Manualsbrain.com
  1. Manuals
  2. Brands
  3. Cisco
  4. Cisco Web Security Appliance S670
  5. Information Guide

Cisco Cisco Web Security Appliance S670 Information Guide

Download
Page of 11
Contents
Introduction
WSA WebBase Network Participation
ESA SenderBase Network Participation
General Security Concerns FAQ
Operation
SenderBase (Email) Network Participation
Statistics shared per Emailappliance
Statistics shared per IP address
Statistics Shared per SDS Client  (Added in AsyncOS version 8.5)
AMP SBNP telemetry data  (Added in AsyncOS version 8.5.6)
WebBase (Web) Network Participation
Statistics shared per web request
Advanced Malware Statistics per web request
End User Feedback statistics feed
Example data provided – Standard participation
Example data provided – Limited participation
Full WBNP Decode
Statistics shared per web request
Advanced Malware Statistics per web request
End User Feedback statistics feed
Talos Detection Content
Threat Focused
Related Information
Introduction
The Cisco Web and Email Content Security products can provide telemetry data back to Cisco to
increase the efficacy of web categorization in the Web Security Appliance (WSA) and connecting
IP reputation for the Email Security Appliance (ESA).  
The telemetry data is provided for the WSA/ESA on an 'opt-in' bases.
Note: This is enable by default.
The data is transmitted via binary encoded SSL encrypted packets.  The attachments provided
below will provide insight into the data, specific formatting and descriptions for the data that is
being transmitted.  WebBase Network Participation (WBNP) and SenderBase Network
Participation (SBNP) data is not viewable in a direct log or file format, this data is transmitted in
encrypted form and at no time is this data 'at rest'.
WSA WebBase Network Participation
Cisco recognizes the importance of maintaining your privacy, and does not collect or use personal