Cisco Spam, Quick Start Manual

Page 1: ...QUICKSTART GUIDE ...

Page 2: ...________________________________________________ Blocker IP Address__________________________________________________ Subnet Mask________________________________________________________ Gateway IP Address_________________________________________________ LOCAL DNS SERVER INFORMATION Primary DNS Server IP Address_______________________________________ Secondary DNS Server IP Address_________________...

Page 3: ...st be installed at the perimeter of your network It needs to be the first machine with an IP address that can access the Internet Plan for your network configuration to look something like this Plan the Installation Internet Firewall or Router Cisco Spam Virus Blocker Mail Server Clients 2 ...

Page 4: ...ing your IP address in a Windows or Mac environment see Appendix A Internet Protocol TCP IP Properties You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings General Obtain an IP address automatically Use the following IP address IP address 192 168 42 43 Subnet mask 255 255 255 0 D...

Page 5: ...tart Guide Place the Blocker in a location that provides enough air flow to prevent overheating Plug the Blocker s power cable into an electrical outlet Plug In 96I6 H G 6A 47 21639 01 96I6 H G 6A POWER INPUT 4 ...

Page 6: ...ch on the front panel of the appliance After the machine powers up a solid green light indicates that the machine is running Power Up WAIT 5 MINUTES POWER 5 important A flashing green power light indicates that the machine is plugged in but has not yet powered up ...

Page 7: ...re incoming email on the Data 2 interface You can change these settings after the initial installation if you wish 96I6 H G 6A 47 21639 01 96I6 H G 6A Connect to the Blocker Connect the Data 1 port to your computer using an ethernet cable Connect the Data 2 port to the network using an ethernet cable DATA 1 management 192 168 42 42 6 DATA 2 incoming email ...

Page 8: ... Go to your management interface by entering the following URL in a web browser http 192 168 42 42 The login page for the Blocker opens Enter the following login information Username admin Password cisco Log on to the Blocker 7 ...

Page 9: ... warnings Don t forget to write down your new administrator password and keep it in a safe place Run the System Setup Wizard 8 Set anti spam and anti virus security settings Enter network information gathered in Step 1 Enter registration information Accept license Review the configuration summary page Log back in to the appliance with the username admin and the new password you set in the System S...

Page 10: ... you need to make changes in your network environment to go live and allow the Blocker to process email The following data flow diagram highlights network settings that you may need to change Go Live Internet Firewall or Router Cisco Spam Virus Blocker Mail Server Clients DNS MX Records 9 ...

Page 11: ...irus signatures and information about what companies send spam to your network PORT 443 Ensure that Port 443 is open for outbound traffic This port is used to update information about your email traffic to Cisco The information your Blocker shares with Cisco is used to enhance the algorithms that determine which email is spam and which email is legitimate Important Port 443 is used to upload regis...

Page 12: ...record information Connecting to your Exchange Server System test complete Check your admin inbox for a Welcome Message The system test checks Blocker for internet connectivity and basic mail handling Enter an email address that exists in your Exchange Mail server Run the Active Directory wizard so that Blocker only accepts incoming email verified against the Active Directory server Send email to ...

Page 13: ...LDAP Select the using Active Directory Wizard checkbox and then click Add LDAP Server Profile Note You will need the hostname and login information for your Active Directory account to run the Active Directory Wizard Important As you make configuration changes in the GUI you must explicitly commit those changes by clicking the Commit Changes button This button appears when you have uncommitted cha...

Page 14: ...t Also verify that you open firewall Ports 80 and 443 on your management interface INCOMING EMAIL After running the System Setup Wizard your Data 2 port is configured for inbound email and management settings are enabled on this interface OUTBOUND EMAIL After running the System Setup Wizard your Blocker is configured to accept inbound email You can also configure it to relay outbound email For ins...

Page 15: ...virus blocking on your network by viewing reports available in the Email Security Monitor in the GUI To access the reporting overview page go to vMonitor Overview MORE INFORMATION There are other features you may want to configure for your Blocker For more information about configuring message tracking and reporting and for details about other available Blocker features see the Blocker documentati...

Page 16: ...ties Check 5 Use the following IP Address and enter 192 168 42 43 for the IP address and 255 255 255 0 for subnet mask Click 6 OK and Close to exit the dialog box For Mac Launch the Apple Menu Select 1 System Preferences Then click Network Control Panels and click TCP IP Select the network configuration with the green icon lit up from the TCP 2 IP This is your active connection Then click Configur...

Page 17: ... records on your DNS server You may have a local DNS server or your DNS records may be hosted by a DNS provider The Blocker must be the first hop in your network so ensure that you configure email to route through the Blocker before any other mail server To change your MX records consult your DNS administrator or your DNS provider documentation In the following example the MX record pointed to the...

Page 18: ...ter or firewall In this example the router firewall uses NAT to route email from the public IP address of 192 0 2 1 to the internal IP address of the mail server at 192 168 0 7 The MX records do not need to be modified but port forwarding must be changed to route Port 25 traffic to the Blocker Before A Record mail mydomain com IN A 192 0 2 1 MX Record mydomain com IN MX mail mydomain com Port forw...

Page 19: ... IronPort Systems LLC All rights reserved The Cisco logo IronPort Systems Cisco Spam and Virus Blocker Virus Outbreak Filters Context Adaptive Scanning Engine CASE and SenderBase are trademarks of Cisco IronPort Systems LLC ...

Page 20: ...Cisco Spam Virus Blocker Cisco 2008 PN 78 18833 01 ...