Cisco ISA550 Instruction Manual

1
Cisco ISA500 Series Integrated Security Appliances Administration Guide 19
Getting Started
This chapter provides an overview of the Cisco ISA500 Series Integrated Security
Appliance and describes basic configuration tasks to help you configure your
security appliance. It includes the following sections:
•Introduction, page 20
•Product Overview, page 21
•Getting Started with the Configuration Utility, page 25
•Factory Default Settings, page 30
•Performing Basic Configuration Tasks, page 32
NOTE For information about how to physically install your security appliance, see the
Cisco ISA500 Series Integrated Security Appliances Quick Start Guide at:
www.cisco.com/go/isa500resources.

Getting Started
Introduction
Cisco ISA500 Series Integrated Security Appliances Administration Guide 20
1
Introduction
Thank you for choosing the Cisco ISA500 Series Integrated Security Appliance, a
member of the Small Business Family. The ISA500 Series is a set of Unified Threat
Management (UTM) security appliances that provide business-class security
gateway solutions with dual WAN, DMZ, zone-based firewall, site-to-site and
remote access VPN (including IPsec Remote Access, Teleworker VPN Client, and
SSL VPN) support, and Internet threat protection, such as Intrusion Prevention
(IPS), Anti-Virus, Application Control, Web URL Filtering, Web Reputation Filtering,
Spam Filter, and Network Reputation. The ISA550W and ISA570W include
802.11b/g/n access point capabilities.
The following table lists the available model numbers.
NOTE Any configurable port can be configured to be a WAN, DMZ, or LAN port. Only one
configurable port can be configured as a WAN port at a time. Up to 4 configurable
ports can be configured as DMZ ports.
Model Description Configuration
ISA550 Cisco ISA550 Integrated
Security Appliance
1 WAN port, 2 LAN ports,
4 configurable ports, and 1 USB 2.0
port
ISA550W Cisco ISA550 Integrated
Security Appliance with
Wi-Fi
1 WAN port, 2 LAN ports,
4 configurable ports, 1 USB 2.0 port,
and 802.11b/g/n
ISA570 Cisco ISA570 Integrated
Security Appliance
1 WAN port, 4 LAN ports,
5 configurable ports, and 1 USB 2.0
port
ISA570W Cisco ISA570 Integrated
Security Appliance with
Wi-Fi
1 WAN port, 4 LAN ports,
5 configurable ports, 1 USB 2.0 port,
and 802.11b/g/n

Getting Started
Product Overview
Cisco ISA500 Series Integrated Security Appliances Administration Guide 21
1
Product Overview
Before you use the security appliance, become familiar with the lights on the front
panel and the ports on the rear panel.
•Front Panel, page 21
•Back Panel, page 23
Front Panel
ISA550 Front Panel
ISA550W Front Panel
ISA570 Front Panel
ISA570W Front Panel
282351
Small Business
1
VPN USB WAN LAN CONFIGURABLEPOWER/SYS
SPEED
LINK /ACT
234567
ISA550 Cisco
281983
Small Business
1
VPN USB WAN LAN CONFIGURABLEPOWER/SYS
SPEED
LINK /ACT
234567
WLAN
ISA550W Cisco
Small Business
1
VPN USB WAN LAN CONFIGURABLEPOWER/SYS
SPEED
LINK /ACT
910
2345678
282350
ISA570 Cisco
Small Business
1
VPN USB WAN LAN CONFIGURABLEPOWER/SYS
SPEED
LINK /ACT
910
2345678
WLAN
281980
ISA570W Cisco

Getting Started
Product Overview
Cisco ISA500 Series Integrated Security Appliances Administration Guide 22
1
Front Panel Lights
The following table describes the lights on the front panel of the security
appliance. These lights are used for monitoring system activity.
Light Description
POWER/SYS Indicates the power and system status.
• Solid green when the system is powered on and is
operating normally.
• Flashes green when the system is booting.
• Solid amber when the system has a booting problem,
a device error occurs, or the system has a problem.
VPN Indicates the site-to-site VPN connection status.
• Solid green when there are active site-to-site VPN
connections.
• Flashes green when attempting to establish a
site-to-site VPN tunnel.
• Flashes amber when the system is experiencing
problems setting up a site-to-site VPN connection
and there is no VPN connection.
USB Indicates the USB device status.
• Solid green when a USB device is detected and is
operating normally.
• Flashes green when the USB device is transmitting
and receiving data.
WLAN
(ISA550W and
ISA570W only)
Indicates the WLAN status.
• Solid green when the WLAN is up.
• Flashes green when the WLAN is transmitting and
receiving data.

Getting Started
Product Overview
Cisco ISA500 Series Integrated Security Appliances Administration Guide 23
1
Back Panel
The back panel is where you connect the network devices. The ports on the panel
vary depending on the model.
ISA550 and ISA550W Back Panel
SPEED Indicates the traffic rate of the associated port.
• Off when the traffic rate is 10 or 100 Mbps.
• Solid green when the traffic rate is 1000 Mbps.
LINK/ACT Indicates that a connection is being made through the port.
• Solid green when the link is up.
• Flashes green when the port is transmitting and
receiving data.
Light Description
281984
ANT02ANT01
RESET
I
/
OPOWER
12VDC
4
5
6
7
CONFIGURABLE
2
3
LAN
1
WAN
ANT01 ANT02
Reset
Button
Power
Switch
Power
Connector
WAN
Port
USB
Port Configurable
Ports
LAN
Ports

Getting Started
Product Overview
Cisco ISA500 Series Integrated Security Appliances Administration Guide 24
1
ISA570 and ISA570W Back Panel
Back Panel Descriptions
281981
I
/
O
RESET
ANT02ANT01
1
6
7
8910
WAN
CONFIGURABLE POWER
12VDC
2
3
4
5
LAN
ANT01 ANT02
Reset
Button
Power
Switch
Power
Connector
WAN
Port
USB
Port Configurable
Ports
LAN
Ports
Feature Description
ANT01/ANT02 Threaded connectors for the antennas (for ISA550W and
ISA570W only).
USB Port Connects the unit to a USB device. You can use a USB
device to save and restore system configuration, or to
upgrade the firmware.
Configurable
Ports
Can be set to operate as WAN, LAN, or DMZ ports. ISA550
and ISA550W have 4 configurable ports. ISA570 and
ISA570W have 5 configurable ports.
NOTE: Only one configurable port can be configured as a
WAN port at a time. Up to 4 configurable ports can be
configured as DMZ ports.
LAN Ports Connects PCs and other network appliances to the unit.
ISA550 and ISA550W have 2 dedicated LAN ports. ISA570
and ISA570W have 4 dedicated LAN ports.
WAN Port Connects the unit to a DSL or a cable modem, or other WAN
connectivity device.

Getting Started
Getting Started with the Configuration Utility
Cisco ISA500 Series Integrated Security Appliances Administration Guide 25
1
Getting Started with the Configuration Utility
The ISA500 Series Configuration Utility is a web-based device manager that is
used to provision the security appliance. To use this utility, you must be able to
connect to the security appliance from a PC or laptop. You can access the
Configuration Utility by using the following web browsers:
• Microsoft Internet Explorer 8 and 9
• Mozilla Firefox 3.6.x, 5, and 6
NOTE The minimum recommended display resolution for the PC running the Web
browser used to access the Configuration Utility is 1024 x 768.
This section includes the following topics:
•Logging in to the Configuration Utility, page 26
•Navigating Through the Configuration Utility, page 27
•Using the Help System, page 28
•Configuration Utility Icons, page 28
RESET Button To reboot the unit, push and release the RESET button for
less than 3 seconds.
To restore the unit to its factory default settings, push and
hold the RESET button for more than 3 seconds while the
unit is powered on and the POWER/SYS light is solid green.
The POWER/SYS light will flash green when the system is
rebooting.
Power Switch Powers the unit on or off.
Power
Connector
Connects the unit to power using the supplied power cord
and adapter.
Feature Description

Getting Started
Getting Started with the Configuration Utility
Cisco ISA500 Series Integrated Security Appliances Administration Guide 26
1
Logging in to the Configuration Utility
STEP 1 Connect your computer to an available LAN port on the back panel.
Your PC will become a DHCP client of the security appliance and will receive an IP
address in the 192.168.75.x range.
STEP 2 Start a web browser. In the address bar, enter the default IP address of the
security appliance: 192.168.75.1.
NOTE: The above address is the factory default LAN address. If you change this
setting, enter the new IP address to connect to the Configuration Utility.
STEP 3 When the login page opens, enter the username and password.
The default username is cisco. The default password is cisco. Usernames and
passwords are case sensitive.
STEP 4 Click Login.
STEP 5 For security purposes, you must change the default password of the default
administrator account. Set a new administrator password and click OK.
STEP 6 If you can access the Internet and a newer firmware is detected, the Firmware
Upgrade window opens. Follow the on-screen prompts to download and install
the firmware. See Upgrading your Firmware After your First Login, page 33.
STEP 7 If you cannot access the Internet or you are using the latest firmware, the Setup
Wizard will now launch. Follow the on-screen prompts to complete the initial
configuration. See Using the Setup Wizard for the Initial Configuration, page 36.

Getting Started
Getting Started with the Configuration Utility
Cisco ISA500 Series Integrated Security Appliances Administration Guide 27
1
Navigating Through the Configuration Utility
Use the left hand navigation pane to perform the tasks in the Configuration Utility.
12
Number Component Description
1LeftHand
Navigation
Pane
The left hand navigation pane provides easy
navigation through the configurable features. The
main branches expand to provide the features. Click
the main branch title to expand its contents. Click
the triangle next to a feature to expand or contract
its sub-features. Click the title of a feature or
sub-feature to open it.
2 Main Content The main content of the feature or sub-feature
appears in this area.

Getting Started
Getting Started with the Configuration Utility
Cisco ISA500 Series Integrated Security Appliances Administration Guide 28
1
Using the Help System
The Configuration Utility provides a context-sensitive help file for all configuration
tasks. To view the Help page, click the Help link in the top right corner of the
screen. A new window opens with information about the page that you are
currently viewing.
Configuration Utility Icons
The Configuration Utility has icons for commonly used configuration options. The
following table describes these icons:
Icon Description Action
Add icon Add an entry.
Edit icon Edit an entry.
Duplicate icon Create a copy of an existing entry.
Delete icon Delete an entry or delete multiple selected
entries.
Move icon Move an item to a specific location.
Move down icon Move an item down one position.
Move up icon Move an item up one position.
Expand triangle
icon
Expand the sub-features of a feature in the left
navigation pane or expand the items under a
category.
Contract triangle
icon
Contract the sub-features of a feature in the left
navigation pane or contract the items under a
category.
Connect icon Establish a VPN connection.
Disconnect or
Logout icon
Terminate a VPN connection or an active user
session.