Cisco Cisco Web Security Appliance S190 Getting Started Guide

At-a-Glance

Powerful, All-in-One Network Security

To combat advanced web security threats, you need strong protection

and consistent control across all endpoints and everywhere in between.

That includes mobile devices, web-enabled and mobile applications,

and web browsers. You need the Cisco® Web Security Appliance. With

it, you can address the challenges of securing and controlling web traffic

easily and quickly.

The Web Security Appliance combines Advanced Malware Protection

(AMP), Cognitive Threat Analytics (CTA), application visibility and control

(AVC), acceptable-use policies, insightful reporting, and highly secure

mobility (Figure 1). It’s all available on a single easy-to-manage platform.

As a physical appliance, the Web Security Appliance has few

maintenance requirements, for low operational costs along with reduced

latency. For highly distributed networks, the Cisco Web Security Virtual

Appliance lets you deploy the same stringent web security when and

where it’s needed in a virtual version.

Figure 1. Threat-Centric Security Before, During, and After an Attack

www

Cisco Web Security Appliance (WSA)

Appliance

Before

Web

Reputation

Web

Filtering

Parallel AV

Scanning

File

Reputation

Data Loss

Prevention

File

Sandboxing

File

Retrospection

Cloud Access

Security

Application

Visibility and

Control

Cognitive

Threat

Analytics

(CTA)

During

After

Virtual

Talos

www

Redirections

WCCP

Load Balancer

Roaming User

Allow

Warn

Block

Partial Block

Explicit/PAC

PBR

Admin

Management

Reporting

STIX/TAXII (CTA)

AnyConnect® Client

www

Client

Authentication

Technique

Cisco® ISE

AMP

Protect Roaming Users

The Web Security Appliance protects the data requested by roaming

laptops. Before granting access to the network, it initiates a VPN that

directs sensitive traffic to the primary web access point for real-time

analysis. And by integrating the appliance with the Cisco Identity Services

Engine (ISE), administrators can create policies on the appliance based

on user profile or membership information gathered by engine. You

gain a new level of user control and reporting. You also provide a much

better user experience in bring-your-own-device (BYOD) environments

through streamlined capabilities such as integrated single sign-on.

Benefits

• Get advanced threat detection

through integration with Cisco
Advanced Malware Protection,
Cisco Cognitive Threat
Analytics, and cloud access
security products.

• Easily deploy the solution

with fast, flexible options and
automatic updates.

• Enhance security with highly

detailed web-access control
with the industry-leading Cisco
Identity Services Engine.

• Reduce costs with easy

integration into your existing
security infrastructure.

• Get an all-in-one solution

with web security and proxy
capabilities supported within a
single box.

Cisco Web Security

Appliance