
NOTE The Wall-mounting kit is not included.
•RJ-45 Ethernet cables (Category 5 or higher) for connecting computers,
WAN and LAN interfaces, or other devices.
•A computer with Microsoft Internet Explorer 8.0, or Mozilla Firefox 3.6.x
(or later) for using the web-based device Configuration Utility.
Getting to Know the Cisco ISA500 Series
Integrated Security Appliances
This section lists the available model numbers to help you become familiar
with your security appliance, and shows the front panel and back panel of
the unit.
1
2

Cisco ISA500 Series Integrated Security Appliances Quick Start Guide 3
Product Models
NOTE Any Configurable port can be configured to be a WAN, DMZ, or
LAN port. Only one Configurable port can be configured as a WAN port
at a time. Up to 4 Configurable ports can be configured as DMZ ports.
Front Panel
ISA550 Front Panel
ISA550W Front Panel
ISA570 Front Panel
Models Description Configuration
ISA550 Cisco ISA550 Integrated
Security Appliance
1 WAN port, 2 LAN ports, 4
Configurable ports, and 1 USB 2.0 port
ISA550W Cisco ISA550 Integrated
Security Appliance with
WiFi
1 WAN port, 2 LAN ports, 4
Configurable ports, 1 USB 2.0 port, and
802.11b/g/n
ISA570 Cisco ISA570 Integrated
Security Appliance
1 WAN port, 4 LAN ports, 5
Configurable ports, and 1 USB 2.0 port
ISA570W Cisco ISA570 Integrated
Security Appliance with
WiFi
1 WAN port, 4 LAN ports, 5
Configurable ports, 1 USB 2.0 port, and
802.11b/g/n
282351
Small Business
1
VPN USB WAN LAN CONFIGURABLEPOWER/SYS
SPEED
LINK /ACT
234567
ISA550 Cisco
281983
Small Business
1
VPN USB WAN LAN CONFIGURABLEPOWER/SYS
SPEED
LINK /ACT
234567
WLAN
ISA550W Cisco
Small Business
1
VPN USB WAN LAN CONFIGURABLEPOWER/SYS
SPEED
LINK /ACT
910
2345678
282350
ISA570 Cisco

4 Cisco ISA500 Series Integrated Security Appliances Quick Start Guide
ISA570W Front Panel
Front Panel Lights
The following table describes the lights on the front panel of the security
appliance. These lights are used for monitoring system activity.
Lights Description
POWER/SYS Indicates the power status and system status.
•Solid green when the system is powered on and operates
normally.
•Flashes green when the system is booting.
•Solid amber when the system has a booting problem, a
device error occurs, or the system has a problem.
VPN Indicates the Site-to-Site VPN connection status.
•Solid green when the Site-to-Site VPN tunnel is
established.
•Flashes green when attempting to establish the Site-to-
Site VPN tunnel.
•Flashes amber when the system is experiencing problems
setting up the Site-to-Site VPN connection and there is no
VPN connection up and running.
USB Indicates the USB device status.
•Solid green when a USB device is detected and operates
normally.
•Flashes green when the USB device is transmitting and
receiving data.
WLAN
(ISA550W and
ISA570W only)
Indicates the WLAN status.
•Solid green when the WLAN is up.
•Flashes green when the WLAN is transmitting and
receiving data.
Small Business
1
VPN USB WAN LAN CONFIGURABLEPOWER/SYS
SPEED
LINK /ACT
910
2345678
WLAN
281980
ISA570W Cisco

Cisco ISA500 Series Integrated Security Appliances Quick Start Guide 5
Back Panel
The back panel is where you connect the network devices. The ports on
the back panel vary depending on the model.
ISA550 and ISA550W Back Panel
ISA570 and ISA570W Back Panel
SPEED Indicates the traffic rate of the associated port.
•Off when the traffic rate is 10 or 100 Mbps.
•Solid green when the traffic rate is 1000 Mbps.
LINK/ACT Indicates a connection is being made through the port.
•Solid green when the link is up.
•Flashes green when the port is transmitting and receiving
data.
Lights Description
281984
ANT02ANT01
RESET
I
/
OPOWER
12VDC
4
5
6
7
CONFIGURABLE
2
3
LAN
1
WAN
ANT01 ANT02
Reset
Button
Power
Switch
Power
Connector
WAN
Port
USB
Port Configurable
Ports
LAN
Ports
281981
I
/
O
RESET
ANT02ANT01
1
6
7
8910
WAN
CONFIGURABLE POWER
12VDC
2
3
4
5
LAN
ANT01 ANT02
Reset
Button
Power
Switch
Power
Connector
WAN
Port
USB
Port Configurable
Ports
LAN
Ports
281981
I
/
O
RESET
ANT02ANT01
1
6
7
8910
WAN
CONFIGURABLE POWER
12VDC
2
3
4
5
LAN
ANT01 ANT02
Reset
Button
Power
Switch
Power
Connector
WAN
Port
USB
Port Configurable
Ports
LAN
Ports

6 Cisco ISA500 Series Integrated Security Appliances Quick Start Guide
Back Panel Descriptions
Default Settings
Mounting the Cisco ISA500 Series
Integrated Security Appliances
You can place your security appliance on a desktop, mount it on a wall, or
mount it in a rack.
Feature Description
ANT01/ANT02 Threaded connectors for the antennas (ISA550W and
ISA570W only).
USB Port Connects the unit to a USB device. You can use a USB
device to save and restore the configurations, or to upgrade
the firmware images.
Configurable
Ports
Can be set to operate as WAN, LAN, or DMZ ports. The
ISA550 and ISA550W have 4 Configurable ports. The
ISA570 and ISA570W have 5 Configurable ports.
NOTE Only one Configurable port can be configured as a
WAN port at a time. Up to 4 Configurable ports can be
configured as DMZ ports.
LAN Ports Connects PCs and other network appliances to the unit.
The ISA550 and ISA550W have 2 Dedicated LAN ports.
The ISA570 and ISA570W have 4 Dedicated LAN ports.
WAN Port Connects the unit to a DSL or cable modem, or other WAN
connectivity device.
RESET Button To restore the factory default settings, push and hold the
RESET button for minimum of 3 seconds while the unit is
powered on. The POWER/SYS light will flash green when
the system is rebooting.
Power Switch Powers the unit on or off.
Power Connector Connects the unit to power using the supplied power cord
and adapter.
Parameter Default Value
Username cisco
Password cisco
LAN IP 192.168.1.1
DHCP Range 192.168.1.100 to 200
Netmask 255.255.255.0
GUEST VLAN 192.168.2.1
3

Cisco ISA500 Series Integrated Security Appliances Quick Start Guide 7
Placement Tips
• Ambient Temperature: To prevent the security appliance from
overheating, do not operate it in an area that exceeds an ambient
temperature of 104°F (40°C).
•AirFlow:Be sure that there is adequate air flow around the security
appliance.
• Mechanical Loading: Be sure that the security appliance is level and
stable to avoid any hazardous conditions.
To place your security appliance on a desktop, install the supplied four
rubber feet on the bottom of the security appliance. Place the security
appliance on a flat surface.
Wall Mounting
There is no wall-mounting kit included with your security appliance. We
recommend that you use the following mounting screws to install your
security appliance to the wall or the ceiling:
WARNING Insecure mounting might damage the device or cause injury.
Cisco is not responsible for damages incurred by improper
wall-mounting.
STEP 1Determine where you want to mount the security appliance. Verify
that the surface is smooth, flat, dry, and sturdy.
STEP 2Insert two 18.6 mm (0.73 inch) screws, with anchors, into the wall
234 mm apart (9.21 inches) horizontally. Leave 3 to 4 mm (about 1/
8 inch) of the screw threads beneath the screw head exposed.
1 8 mm/0.32 in 2 25 mm/0.98 in 3 6.5 mm/0.26 in 4 18.6 mm/0.73 in
1
2
4
3
196243

8 Cisco ISA500 Series Integrated Security Appliances Quick Start Guide
STEP 3Place the wall-mount slots over the screws and slide the unit down
until the screws fit snugly into the wall-mount slots.
Rack Mounting
You can mount the security appliance in any standard size, 19-inch (about
48 cm) wide rack. The security appliance requires 1 rack unit (RU) of
space, which is 1.75-inch (44.45 mm) high. The rack-mounting kit is
included with the unit.
CAUTION Do not overload the power outlet or circuit when installing
multiple devices in a rack.
STEP 1Place one of the supplied silicon rubber spacers on the side of the
security appliance so that the four holes align to the screw holes.
Place the rack mount bracket next to the silicon rubber spacer and
install the M3 screws.
If the M3 screws are not long enough to reattach the bracket with
the silicon rubber spacer, attach the bracket directly to the case
without the silicon rubber spacer.
STEP 2Install the security appliance into a standard rack as shown below.
Place the washers on the brackets so that the holes align to the
screw holes and then install the M5 screws.
281985
Step 1 Step 2

Cisco ISA500 Series Integrated Security Appliances Quick Start Guide 9
Connecting the Cisco ISA500 Series
Integrated Security Appliances
STEP 1Connect the security appliance to power using the supplied power
cord and adapter. Make sure that the power switch is turned off.
STEP 2If you are installing the ISA550W or ISA570W, screw each antenna
onto a threaded connector on the back panel. Orient each antenna
to point upward.
STEP 3For a DSL or cable modem, or other WAN connectivity devices,
connect an Ethernet network cable from the device to the WAN
port on the back panel. Cisco strongly recommends using Cat5E or
better cable.
STEP 4(Optional) For network devices, connect an Ethernet network cable
from the network device to an available LAN port on the back
panel. For a Cisco UC500 or UC300 network device, connect the
WAN port of the UC500 or UC300 to an available LAN port on the
back panel.
STEP 5Power on the connected devices.
STEP 6Power on the security appliance. The lights on the front panel for
all connected ports light up to show active connections.
A sample configuration is illustrated below.
4
281982
I
/
O
RESET
ANT02ANT01
1
6
7
8910
WAN
CONFIGURABLE POWER
12VDC
2
3
4
5
LAN
Internet
Access
Device
Public
Web Server Power
Network
Devices

10 Cisco ISA500 Series Integrated Security Appliances Quick Start Guide
Getting Started with the Configuration
After you install the security appliance, configure it by using the Startup
Wizard.
STEP 1Connect a computer to an available LAN port on the back panel of
the security appliance.
Your PC will become a DHCP client of the security appliance and
will receive an IP address in the 192.168.1.x range.
STEP 2Start a web browser. In the Address bar, enter the default LAN IP
address of the security appliance: 192.168.1.1.
STEP 3When the login page opens, enter the username and password.
The default username is “cisco”. The default password is “cisco”.
Usernames and passwords are case sensitive.
STEP 4Click Login.
For the first login, you are forced to change the default username
and password of the default administrator account. After you
change them, the Startup Wizard launches.
STEP 5Follow the on-screen prompts to complete the initial configuration
such as remote management, port, WAN, LAN, DMZ, WAN
redundancy, and WLAN (for ISA550W and ISA570W only).
Suggested Next Steps
Congratulations, you are now ready to start using your security appliance.
You may want to consider taking some of the following tasks to secure
your security appliance and network:
•Configure the VLANs, DMZs, and WLANs.
•Configure the zones.
•Configure the WAN redundancy if you have two ISP links.
•Configure the zone-based firewall.
•Configure the UTM services such as Intrusion Prevention System, Anti-
Virus, Email Reputation Filter, Web URL Filter, and Web Reputation Filter.
•Configure the VPNs for Site-to-Site and remote secure access.
•Configure the WAN, LAN, and Wireless QoS settings.
5
6