Cisco Cisco Email Security Appliance C190 Betriebsanweisung
15-6
Cisco AsyncOS 8.5.6 for Email User Guide
Chapter 15 URL Filtering
Taking Action Based on the Reputation or Category of URLs in Messages
•
Filter categories of URLs to enforce organizational policies for acceptable web use, for example to
prevent users from visiting adult or gambling sites while at the office.
prevent users from visiting adult or gambling sites while at the office.
•
Provide enhanced protection from malicious sites, which may not exist long enough to be classified.
You can redirect all URLs in the Unclassified category to the Cisco cloud Web Security proxy
service for evaluation at the time a user clicks a link.
You can redirect all URLs in the Unclassified category to the Cisco cloud Web Security proxy
service for evaluation at the time a user clicks a link.
Related Topics
•
•
•
•
Using URL-Related Conditions (Rules) and Actions
As always, you must specify a content filter in a mail policy in order to use it.
Filtering by URL Reputation or URL Category: Conditions and Rules
You can perform actions on messages based on the reputation or category of URLs in the message. If
you want to perform any action other than modifying URLs or their behavior, add a URL Reputation
or URL Category condition and select the reputation scores or URL categories for which you want to
apply the action.
you want to perform any action other than modifying URLs or their behavior, add a URL Reputation
or URL Category condition and select the reputation scores or URL categories for which you want to
apply the action.
For example, if you want to apply the Drop (Final Action) action to all messages that include URLs in
the Adult category, add a condition of type URL Category with the Adult category selected.
the Adult category, add a condition of type URL Category with the Adult category selected.
If you do not specify a category, the action you choose is applied to all messages.
URL reputation score ranges for clean, suspect, and malicious URLs are predefined and not editable.
However, you can specify a custom range instead. The specified endpoints are included in the range you
specify. For example, if you create a custom range from -8 to -10, then -8 and -10 are included in the
range. Use "No Score" for URLs for which a reputation score cannot be determined.
However, you can specify a custom range instead. The specified endpoints are included in the range you
specify. For example, if you create a custom range from -8 to -10, then -8 and -10 are included in the
range. Use "No Score" for URLs for which a reputation score cannot be determined.
URLs that are included on the selected URL whitelist or on the global URL whitelist not evaluated.
To Example
Do
This
Take action on the
message as a whole.
message as a whole.
Drop or quarantine messages. Create a URL Reputation or URL
Category condition or rule, then pair it
with any action other than a URL
Reputation or URL Category action.
with any action other than a URL
Reputation or URL Category action.
Exception: Do not pair a URL Reputation
condition or rule with a Bounce action.
condition or rule with a Bounce action.
Modify URLs in a
message, or modify their
behavior.
message, or modify their
behavior.
Replace a URL in the message
with a text note, or make the
URL unclickable.
with a text note, or make the
URL unclickable.
Create a URL Reputation or URL
Category action only; do not use a
separate URL filtering condition.
Category action only; do not use a
separate URL filtering condition.