Cisco Systems ASA 5500の取扱説明書

デバイスCisco Systems ASA 5500の取扱説明書

デバイス: Cisco Systems ASA 5500
カテゴリ: 防犯カメラ
メーカー: Cisco Systems
サイズ: 0.32 MB
追加した日付: 6/21/2013
ページ数: 16
説明書を印刷

ダウンロード

使い方は?

私たちの目的は、皆様方にデバイスCisco Systems ASA 5500の取扱説明書に含まれたコンテンツを可能な限り早く提供することです。オンラインプレビューを使用すると、Cisco Systems ASA 5500に関してあなたが抱えている問題に対する解決策の内容が素早く表示されます。

便宜上

説明書Cisco Systems ASA 5500をこちらのサイトで閲覧するのに不都合がある場合は、2つの解決策があります:

  • フルスクリーン表示 – 説明書を(お使いのコンピュータにダウンロードすることなく)便利に表示させるには、フルスクリーン表示モードをご使用ください。説明書Cisco Systems ASA 5500のフルスクリーン表示を起動するには、全画面表示ボタンを押してください。
  • コンピュータにダウンロード - Cisco Systems ASA 5500の説明書をお使いのコンピュータにダウンロードし、ご自身のコレクションに加えることもできます。デバイス上のスペースを無駄にしたくない場合は、いつでもManualsBaseサイトでダウンロードすることもできます。
Cisco Systems ASA 5500 取扱説明書 - Online PDF
Advertisement
« Page 1 of 16 »
Advertisement
印刷版

多くの人々は画面表示ではなく印刷された説明書を読むほうを好みます。説明書を印刷するオプションも提供されており、上記のリンクをクリックすることによりそれを利用できます - 説明書を印刷。説明書Cisco Systems ASA 5500を全部印刷する必要はなく、選択したページだけを印刷できます。紙を節約しましょう。

要旨

次のページにある説明書Cisco Systems ASA 5500の内容のプレビューは、以下にあります。次のページにある説明書の内容をすぐに表示したい場合は、こちらをご利用ください。

内容要旨
ページ1に含まれる内容の要旨


CHAPTER19
Managing the AIP SSM and CSC SSM
The Cisco ASA 5500 series adaptive security appliance supports a variety of SSMs. This chapter
describes how to configure the adaptive security appliance to support an AIP SSM or a CSC SSM,
including how to send traffic to these SSMs.
For information about the 4GE SSM for the ASA 5000 series adaptive security appliance, see Chapter 4,
“Configuring Ethernet Settings and Subinterfaces”.
Note The Cisco PIX 500 series security appliances does not suppo

ページ2に含まれる内容の要旨

Chapter 19 Managing the AIP SSM and CSC SSM Managing the AIP SSM The AIP SSM can operate in one of two modes, as follows: � Inline mode—Places the AIP SSM directly in the traffic flow. No traffic can continue through the adaptive security appliance without first passing through, and being inspected by, the AIP SSM. This mode is the most secure because every packet is analyzed before being allowed through. Also, the AIP SSM can implement a blocking policy on a packet-by-packet basis.

ページ3に含まれる内容の要旨

Chapter 19 Managing the AIP SSM and CSC SSM Managing the AIP SSM Step 2 Create a class map to identify the traffic that should be diverted to the AIP SSM. Use the class-map command to do so, as follows: hostname(config)# class-map class_map_name hostname(config-cmap)# where class_map_name is the name of the traffic class. When you enter the class-map command, the CLI enters class map configuration mode. Step 3 With the access list you created in Step 1, use a match access-list command

ページ4に含まれる内容の要旨

Chapter 19 Managing the AIP SSM and CSC SSM Managing the AIP SSM hostname(config-cmap)# match access-list IPS hostname(config-cmap)# policy-map my-ids-policy hostname(config-pmap)# class my-ips-class hostname(config-pmap-c)# ips promiscuous fail-close hostname(config-pmap-c)# service-policy my-ips-policy global Sessioning to the AIP SSM and Running Setup After you have completed configuration of the ASA 5500 series adaptive security appliance to divert traffic to the AIP SSM, session t

ページ5に含まれる内容の要旨

Chapter 19 Managing the AIP SSM and CSC SSM Managing the CSC SSM Note If you see the preceding license notice (which displays only in some versions of software), you can ignore the message until you need to upgrade the signature files on the AIP SSM. The AIP SSM continues to operate at the current signature level until a valid license key is installed. You can install the license key at a later time. The license key does not affect the current functionality of the AIP SSM. Step 3 Ent

ページ6に含まれる内容の要旨

Chapter 19 Managing the AIP SSM and CSC SSM Managing the CSC SSM Figure 19-1 Flow of Scanned Traffic with CSC SSM Security Appliance Main System modular service policy Request sent Request forwarded inside outside Reply forwarded Reply sent Server Diverted Traffic Client content security scan CSC SSM You use ASDM for system setup and monitoring of the CSC SSM. For advanced configuration of content security policies in the CSC SSM software, you access the web-based GUI for the CSC SSM b

ページ7に含まれる内容の要旨

Chapter 19 Managing the AIP SSM and CSC SSM Managing the CSC SSM Figure 19-2 CSC SSM Deployment with a Management Network Security Appliance Trend Micro inside Update Server 192.168.100.1 Main System outside HTTP Internet 10.6.13.67 Proxy management port 192.168.50.1 CSC SSM ASDM SSM 192.168.50.38 management port Syslog Notifications SMTP Server CSC SSM cannot suport stateful failover, because the CSC SSM does not maintain connection information and therefore cannot provide the failove

ページ8に含まれる内容の要旨

Chapter 19 Managing the AIP SSM and CSC SSM Managing the CSC SSM Note The SSM management port IP address must be accessible by the hosts used to run ASDM. The IP addresses for the SSM management port and the adaptive security appliance management interface can be in different subnets. � DNS server IP address. � HTTP proxy server IP address (required only if your security policies require use of a proxy server for HTTP access to the Internet). � Domain name and hostname for the SSM. �

ページ9に含まれる内容の要旨

Chapter 19 Managing the AIP SSM and CSC SSM Managing the CSC SSM With a Plus License, the additional features enabled by default are SMTP anti-spam, SMTP content filtering, POP3 anti-spam, URL blocking, and URL filtering. To access the CSC SSM GUI, in ASDM choose Configuration > Trend Micro Content Security, and then select one of the following: Web, Mail, File Transfer, or Updates. The blue links on these panes, beginning with the word “Configure”, open the CSC SSM GUI. Determining

ページ10に含まれる内容の要旨

Chapter 19 Managing the AIP SSM and CSC SSM Managing the CSC SSM � Incoming SMTP connections destined to inside mail servers. In Figure 19-3, the adaptive security appliance should be configured to divert traffic to CSC SSM requests from clients on the inside network for HTTP, FTP, and POP3 connections to the outside network and incoming SMTP connections from outside hosts to the mail server on the DMZ network. HTTP requests from the inside network to the web server on the DMZ networ

ページ11に含まれる内容の要旨

Chapter 19 Managing the AIP SSM and CSC SSM Managing the CSC SSM This access list matches inbound SMTP connections from any external host to any host on the DMZ network. The policy applied to the outside interface would therefore ensure that incoming SMTP email would be diverted to the CSC SSM for scanning. It would not match SMTP connections from hosts on the inside network to the mail server on the DMZ network because those connections never use the outside interface. If the web s

ページ12に含まれる内容の要旨

Chapter 19 Managing the AIP SSM and CSC SSM Managing the CSC SSM hostname(config)# class-map class_map_name hostname(config-cmap)# where class_map_name is the name of the traffic class. When you enter the class-map command, the CLI enters class map configuration mode. Step 3 With the access list you created in Step 1, use a match access-list command to identify the traffic to be scanned: hostname(config-cmap)# match access-list acl-name Step 4 Create a policy map or modify an existing

ページ13に含まれる内容の要旨

Chapter 19 Managing the AIP SSM and CSC SSM Checking SSM Status Example 19-1 is based on the network shown in Figure 19-3. It creates two service policies. The first policy, csc_out_policy, is applied to the inside interface and uses the csc_out access list to ensure that all outbound requests for FTP and POP3 are scanned. The csc_out access list also ensures that HTTP connections from inside to networks on the outside interface are scanned but it includes a deny ACE to exclude HTTP

ページ14に含まれる内容の要旨

Chapter 19 Managing the AIP SSM and CSC SSM Transferring an Image onto an SSM hostname# show module 1 Mod Card Type Model Serial No. --- -------------------------------------------- ------------------ ----------- 1 ASA 5500 Series Security Services Module-20 ASA-SSM-20 JAB100301NE Mod MAC Address Range Hw Version Fw Version Sw Version --- --------------------------------- ------------ ------------ -----

ページ15に含まれる内容の要旨

Chapter 19 Managing the AIP SSM and CSC SSM Transferring an Image onto an SSM To transfer an image onto an intelligent SSM, perform the following steps: Step 1 Create or modify a recovery configuration for the SSM. To do so, perform the following steps: a. Determine if there is a recovery configuration for the SSM. To do so, use the show module command with the recover keyword, as follows. hostname# show module slot recover where slot is the slot number occupied by the SSM. If the reco

ページ16に含まれる内容の要旨

Chapter 19 Managing the AIP SSM and CSC SSM Transferring an Image onto an SSM Step 3 Check the progress of the image transfer and SSM restart process. To do so, use the show module command. For details, see the “Checking SSM Status” section on page 19-13. When the adaptive security appliance completes the image transfer and restart of the SSM, the SSM is running the newly transferred image. Note If your SSM supports configuration backups and you want to restore the configuration of th


類似の説明書
# 取扱説明書 カテゴリ ダウンロード
1 Cisco Systems ASA 5500 取扱説明書 家庭用防犯システム 20
2 Cisco Systems ASA 5500 取扱説明書 ネットワークルーター 17
3 Cisco Systems 4500E 取扱説明書 防犯カメラ 7
4 Cisco Systems 3120 取扱説明書 防犯カメラ 0
5 Cisco Systems 2500 Series 取扱説明書 防犯カメラ 6
6 Cisco Systems 535 取扱説明書 防犯カメラ 0
7 Cisco Systems 5505 取扱説明書 防犯カメラ 0
8 Cisco Systems 5011 取扱説明書 防犯カメラ 0
9 Cisco Systems 4300 取扱説明書 防犯カメラ 2
10 Cisco Systems 5010 取扱説明書 防犯カメラ 1
11 Cisco Systems 2900 取扱説明書 防犯カメラ 6
12 Cisco Systems CIVIS-IPC-2611 取扱説明書 防犯カメラ 2
13 Cisco Systems CIVS-IPC-2500 取扱説明書 防犯カメラ 44
14 Cisco Systems CL-28826-01 取扱説明書 防犯カメラ 0
15 Cisco Systems OL-15986-01 取扱説明書 防犯カメラ 0
16 Edelbrock 1910 取扱説明書 防犯カメラ 18
17 Sony CCU-M5AP 取扱説明書 防犯カメラ 5
18 Sony 100 取扱説明書 防犯カメラ 0
19 Sony DF70P 取扱説明書 防犯カメラ 4
20 Sony CH280 取扱説明書 防犯カメラ 2