Networking Worksheet Technical Support:

IronPort Email Security Appliance 1-877-641-IRON (4766)

System Settings

Default System Hostname:

Email System Alerts To:
Deliver Scheduled Reports To:
Time Zone Information:
NTP Server:
Admin Password:
SenderBase Network Participation: Enable / Disable IRONPORT C660
AutoSupport: Enable / Disable QUICKSTART GUIDE
Network Integration

Gateway:
DNS (Internet or Specify Own):

Interfaces

Data 1 Port
IP Address:
Network Mask:
Fully Qualified Hostname:
Accept Incoming Mail: Domain Destination
Relay Outgoing Mail: System

Data 2 Port
IP Address:
Network Mask:
Fully Qualified Hostname:
Accept Incoming Mail: Domain Destination
Relay Outgoing Mail: System

Management Port
IP Address:
Network Mask:
Fully Qualified Hostname:
Accept Incoming Mail: Domain Destination
Relay Outgoing Mail: System

Message Security

SenderBase Reputation Filtering: Enable / Disable

Enable IronPort Anti-Spam Scanning Engine Enable / Disable
McAfee Anti-Virus Scanning Engine Enable / Disable
Sophos Anti-Virus Scanning Engine Enable / Disable
Virus Outbreak Filters Enable / Disable

Copyright © 2000-2009 Cisco Systems, Inc. All rights reserved. IronPort, the IronPort logo and SenderBase are registered trademarks of Cisco Systems, Inc.
or its affiliates. All other trademarks are the property of Cisco Systems, Inc., its affiliates or their respective owners. While every effort is made to ensure the
information given is accurate, Cisco does not accept liability for any errors or mistakes which may arise. Specifications and other information in this document
may be subject to change without notice. PN 421-0137(A)
 PLAN THE INSTALLATION WITHIN YOUR NETWORK DATA Turn on the system power by pressing the On/Off switch on the
Your IronPort appliance is designed to serve as your SMTP email The IronPort appliance requires at least one IP address to send front panel of the the appliance. You must wait five minutes for the
gateway at your network perimeter — that is, the first machine with and receive email. Ideally, two IP addresses should be used: system to initialize the very first time you power up before moving to
IronPort C660 an IP address that is directly accessible to the Internet for sending • Connect the Data 1 network port to your public network Step 5.
and receiving email. Many of the features (including Email Security
These simple-to-follow steps will allow you to Monitor, Reputation Filtering, Content Scanning, Spam Detection, and • Connect the Data 2 network port to your private network
install, configure, and start using your IronPort Virus Protection) require you to install the IronPort appliance into your Alternately, you can receive and deliver email from a single con-
Email Security appliance right away. existing network infrastructure in the following way. nection to either network port, if your network topology dictates it.
Multiple IP addresses can be configured on one network interface.
Before you start, be sure you have the following:
• Rack cabinet enclosure Note: Some IronPort C660 appliances contain fiber optic interfaces
• Dell 9G Combination Rails - Rapid/Versa Combination Rails installed as the Data 3 and Data 4 network ports. You can also use
and adaptor kits (optional) these fiber optic interfaces if your network topology dictates it. Wait 5
minutes
• 10/100/Gigabit BaseT TCP/IP local area network (LAN) Firewall
• Web browser software (or SSH and terminal software)
• Network cable(s) for connecting to your network
IronPort
Email Security
appliance

Groupware Server
(Microsoft Exchange™, Lotus OR
OR
Check to make sure the following items are present in the IronPort Notes™, SunONE Messaging™)
Email Security appliance system box: Public Private Public and
Network Network Private Networks • Fill out the Networking Worksheet on the back of this
• IronPort C660 Email Security appliance Clients Quickstart Guide. Contact your network administrator if you
• Dual-head power cable need assistance.
SETUP AND MANAGEMENT
• Straight power cables (2)
• For access by Ethernet™, connect to the Management Network • Use a browser to connect to the following URL:
• Null modem serial cable Depending on your network configuration, your firewall may need to
be configured to allow access on the following ports. Port. Use a browser to access the web-based interface on the
• IronPort C660 Quickstart Guide (this guide)
default IP address 192.168.42.42. You can also access the http://192.168.42.42
• IronPort AsyncOS Documentation CD
SMTP and DNS services must have access to the Internet. For other command line interface by SSH or terminal emulation software
• IronPort AsyncOS For Email User Guide
system functions, the following services may be required: on the same IP address. (The netmask is /24.)
• IronPort AsyncOS For Email Advanced User Guide • Log in as: Username: admin
• Safety and Compliance Guide • Or, for Serial access, connect to the Serial Port. Access the
• AsyncOS Release Notes • SMTP: port 25 • DNS: port 53 command line interface by a terminal emulator using 9600 bits, 8 Password: ironport
• Terms and Conditions of Use • HTTP: port 80 • HTTPS: port 443 bits, no parity, 1 stop bit (9600, 8, N, 1), flow control = Hardware.
• SSH: port 22 • Telnet: port 23 • The System Setup Wizard begins and the end user license
• LDAP: port 389 or 3268 • NTP: port 123 agreement is displayed. Please read and accept the license
• LDAP over SSL: port 636 agreement to continue.
• LDAP with SSL for Global Catalog queries: port 3269 • Use the information from the Networking Worksheet to complete
• FTP: port 21, data port TCP 1024 and higher the System Setup Wizard.

See the appendix, “Firewall Information” in the AsyncOS For Email (Or, you may connect using SSH or terminal emulation software. Initiate
User Guide for more information. a session to the IP address 192.168.42.42. Log in as admin with
OR the password ironport and, at the prompt, run the systemsetup
INSTALL IN RACK command.)
Serial via Terminal Ethernet via SSH or HTTP
Install the IronPort appliance into your rack cabinet. Ensure the (9600, 8, N, 1) (on 192.168.42.42)
ambient temperature around the system is within the specified limits. Technical Support:
1-877-641-IRON (4766)
Record critical
Ensure there is sufficient airflow around the unit. POWER information from the
IronPort Messaging Gateway Networking
Worksheet

• Plug the female end of each straight power cable into the Admin Choose a new Password: *

Fully-Qualified Hostname of IronPort Messaging Gateway appliance: *

Data 1 Choose an Interface Name (e.g. ÒPrivateNetÓ):

IP Address: *
*
Networking Worksheet to
Netmask: *

redundant power supplies on the back panel of the appliance.

Broadcast Address: *

Data
2 Choose anInterface Name (e.g. ÒPublicNetÓ)

IP Address:

Netmask:

Broadcast Address:
:

assist in completing the

Gateway Default Router (gateway)P Address:
I *

System Setup Wizard.

DNS Primary DNS Server Hostname:

Primary DNS ServerP Address:

I

• Or, plug the female ends of the dual-headed power cable into the Mail
Injector
Secondary DNS Server Hostname:

Secondary DNS ServerP Address:

I

Choose anInjector Name (e.g. ÒOutboundMailÓ): *

Documentation User Quickstart IP Interface Name (from above, e.g. ÒPrivateNetÓ):

*

redundant power supplies on the back panel of the appliance.

NTP NTP Server P(Iaddress or hostname)
:

* Indicates required informatio

n

CD Guide Guide

Dual-headed
Release Advanced Safety and
Power Cable
Notes User Guide Compliance Guide Straight OR
OR
Power
Cables