Cisco C220 M3, Настройка

Страница: 7 / 10

Clean Interface Inbound
Note Action Port Protocol Destination Source
Allow SSH conectivity to the
tgsh-dialog. Allow 22 TCP Clean Interface User Subnet
Appliance API and Threat
Grid user interface. This will
redirect to HTTPS TCP/443. Allow 80 TCP Clean Interface User Subnet
Appliance API and Threat
Grid user interface. Allow 443 TCP Clean Interface User Subnet
Allow connectivity to the
Threat Grid UI Glovebox. Allow 9443 TCP Clean Interface User Subnet
Admin Interface Outbound (Optional)
The following depends on what services are configured.
Note Action Port Protocol Destination Source
Optional, only required if
Threat Grid appliance is
configured to send backups to
an NFSv4 share. Allow 2049 TCP NFSv4 Server Admin
Interface
Admin Interface Inbound
Note Action Port Protocol Destination Source
Allow SSH connectivity to the
TGSH Dialog. Allow 22 TCP Admin Interface Admin
Subnet
Allow Access to the OpAdmin
Portal interface. This will
redirect to HTTPS TCP/443. Allow 80 TCP Admin Interface Admin
Subnet
Allow Access to the OpAdmin
Portal interface. Allow 443 TCP Admin Interface Admin
Subnet
Dirty Interface for Non Cisco-Validated/Recommended Deployment
Note Action Port Protocol Destination Source
Update, support snapshot, and
licensing services. Allow 22 TCP Internet Dirty
Interface
Allow outbound DNS. Allow 53 TCP/UDP Internet Dirty
Interface
Allow outbound NTP. Allow 123 UDP Internet Dirty
Interface
Server Setup
7
Server Setup
Firewall Rules