Administration Guide
Page 3
... 21 Using the Help System 22 About the Default Settings 22 Basic Tasks 23 Changing the Default User Name and Password 23 Backing Up Your Configuration 24 Upgrading the Firmware 24 Common Configuration Scenarios 25 Basic Network Configuration with Internet Access 26 Cisco Smart Business Communications System Configuration 28 Firewall for Controlling Inbound ... 35 Chapter 2: Networking 36 Configuring the WAN Connection 37 Viewing the WAN Status 39 Creating PPPoE Profiles 40 Configuring an IP Alias 41 Cisco SA500 Series Security Appliances Administration Guide 3
... 21 Using the Help System 22 About the Default Settings 22 Basic Tasks 23 Changing the Default User Name and Password 23 Backing Up Your Configuration 24 Upgrading the Firmware 24 Common Configuration Scenarios 25 Basic Network Configuration with Internet Access 26 Cisco Smart Business Communications System Configuration 28 Firewall for Controlling Inbound ... 35 Chapter 2: Networking 36 Configuring the WAN Connection 37 Viewing the WAN Status 39 Creating PPPoE Profiles 40 Configuring an IP Alias 41 Cisco SA500 Series Security Appliances Administration Guide 3
Administration Guide
Page 18
...75.1 This address is the factory default LAN address of the security appliance. For more information about CCA, see Using the Getting Started Pages, page 19. STEP 4 Enter the default user name and password: • Username: cisco • Password: cisco STEP 5 Click Log In. On... the Certificate page, click Install the Certificate. For more information, see : www.cisco.com/go/configassist. The Getting Started (Basic) window ...
...75.1 This address is the factory default LAN address of the security appliance. For more information about CCA, see Using the Getting Started Pages, page 19. STEP 4 Enter the default user name and password: • Username: cisco • Password: cisco STEP 5 Click Log In. On... the Certificate page, click Install the Certificate. For more information, see : www.cisco.com/go/configassist. The Getting Started (Basic) window ...
Administration Guide
Page 23
...the User Administration section of the table, find the default Administrator account. You can log on by entering cisco for the username and cisco for the default Administrator account. The User Configuration window opens, displaying the default information. The access point is configured with the appropriate... 35. • Administrative Access: You can also change the user name and password for the password. STEP 2 In the first row of the Getting Started (Basic) page, click Change Default Admin Password And Add Users. Getting Started Basic Tasks 1 Internet Access, page 26 or ...
...the User Administration section of the table, find the default Administrator account. You can log on by entering cisco for the username and cisco for the default Administrator account. The User Configuration window opens, displaying the default information. The access point is configured with the appropriate... 35. • Administrative Access: You can also change the user name and password for the password. STEP 2 In the first row of the Getting Started (Basic) page, click Change Default Admin Password And Add Users. Getting Started Basic Tasks 1 Internet Access, page 26 or ...
Administration Guide
Page 24
The default password for this account. • Check to Edit Password: Check this new security appliance is cisco. • New Password: Enter a password that contains alphanumeric, '-' or '_' characters. • Confirm Password: Enter the password again. • Idle Timeout: Enter the time in minutes that you want to a saved configuration.... if you make changes that the user can be changed for this box to enable the password fields. • Enter Your Password: Enter the current password. Upgrading the Firmware Before you do any point during the configuration process, you are using ...
The default password for this account. • Check to Edit Password: Check this new security appliance is cisco. • New Password: Enter a password that contains alphanumeric, '-' or '_' characters. • Confirm Password: Enter the password again. • Idle Timeout: Enter the time in minutes that you want to a saved configuration.... if you make changes that the user can be changed for this box to enable the password fields. • Enter Your Password: Enter the current password. Upgrading the Firmware Before you do any point during the configuration process, you are using ...
Administration Guide
Page 26
... Firmware, page 24) and changed the default Administrator password (see Configuring the WAN Connection, page 37. NOTE Before you configure your network, make changes, as well your preferences for your Internet connection. Cisco SA500 Series Security Appliances Administration Guide 26 ...Printer Personal computer In a basic deployment for a small business, the security appliance enables communication between the devices on the LAN receive their IP addresses dynamically from the security appliance. With the default settings, the security appliance gets its WAN address dynamically...
... Firmware, page 24) and changed the default Administrator password (see Configuring the WAN Connection, page 37. NOTE Before you configure your network, make changes, as well your preferences for your Internet connection. Cisco SA500 Series Security Appliances Administration Guide 26 ...Printer Personal computer In a basic deployment for a small business, the security appliance enables communication between the devices on the LAN receive their IP addresses dynamically from the security appliance. With the default settings, the security appliance gets its WAN address dynamically...
Administration Guide
Page 37
Networking Configuring the WAN Connection 2 Configuring the WAN Connection By default, your security appliance is configured to receive a public IP address ... also enter the Idle Time in • Secret (Optional): Enter the secret phrase to log in minutes Cisco SA500 Series Security Appliances Administration Guide 37 Idle Time: The security appliance disconnects from the Internet after a specified...; User Name: Enter user name required to log in • Password: Enter the password required to log into the server (if applicable). • Connectivity Type: Choose one of activity.
Networking Configuring the WAN Connection 2 Configuring the WAN Connection By default, your security appliance is configured to receive a public IP address ... also enter the Idle Time in • Secret (Optional): Enter the secret phrase to log in minutes Cisco SA500 Series Security Appliances Administration Guide 37 Idle Time: The security appliance disconnects from the Internet after a specified...; User Name: Enter user name required to log in • Password: Enter the password required to log into the server (if applicable). • Connectivity Type: Choose one of activity.
Administration Guide
Page 55
...if your ISP. • DNS Server Source: DNS servers map Internet domain names (example: www.cisco.com) to IP addresses. STEP 5 If your Internet service. - Get Dynamically from your ISP...; Server IP Address: Enter the IP address of the PPTP, PPPoE, or other server. Choose Default to use ISP-specified addresses. - Also enter the addresses for your ISP does not require a login... passed on , regardless of the level of activity. Networking Configuring the Optional WAN 2 • Password: The password that is required to log in • Secret: Enter the secret phrase to log into the ...
...if your ISP. • DNS Server Source: DNS servers map Internet domain names (example: www.cisco.com) to IP addresses. STEP 5 If your Internet service. - Get Dynamically from your ISP...; Server IP Address: Enter the IP address of the PPTP, PPPoE, or other server. Choose Default to use ISP-specified addresses. - Also enter the addresses for your ISP does not require a login... passed on , regardless of the level of activity. Networking Configuring the Optional WAN 2 • Password: The password that is required to log in • Secret: Enter the secret phrase to log into the ...
Administration Guide
Page 93
...WEP has a 40-bit key which is less secure than TKIP and is recommended. Cisco SA500 Series Security Appliances Administration Guide 93 WPA2 is recommended, although some wireless devices may...not support WPA2. • Encryption: Select the encryption method to communicate with the same password. • Enable Pre-Authentication: If you chose RADIUS as the Authentication method, you...: WPA2 provides the best security for the SA520W Configuring an Access Point 3 TKIP+CCMP encryption (default is transmitted over the airwaves, you need to be used . To protect your network equipment....
...WEP has a 40-bit key which is less secure than TKIP and is recommended. Cisco SA500 Series Security Appliances Administration Guide 93 WPA2 is recommended, although some wireless devices may...not support WPA2. • Encryption: Select the encryption method to communicate with the same password. • Enable Pre-Authentication: If you chose RADIUS as the Authentication method, you...: WPA2 provides the best security for the SA520W Configuring an Access Point 3 TKIP+CCMP encryption (default is transmitted over the airwaves, you need to be used . To protect your network equipment....
Administration Guide
Page 131
From this page you want to save your settings. The IPS Configuration window opens. • IPS Enable: By default, IPS is checked. To display messages generated by IPS, you want to view the IPS log messages. For more information see Active..., under Intrusion Prevention System, click Update Signatures. Click Update Now to the signature update server. Click Apply to protect. NOTE The Cisco username and password details once applied are applicable to automatically update the IPS signatures when they are only required once. These credentials are available. You can...
From this page you want to save your settings. The IPS Configuration window opens. • IPS Enable: By default, IPS is checked. To display messages generated by IPS, you want to view the IPS log messages. For more information see Active..., under Intrusion Prevention System, click Update Signatures. Click Update Now to the signature update server. Click Apply to protect. NOTE The Cisco username and password details once applied are applicable to automatically update the IPS signatures when they are only required once. These credentials are available. You can...
Administration Guide
Page 143
... standard that extends the authentication in the Password field. • LAN IP address: Enter the LAN IP subnet to the list of configuration tasks for IPsec VPN Remote Access. • Optionally, review and modify the default settings and policies. See Advanced Configuration of... but the implementation is specific only to add. Cisco SA500 Series Security Appliances Administration Guide 143 The subnet should be part of IPsec VPN, page 144. • For Cisco QuickVPN, you entered in native IPsec to save your settings. Cisco QuickVPN X-Auth is required with a VPN Client...
... standard that extends the authentication in the Password field. • LAN IP address: Enter the LAN IP subnet to the list of configuration tasks for IPsec VPN Remote Access. • Optionally, review and modify the default settings and policies. See Advanced Configuration of... but the implementation is specific only to add. Cisco SA500 Series Security Appliances Administration Guide 143 The subnet should be part of IPsec VPN, page 144. • For Cisco QuickVPN, you entered in native IPsec to save your settings. Cisco QuickVPN X-Auth is required with a VPN Client...
Administration Guide
Page 147
...this option if you choose this Configuration Utility. The username can enable the VPN gateway router to authenticate users from the User Database (default choice) or an external authentication server such as dead, then the security appliance deletes the IPsec and IKE Security Association. •...the security appliance to use when connecting to the remote server. Cisco SA500 Series Security Appliances Administration Guide 147 If you want to authenticate users based on the IPsec Users page. Password: Enter the password for the security appliance to use when exchanging keys. Choose ...
...this option if you choose this Configuration Utility. The username can enable the VPN gateway router to authenticate users from the User Database (default choice) or an external authentication server such as dead, then the security appliance deletes the IPsec and IKE Security Association. •...the security appliance to use when connecting to the remote server. Cisco SA500 Series Security Appliances Administration Guide 147 If you want to authenticate users based on the IPsec Users page. Password: Enter the password for the security appliance to use when exchanging keys. Choose ...
Administration Guide
Page 160
...can include any value from 0 to 0, the group timeout setting applies. STEP 4 Click Apply to services and network resources. By default, a global PERMIT policy (not displayed) is assigned to an external authentication mechanism based on the LAN, or to a specific ...characters. • Confirm Password: Enter the password again. • Idle Timeout: Enter the time in minutes that are applied based on the following information: • User Name: Enter a unique identifier for the user. NOTE Every user is added as the local password are ignored. Cisco SA500 Series Security Appliances ...
...can include any value from 0 to 0, the group timeout setting applies. STEP 4 Click Apply to services and network resources. By default, a global PERMIT policy (not displayed) is assigned to an external authentication mechanism based on the LAN, or to a specific ...characters. • Confirm Password: Enter the password again. • Idle Timeout: Enter the time in minutes that are applied based on the following information: • User Name: Enter a unique identifier for the user. NOTE Every user is added as the local password are ignored. Cisco SA500 Series Security Appliances ...
Administration Guide
Page 171
You can use the Users page to assign user names, passwords, and access policies. Cisco SA500 Series Security Appliances Administration Guide 171 There are two default accounts. It includes the following sections: • Users • Firmware and Configuration • Diagnostics • Measuring and Limiting Traffic with the Traffic Meter • Configuring ...
You can use the Users page to assign user names, passwords, and access policies. Cisco SA500 Series Security Appliances Administration Guide 171 There are two default accounts. It includes the following sections: • Users • Firmware and Configuration • Diagnostics • Measuring and Limiting Traffic with the Traffic Meter • Configuring ...
Administration Guide
Page 173
... Edit, the Groups Configuration window opens. NOTE For security, a password should include a mixture of an authenticating domain. The password can be idle before the session is a part of uppercase and... users, configure the groups. The user settings have precedence over the settings group settings. Cisco SA500 Series Security Appliances Administration Guide 173 STEP 2 To add a group, click Add in... Groups. Administration Users 8 Groups Groups are used as the default timeout setting for the group. See Adding or Editing User Settings, page 173. They are ...
... Edit, the Groups Configuration window opens. NOTE For security, a password should include a mixture of an authenticating domain. The password can be idle before the session is a part of uppercase and... users, configure the groups. The user settings have precedence over the settings group settings. Cisco SA500 Series Security Appliances Administration Guide 173 STEP 2 To add a group, click Add in... Groups. Administration Users 8 Groups Groups are used as the default timeout setting for the group. See Adding or Editing User Settings, page 173. They are ...
Administration Guide
Page 177
...then click Upgrade or Upgrade & Factory Reset. - See Release Notes located under Technical Documentation at: www.cisco.com/go/sa500resource. NOTE The Cisco username and password details once applied are reminded that a new firmware is immediately available, click Check Now. Administration Firmware and...is available every 24 hours. For example, the Cisco username and login used in Administration is automatically downloaded to your device, and a link to automatically check for your device and you are applicable to the default settings. STEP 2 Perform the following : - See...
...then click Upgrade or Upgrade & Factory Reset. - See Release Notes located under Technical Documentation at: www.cisco.com/go/sa500resource. NOTE The Cisco username and password details once applied are reminded that a new firmware is immediately available, click Check Now. Administration Firmware and...is available every 24 hours. For example, the Cisco username and login used in Administration is automatically downloaded to your device, and a link to automatically check for your device and you are applicable to the default settings. STEP 2 Perform the following : - See...
Administration Guide
Page 198
... selected, set the following information: • Enable Remote Management?: By default, Remote management is selected, make sure that you change the default password. - STEP 3 Click Apply to the configuration GUI check the box. IP Address: IP Address of permission for remote management: - Cisco SA500 Series Security Appliances Administration Guide 198 STEP 2 Enter the following...
... selected, set the following information: • Enable Remote Management?: By default, Remote management is selected, make sure that you change the default password. - STEP 3 Click Apply to the configuration GUI check the box. IP Address: IP Address of permission for remote management: - Cisco SA500 Series Security Appliances Administration Guide 198 STEP 2 Enter the following...
Administration Guide
Page 217
...the range 192.168.75.2 to 192.168.75.254. Cisco SA500 Series Security Appliances Administration Guide 217 STEP 2 Ensure that Java, JavaScript, or ActiveX is loaded. Look at the Address Resolution Protocol (ARP) packets to factory default settings and lose your configuration, reboot the security appliance and ...Windows and MacOS generate and assign an IP address. Close the browser and launch it is on your LAN. The factory default login name is cisco and the password is off when entering this range, check the connection from a PC on the same subnet as Ethereal™) to capture...
...the range 192.168.75.2 to 192.168.75.254. Cisco SA500 Series Security Appliances Administration Guide 217 STEP 2 Ensure that Java, JavaScript, or ActiveX is loaded. Look at the Address Resolution Protocol (ARP) packets to factory default settings and lose your configuration, reboot the security appliance and ...Windows and MacOS generate and assign an IP address. Close the browser and launch it is on your LAN. The factory default login name is cisco and the password is off when entering this range, check the connection from a PC on the same subnet as Ethereal™) to capture...
Administration Guide
Page 223
... If the security appliance does not restart automatically; Troubleshooting Restoring Factory Default Configuration Settings A Restoring Factory Default Configuration Settings To restore factory default configuration settings, take one of the following settings apply: • LAN IP address: 192.168.75.1 • Username: cisco • Password: cisco • DHCP server on the front panel about 10 seconds, until...
... If the security appliance does not restart automatically; Troubleshooting Restoring Factory Default Configuration Settings A Restoring Factory Default Configuration Settings To restore factory default configuration settings, take one of the following settings apply: • LAN IP address: 192.168.75.1 • Username: cisco • Password: cisco • DHCP server on the front panel about 10 seconds, until...
Administration Guide
Page 229
... Peer IP address SNMP Agent disable Cisco SA500 Series Security Appliances Administration Guide 229 Daylight Savings enable Time Date and Time - Automatic Time enable Update Date and Time - D Factory Default Settings General Settings Feature Setting Host Name Model number Device Name Model number Administrator Username cisco Administrator Password cisco Allow ICMP echo replies (good for...
... Peer IP address SNMP Agent disable Cisco SA500 Series Security Appliances Administration Guide 229 Daylight Savings enable Time Date and Time - Automatic Time enable Update Date and Time - D Factory Default Settings General Settings Feature Setting Host Name Model number Device Name Model number Administrator Username cisco Administrator Password cisco Allow ICMP echo replies (good for...