SMA M170 Deployment

[rmujeeb81]

Hi All,

I have to deploy SMA M170 for one of customer who is already using 2 * WSA and 2 * ESA appliances. So could you please guide me, if there will any downtime for WSA and ESA services if I add them into SMA ?

After addition of WSA and ESA with SMA the current configuration on these devices will remain intact ?

Also kindly confirm what other ports would need to be open between SMA and WSA/ESA appliacnes other then SSH and HTTPS.

Waiting for your response.

Thanks & Reagrds,

[Vinh Phan Le Tien]

Dear friend.

Pls check this document. I think it's good for you.

http://www.cisco.com/c/dam/en/us/td/docs/security/security_management/sma/hw/quick_start/M380_M680_QSG_78_21149.pdf

Vinh Phan.

[Robert Sherwin]

Not sure if you still needed answered, as I moved this to the correct forum.

There would not be any downtime when setting up the SMA for ESA and WSA communication.  Once you have the applianced added in and communication setup with the Security Appliances - this will retain the appliance communication on the SMA itself.  

Full firewall information and ports that need to be opened are listed in the User Guide, Firewall Information:

http://www.cisco.com/c/dam/en/us/td/docs/security/security_management/sma/sma9-0/SMA_9-0_User_Guide.pdf

So - depending on what you have configured, and what services you are expecting to centrally manage with the SMA for the ESA and WSA, you'll need to assure the ports are opened according to the guide, based on where the SMA lives on your network.

-Robert