Advertisement
3
Configuring the Security Appliance
This section describes the initial security appliance configuration. You can perform the setup steps
using either the browser-based Adaptive Security Device Manager (ASDM) or the command-line
interface (CLI).
To run the ASDM, you must have a DES license or a 3DES-AES license.
Note
About the Factory Default Configuration
Cisco security appliances are shipped with a factory-default configuration that enables quick startup.
This configuration meets the needs of most small and medium business networking environments. By
default, the security appliance is configured as follows:
• The inside interface is configured with a default DHCP address pool.
This configuration enables a client on the inside network to obtain a DHCP address from the
security appliance in order to connect to the appliance. Administrators can then configure and
manage the security appliance using ASDM.
• The outbound interface is configured to deny all inbound traffic through the outside interface.
This configuration protects your inside network from unsolicited traffic.
Based on your network security policy, you should also consider configuring the security appliance to
deny all ICMP traffic through the outside interface or any other interface that is necessary. You can
configure this access control policy using the icmp command. For more information about the icmp
command, refer to the Cisco Security Appliance Command Reference.
5
Advertisement
