Cisco Cisco Web Security Appliance S390 Betriebsanweisung
9-6
Cisco AsyncOS for Web User Guide
Chapter 9 Classify URLs for Policy Application
Managing Updates to the Set of URL Categories
Related Topics
•
Merged Categories - Examples
Some examples of merged categories, based on settings on the URL Filtering page for the policy:
Two or more existing
categories can merge
categories can merge
If all original categories in a policy had the same action assigned, the merged category has the same
action as the original categories. If all original categories were set to “Use Global Setting” then the
merged category is also set to “Use Global Setting.”
action as the original categories. If all original categories were set to “Use Global Setting” then the
merged category is also set to “Use Global Setting.”
If the policy had different actions assigned to the original categories, the action assigned to the
merged category depends on the Uncategorized URLs setting in that policy:
merged category depends on the Uncategorized URLs setting in that policy:
•
If Uncategorized URLs is set to Block (or “Use Global Setting” when the global setting is
Block), then the most restrictive action among the original categories is applied to the merged
category.
Block), then the most restrictive action among the original categories is applied to the merged
category.
•
If Uncategorized URLs is set to any action other than Block (or “Use Global Setting” when the
global setting is anything other than Block), then the least restrictive action among the original
categories is applied to the merged category.
global setting is anything other than Block), then the least restrictive action among the original
categories is applied to the merged category.
In this case, sites that were previously blocked may now be accessible to users.
If policy membership is defined by URL category, and some of the categories involved in the merge,
or the Uncategorized URLs action, are not included in the policy membership definition, then the
values in the Global Policy are used for the missing items.
or the Uncategorized URLs action, are not included in the policy membership definition, then the
values in the Global Policy are used for the missing items.
•
The order of restrictiveness is as follows (not all actions are available for all policy types):Block
•
Drop
•
Decrypt
•
Warn
•
Time-based
•
Monitor
•
Pass Through
Note
Time-based policies that are based on merged categories adopt the action associated with any
one of the original categories. (In time-based policies, there may be no obviously most- or
least-restrictive action.)
one of the original categories. (In time-based policies, there may be no obviously most- or
least-restrictive action.)
Change
Effect on Policies and Identities
Original Category 1 Original Category 2
Uncategorized URLs
Merged Category
Monitor
Monitor (Not
Applicable)
Monitor
Block Block
(Not
Applicable)
Block
Use Global
Settings
Settings
Use Global Settings
(Not Applicable) Use
Global
Settings
Warn Block
Monitor
Use the least restrictive among the original
categories.
categories.
Warn