Cisco Cisco Web Security Appliance S360 User Guide
7-11
Cisco IronPort AsyncOS 7.7.5 for Web User Guide
Chapter 7 Policies
Working with User Agent Based Policies
Configuring User Agents for Policy Group Membership
When you define policy group membership for any policy type, you can expand the Advanced section
to define membership by additional criteria, such as user agent. When you click the User Agents link,
the Membership by User Agent page appears allowing you to define membership by user agent.
to define membership by additional criteria, such as user agent. When you click the User Agents link,
the Membership by User Agent page appears allowing you to define membership by user agent.
shows the Membership by User Agent page for an Identity policy group.
Figure 7-3
Defining Policy Group Membership by User Agent
On this page, you can select as many user agents as desired. The web interface includes some of the more
common user agents that you can select using a check box. You can also type a regular expression to
define any user agent necessary.
common user agents that you can select using a check box. You can also type a regular expression to
define any user agent necessary.
For each user agent you select in the Common User Agents section, AsyncOS for Web creates a regular
expression to define the user agent. However, if you select the Any Versions option for each browser
type, AsyncOS for Web creates a single regular expression that represents all versions of that browser
instead an expression for each version. Creating one regular expression instead of multiple increases
performance.
expression to define the user agent. However, if you select the Any Versions option for each browser
type, AsyncOS for Web creates a single regular expression that represents all versions of that browser
instead an expression for each version. Creating one regular expression instead of multiple increases
performance.
For example, when you select “Version 2.X” and “Version 1.X or earlier” for Firefox, AsyncOS for Web
uses the following regular expressions:
uses the following regular expressions:
Firefox/2
Firefox/1
However, when you select “Firefox Any Versions,” AsyncOS uses the following regular expression:
Firefox
Also, you can configure the policy group membership to either match the user agents you define, or
matching all other user agents than the ones defined.
matching all other user agents than the ones defined.