Cisco Cisco Web Security Appliance S670 User Guide

Page of 606
 
9-8
Cisco IronPort AsyncOS 7.7 for Web User Guide
Chapter 9      Block, Allow or Redirect Transaction Requests
Controlling HTTP and Native FTP Traffic
Controlling HTTP and Native FTP Traffic
After the Web Proxy assigns an HTTP, native FTP, or decrypted HTTPS request to an Access Policy 
group, the request inherits the control settings of that policy group. The control settings of the Access 
Policy group determine whether the appliance allows, blocks, or redirects the connection.
Configure control settings for Access Policy groups on the Web Security Manager > Access Policies 
page.
 shows where you can configure control settings for the Access Policy groups.
Figure 9-2
Creating Secure Access Policies
You can configure the following settings to determine what action to take on the request:
  •
Protocols and User Agents. For more information, see 
.
  •
URL Categories. For more information, see 
  •
Applications. For more information, see 
.
  •
Objects. For more information, see 
.
  •
Web Reputation and Anti-Malware Filtering. For more information, see 
After an Access Policy group is assigned to a request, the control settings for the policy group are 
evaluated to determine whether to allow, block, or redirect the request. For more information about 
assigning an Access Policy group to a request, see 
 shows how the Web Proxy determines which action to take on a request after it 
has assigned a particular Access Policy to the request.