Cisco ASA 5505 Configuration Manual page 932

Configuring the Mobility Advantage by using the Unified Communication Wizard
•
•
•
•
•
Configuring the Mobility Advantage by using the Unified
Communication Wizard
The Unified Communication Wizard is supported for the adaptive security appliance version 8.3(1) and
Note
later.
The Unified Communication wizard guides you through the steps to configure the Mobility Advantage
proxy. Choose Wizards > Unified Communication Wizard from the menu. The Unified
Communication Wizard opens. Click the Cisco Mobility Advantage Proxy radio button under the
Remote Access section.
When using the wizard to create the Mobility Advantage proxy, ASDM automatically creates the
necessary TLS proxies, enables MMP inspection for the Mobility Advantage traffic, generates address
translation (NAT) statements, and creates the access rules that are necessary to allow traffic between the
Cisco Mobility Advantage server and the mobility clients.
The following steps provide the high-level overview for configuring the Mobility Advantage proxy:
Specify settings to define the private and public network topology, such the public and private network
Step 1
interfaces, and the IP addresses of the Cisco Mobility Advantage server. See
for the Cisco Mobility Advantage Proxy, page
Configure the certificates that are exchanged between the Cisco Mobility Advantage server and the
Step 2
adaptive security appliance. See
Advantage Proxy, page
Cisco ASA 5500 Series Configuration Guide using ASDM
42-4
You must configure at least two interfaces on the adaptive security appliance to use the UC Wizard
to configure a Unified Communications proxy.
For all Unified Communications proxies to function correctly, you must synchronize the clock on
the adaptive security appliance and all servers associated with each proxy, such as the Cisco Unified
Communication Manager server, the Cisco Mobility Advantage server, the Cisco Unified Presence
server, and the Cisco Intercompany Media Engine server.
When you configure the Cisco Intercompany Media Engine Proxy for an off-path deployment, you
must ensure that the public IP addresses and ports of the Cisco Unified Communications Manager
servers and the public IP address for the media termination address are accessible from the Internet.
The summary page of the Unified Communication Wizard reminds you of the requirements.
If the adaptive security appliance on which you configure the Cisco Mobility Advantage Proxy and
the Cisco Presence Federation Proxy is located behind another firewall, you must ensure that the
public IP addresses for the Cisco Mobility Advantage server and the Cisco Unified Presence server
are accessible from the Internet.
If you use the Unified Communication Wizard to create to the Presence Federation Proxy and the
Cisco Intercompany Media Engine Proxy, you might be required to adjust the configuration of the
access lists created automatically by the wizard for each proxy. See
Unified Presence" and Chapter 47, "Configuring Cisco Intercompany Media Engine
respectively, for information about the access list requirements required by each proxy.
42-5.
Chapter 42
42-5.
Configuring the Server-Side Certificates for the Cisco Mobility
Using the Cisco Unified Communication Wizard
Chapter 46, "Configuring Cisco
Proxy",
Configuring the Topology
OL-20339-01