Cisco Secure Email and Web Virtual Appliance Installation ...

1 Cisco Systems, Cisco Secure Email and Web Virtual Appliance Installation GuideLast Updated: October 28, 2021 Contents About Cisco Secure Virtual Appliances, page 1 System Requirements, page 7 Prepare the Content Secure Image and Files, page 12 Deploy on Microsoft Hyper-V, page 14 If DHCP Is Disabled, Set Up the Appliance on the Network (Microsoft Hyper-V), page 15 Deploy on KVM, page 15 Deploy on vmware ESXi, page 19 If DHCP Is Disabled, Set Up the Appliance on the Network ( vmware vsphere ), page 22 Amazon Web Services (AWS) EC2 Deployments, page 22 Managing Your Cisco Secure Virtual Appliance , page 25 Troubleshooting and Support, page 27 Additional Information, page 32 About Cisco Secure Virtual AppliancesCisco Secure Virtual appliances function the same as physical Cisco Secure Email Gateway, Cisco Secure Web Appliance , or Cisco Secure Email and Web Manager hardware appliances, with only a few minor differences, which are documented in Managing Your Cisco Secure Virtual Appliance , page 25.

2 2 Cisco Secure Email and Web Virtual Appliance Installation Guide About Cisco Secure Virtual AppliancesSupported Virtual Appliance Models and AsyncOS Releases for Hyper-V DeploymentsProductAsyncOS Release Model Recommended Disk SizeSupported Disk SizesRAM Processor CoresCisco Secure Web Virtual Appliance AsyncOS laterS100V250 GB200 GB250 GB8 GB3S300V1024 GB500 GB750 TB12 GB 5S600V1024 GB750 TB24 GB12 AsyncOS GB200 GB250 GB8 GB3S300V1024 GB500 GB750 TB8 GB 4S600V1024 GB750 TB24 GB12 3 Cisco Secure Email and Web Virtual Appliance Installation Guide About Cisco Secure Virtual AppliancesSupported Virtual Appliance Models and AsyncOS Releases for KVM DeploymentsProductAsyncOS Release Model Recommended Disk SizeSupported Disk SizesRAM Processor CoresAsyncOS laterS100V250 GB200 GB250 GB6 GB2S300V1024 GB500 GB750 TB8 GB 4S600V1024 GB750 TB24 GB12 AsyncOS laterS100V250 GB-6 GB2S300V1024 GB-8 GB 4S600V1024 GB-24 GB12 ProductAsyncOS ReleaseModel Recommended Disk SizeRAM Processor CoresCisco Secure Email Virtual Gateway AsyncOS and laterAsyncOS and laterAsyncOS and laterAsyncOS and laterAsyncOS and laterC000V (For evaluation and demonstration only)

3 200 GB4 GB1C100V200 GB6 GB2C300V500 GB8 GB 4C600V500 GB8 GB 8 4 Cisco Secure Email and Web Virtual Appliance Installation Guide About Cisco Secure Virtual AppliancesProductAsyncOS Release Model Recommended Disk SizeSupported Disk SizesRAM Processor CoresCisco Secure Web Virtual Appliance AsyncOS laterS100V250 GB200 GB250 GB8 GB3S300V1024 GB500 GB750 TB12 GB 5S600V1024 GB750 TB24 GB12 AsyncOS GB200 GB250 GB8 GB3S300V1024 GB500 GB750 TB8 GB 4S600V1024 GB750 TB24 GB12 AsyncOS laterS100V250 GB200 GB250 GB6 GB2S300V1024 GB500 GB750 TB8 GB 4S600V1024 GB750 TB24 GB12 AsyncOS and laterS600V1024 GB-24 GB12 AsyncOS and laterS100V250 GB-6 GB2S300V1024 GB-8 GB 4 5 Cisco Secure Email and Web Virtual Appliance Installation Guide About Cisco Secure Virtual AppliancesVirtual Appliance Models for vmware ESXi Deployments NoteExcept as explicitly stated in the AsyncOS documentation, modifications to the ESXi configurations defined in the OVF are not supported.

4 Cisco Content Security Virtual Appliance OVF images allows you to switch from the pre-configured memory values to the new maximum values as follows: M100v /C100v models: 6 GB to 8 GB M300v / M600v / C300v / C600v models: 8 GB to 16 GBProductAsyncOS ReleaseModel Disk SizeMemory Max MemoryProcessor CoresCisco Secure Email and Web Manager Virtual AsyncOS and laterM600V 2032 GB8 GB16 GB8 ProductModel Disk SpaceMemoryMax MemoryProcessor CoresCisco Secure Email Virtual Gateway C000V (For evaluation and demonstration only)200 GB4 GB-1C100V200 GB6 GB8 GB2C300V500 GB8 GB16 GB4C600V500 GB8 GB16 GB8 ProductModel Disk SpaceMemoryMax MemoryProcessor CoresCisco Secure Email and Web Manager Virtual M000V (For evaluation and demonstration only)250 GB4 GB-1M100V250 GB6 GB8 GB2M300V1024 GB8 GB16 GB4M600V2032 GB8 GB16 GB8 6 Cisco Secure Email and Web Virtual Appliance Installation Guide About Cisco Secure Virtual AppliancesProductAsyncOS Release Model Recommended Disk SizeSupported Disk SizesRAM Processor CoresCisco Secure Web Virtual Appliance AsyncOS laterS100V250 GB200 GB250 GB8 GB3S300V1024 GB500 GB750 TB12 GB 5S600V1024 GB750 TB24 GB12 AsyncOS GB200 GB250 GB8 GB3S300V1024 GB500 GB750 TB8 GB 4S600V1024 GB750 TB24 GB12 7 Cisco Secure Email and Web Virtual Appliance Installation Guide System RequirementsAsyncOS version requirements are described in Supported vmware ESXi Hypervisors, page Requirements Microsoft Hyper-V Deployments, page 8 KVM Deployments.

5 Page 8 vmware ESXi Deployments, page 10 ProductAsyncOS Release Model Recommended Disk SizeSupported Disk SizesRAM Processor CoresAsyncOS laterS100V250 GB200 GB250 GB6 GB2S300V1024 GB500 GB750 TB8 GB 4S600V1024 GB750 TB24 GB12 AsyncOS and laterS600V1024 GB750 TB24 GB12 AsyncOS and laterS100V250 GB-6 GB2S300V1024 GB-8 GB 4 8 Cisco Secure Email and Web Virtual Appliance Installation Guide System RequirementsMicrosoft Hyper-V Deployments Supported Microsoft Hyper-V and host operating sys temsHardware Requirements for Microsoft Hyper-V DeploymentsCisco UCS servers blade M3, M4 servers and later are the only supported hardware platforms. KVM Deployments The following are the qualified environments for KVM deployments. All deployments use thin provisioning for disk storage.

6 Red Hat Enterprise Li nux Server Host OS: Red Hat Enterprise Linux Server (Red Hat Enterprise Virtualization and Red Hat OpenStack platform are NOT supported.) Version Info: Linux: libvirt/QEMU: Compiled against library: libvirt library: libvirt API: QEMU hypervisor: QEMU : Supported on: UCS C Series 220 M5SX Redhat certified UCS Platforms: Version Hyper-VAsyncOS (Web) and laterHyper-V version 9 Cisco Secure Email and Web Virtual Appliance Installation Guide System RequirementsUbuntu Server Host OS: Ubuntu Server LTS (latest update)Version Info: Linux: Virsh/QEMUC ompiled against library: libvirt library: libvirt API: QEMU hypervisor: QEMU : Supported on: UCS C Series 220 and 240 M3 and later Ubuntu Certified UCS Platform: +UCS&release= +LTSKVM Drivers Supported KVM drivers: CDROM: IDE CDROM Network: E1000, Virtio Disk.

7 VirtIOKVM Packages Required/related KVM packages to be installed on the host: qemu-kvm qemu-img libvirt libvirt-python libvirt-client virt-manager (requires X-windows) virt-install 10 Cisco Secure Email and Web Virtual Appliance Installation Guide System RequirementsVMWare ESXi Deployments Supported vmware ESXi Hypervisors AsyncOS Version vmware ESXi VersionAsyncOS ( Email )AsyncOS and and and x and and (Management)AsyncOS (Web)AsyncOS , , and and and and and later and AsyncOS 11 Cisco Secure Email and Web Virtual Appliance Installation Guide System RequirementsOther vmware hypervisors are supported on a Best Effort basis.

8 Cisco will try to help you, but it may not be possible to reproduce all problems, and Cisco cannot guarantee a solution. Hardware Requirements for vmware ESXi Deployments Cisco UCS servers (blade or rack-mounted) are the only supported hardware platform. Minimum requirements for the server hosting your Virtual appliances: Two 64-bit x86 processors of at least GHz each 8 GB of physical RAM A 10k RPM SAS hard drive disk Other hardware platforms are supported on a Best Effort basis: we will try to help you, but it may not be possible to reproduce all problems, and we cannot guarantee a solution. Note Except as explicitly stated in the documentation, Cisco does not support the alteration of the Cisco Content Security Virtual Appliance s hardware configuration, such as removing IP interfaces or changing the Appliance s CPU cores or RAM size.

9 The Appliance may send alerts if such changes are made. NoteVMWare ESXi deployment is supported on Cisco UCS M4 and M5 chassis servers with AsyncOS and later (for Web Security appliances).NoteVMWare ESXi deployment is supported on Cisco UCS M4 and M5 chassis servers with AsyncOS and later (for Cisco Secure Web Appliances).ESXi DriversSupported ESXi drivers: Network Adapter Type: E1000(Host ed Email Security Only) Deployment in FlexPod Solutions For AsyncOS for Email release and later: For more information about deploying a Cisco Secure Email Virtual Gateway as part of a FlexPod solution, see Your CCO login determines whether you have access to this document. For general information about FlexPod, see does not apply to Virtual Cisco Secure Web Appliance or Virtual Cisco Secure Email and Web Appliance deployments.

10 12 Cisco Secure Email and Web Virtual Appliance Installation Guide Prepare the Content Secure Image and FilesPrepare the Content Secure Image and FilesDetermine the Best-Sized Virtual Appliance Image for Your Deployment Determine the best-sized Virtual Appliance image for your needs. See the data sheet for your products, available from the following locations: Download the Cisco Content Security Virtual Appliance Image Befo re You Begin Obtain a license from Cisco for your Virtual Appliance . See Determine the Best-Sized Virtual Appliance Image for Your Deployment, page 1Go to the Cisco Download Software page for your Virtual Appliance : For Cisco Secure Email Gateway: For Cisco Secure Web Appliance : For Cisco Secure Email and Web Manager: 2In the left navigation pane, select an AsyncOS version.