21-15

Chapter 21 Configuring Cisco Intercompany Media Engine Proxy

Configuring Cisco Intercompany Media Engine Proxy

	Command		Purpose

Step 1	hostname(config)# object network	name	Configures a network object for the outside IP
	Examples:		address of Cisco UCM that you want to translate.
	hostname(config)# object network
	ucm-pat-209.165.200.228

Step 2	hostname(config-network-object)#	host ip_address	Specifies the real IP address of the Cisco UCM host
	Example:		for the network object.
	hostname(config-network-object)#	host
	209.165.200.228

Step 3	hostname(config-network-object)#	exit	Exits from the objects configuration mode.

Step 4	hostname(config)# object service	name	Creates a service object for the outside Cisco
	Examples:		Intercompany Media Engine port.
	hostname(config)# object service	tcp_5070
	hostname(config)# object service	tcp_5071

Step 5	hostname(config-service-object)#	tcp source eq port	Specifies the port number.
	Examples:
	hostname(config-service-object)#	tcp source eq 5070
	hostname(config-service-object)#	tcp source eq 5071

Step 6	hostname(config-service-object)#	exit	Exits from the objects configuration mode.

Step 7	hostname(config)# object network	name	Configures a network object to represent the real IP
	Examples:		address of Cisco UCM.
	hostname(config)# object network
	ucm-real-192.168.10.30
	hostname(config)# object network
	ucm-real-192.168.10.31

Step 8	hostname(config-network-object)#	host ip_address	Specifies the real IP address of the Cisco UCM host
	Examples:		for the network object.
	hostname(config-network-object)#	host 192.168.10.30
	hostname(config-network-object)#	host 192.168.10.31

Step 9	hostname(config-network-object)#	exit	Exits from the objects configuration mode.

Step 10	hostname(config)# object service	name	Creates a service objects for Cisco UCM SIP port.
	Examples:
	hostname(config)# object service	tcp_5570
	hostname(config)# object service	tcp_5571

Step 11	hostname(config-service-object)#	tcp source eq port	Specifies the port number.
	Example:
	hostname(config-service-object)#	tcp source eq 5570
	hostname(config-service-object)#	tcp source eq 5571

Step 12	hostname(config-service-object)#	exit	Exits from the objects configuration mode.

Step 13	hostname(config)# nat (inside,outside) source static		Creates a static mapping for Cisco UCM.
	real_obj mapped_obj service real_port mapped_port		Where real_obj is the name that you created in
	Examples:		Where real_obj is the name that you created in
	hostname(config)# nat (inside,outside) source static		Step 1 in this task.
	ucm-real-192.168.10.30 ucm-pat-209.165.200.228		Where mapped_obj is the name that you created in
	service tcp_5070 tcp_5570		Where mapped_obj is the name that you created in
	service tcp_5070 tcp_5570		Step 7 in this task.
	hostname(config)# nat (inside,outside) source static		Step 7 in this task.
	ucm-real-192.168.10.31 ucm-pat-128.106.254.5 service		Where real_port is the name that you created in
	tcp_5071 tcp_5571		Where real_port is the name that you created in
	tcp_5071 tcp_5571		Step 4 in this task.
			Step 4 in this task.
			Where mapped_obj is the name that you created in
			Step 10 in this task.

Cisco ASA Series Firewall ASDM Configuration Guide

ASA Services Module, ASA 5555-X, ASA 5545-X, ASA 5585-X, ASA 5580 specifications

Cisco Systems has long been a leader in the field of network security, and its Adaptive Security Appliance (ASA) series is a testament to this expertise. Within the ASA lineup, models such as the ASA 5505, ASA 5580, ASA 5585-X, ASA 5545-X, and ASA 5555-X stand out for their unique features, capabilities, and technological advancements.

The Cisco ASA 5505 is designed for small businesses or branch offices. It provides essential security features such as firewall protection, flexible VPN capabilities, and intrusion prevention. The ASA 5505 supports a user-friendly interface, allowing for straightforward management. Its built-in threat detection and prevention tools provide a layered defense, and with scalability in mind, it can accommodate various expansion options as organizational needs grow.

Moving up the line, the ASA 5580 delivers greater throughput and advanced security features. This model is suited for medium to large enterprises that require robust protection against increasingly sophisticated threats. Its multi-core architecture allows it to manage high volumes of traffic seamlessly while maintaining excellent performance levels. The ASA 5580 also supports application-layer security and customizable access policies, making it highly adaptable to diverse security environments.

The ASA 5585-X further enhances Cisco's security offerings with advanced malware protection and extensive security intelligence capabilities. It incorporates next-generation firewall features, including context-aware security, and supports advanced threat detection technologies. This model is ideal for large enterprises or data centers that prioritize security while ensuring uninterrupted network performance and availability.

For enterprises requiring a balance of performance and security, the ASA 5545-X presents a compelling option. This model features scalable performance metrics, high availability, and integrated advanced threat protection. Coupled with advanced endpoint protection and detailed monitoring capabilities, the ASA 5545-X enables organizations to manage their security posture effectively.

Lastly, the ASA 5555-X blends cutting-edge technologies with strong security infrastructures. It boasts high throughput and the ability to execute deep packet inspections. Its sophisticated architecture supports threat intelligence feeds that provide real-time security updates, making it a powerful tool against modern threats.

Each of these Cisco ASA models brings specific advantages to varied environments. Their integrative capabilities enable businesses to enhance their security postures while benefiting from seamless scalability and management. As cybersecurity threats evolve, these advanced appliances play a vital role in protecting valuable digital assets.

Cisco Systems ASA Services Module manual Address of Cisco UCM that you want to translate, 21-15

Models: ASA Services Module ASA 5555-X ASA 5545-X ASA 5585-X ASA 5580 ASA 5505

Command

address of Cisco UCM that you want to translate.

Intercompany Media Engine port.

Specifies the port number.

address of Cisco UCM.

Creates a service objects for Cisco UCM SIP port.

Cisco ASA Series Firewall ASDM Configuration Guide

21-15

ASA Services Module, ASA 5555-X, ASA 5545-X, ASA 5585-X, ASA 5580 specifications