Cisco Cisco Web Security Appliance S360 User Guide

Page of 619
 
7-11
Cisco IronPort AsyncOS 7.7.5 for Web User Guide
 
Chapter 7      Policies
Working with User Agent Based Policies
Configuring User Agents for Policy Group Membership
When you define policy group membership for any policy type, you can expand the Advanced section 
to define membership by additional criteria, such as user agent. When you click the User Agents link, 
the Membership by User Agent page appears allowing you to define membership by user agent.
 shows the Membership by User Agent page for an Identity policy group.
Figure 7-3
Defining Policy Group Membership by User Agent
On this page, you can select as many user agents as desired. The web interface includes some of the more 
common user agents that you can select using a check box. You can also type a regular expression to 
define any user agent necessary.
For each user agent you select in the Common User Agents section, AsyncOS for Web creates a regular 
expression to define the user agent. However, if you select the Any Versions option for each browser 
type, AsyncOS for Web creates a single regular expression that represents all versions of that browser 
instead an expression for each version. Creating one regular expression instead of multiple increases 
performance. 
For example, when you select “Version 2.X” and “Version 1.X or earlier” for Firefox, AsyncOS for Web 
uses the following regular expressions:
Firefox/2
 
Firefox/1
 
However, when you select “Firefox Any Versions,” AsyncOS uses the following regular expression:
Firefox
 
Also, you can configure the policy group membership to either match the user agents you define, or 
matching all other user agents than the ones defined.