Network Planning

The Cisco Secure Email and Web Manager appliance lets you separate end user applications from the more secure gateway systems residing in your demilitarized zones (DMZs). Using a two-layer firewall can provide flexibility in network planning so that end users do not connect directly to the outer DMZ .

The following figure shows a typical network configuration incorporating the Cisco Secure Email and Web Manager appliance and multiple DMZs. You deploy the Cisco Secure Email and Web Manager appliance outside your DMZ, in your internal networks. All connections are initiated by the Cisco Secure Email and Web Manager appliances (M-Series) to the managed Email Security appliances (C-Series) and managed Web Security appliances (S-Series).

Corporate data centers can share a Cisco Secure Email and Web Manager appliance to perform centralized reporting and message tracking for multiple Web and Email Security appliances, and centralized policy configuration for multiple Web Security appliances. The Security Management appliance can also be used as an external spam quarantine.

After you connect the Email Security appliance and the Web Security appliances to a Cisco Secure Email and Web Manager appliance and properly configure all appliances, AsyncOS gathers and aggregates data from the managed appliances. From the aggregated data, reports can be generated and an overall view of email and web usage can be determined.