Cisco Cisco Web Security Appliance S380 User Guide

Page of 446
 
2-12
AsyncOS 8.5 for Cisco Web Security Appliances User Guide
 
Chapter 2      Connect, Install, and Configure
  Upstream Proxies
Security / Security Settings
Upstream Proxies
The web proxy can forward web traffic directly to its destination web server or use routing policies to 
redirect it to an external upstream proxy. 
Table 2-6
Option
Description
Global Policy 
Default Action
Specifies whether to block or monitor all web traffic by default after the System 
Setup Wizard completes. You can change this behavior later by editing the 
Protocols and User Agents settings for the Global Access Policy. The default 
setting is to monitor traffic.
L4 Traffic Monitor
Specifies whether the Layer-4 Traffic Monitor should monitor or block 
suspected malware by default after the System Setup Wizard completes. You can 
change this behavior later. The default setting is to monitor traffic.
Acceptable Use 
Controls
Specifies whether or not to enable Acceptable Use Controls. 
If enabled, Acceptable Use Controls allow you to configure policies based on 
URL filtering. They also provide application visibility and control, as well as 
related options such as safe search enforcement. The default setting is enabled.
Reputation Filtering Specifies whether or not to enable Web Reputation filtering for the Global Policy 
Group. 
Web Reputation Filters is a security feature that analyzes web server behavior 
and assigns a reputation score to a URL to determine the likelihood that it 
contains URL-based malware. The default setting is enabled.
Malware and 
Spyware Scanning
Specifies whether or not to enable malware and spyware scanning using 
Webroot, McAfee, or Sophos. The default setting to that all three options are 
enabled.
If any option is enabled, also choose whether to monitor or block detected 
malware. The default setting is to monitor malware.
You can further configure malware scanning after you finish the System Setup 
Wizard.
Cisco Data Security 
Filtering
Specifies whether or not to enable Cisco Data Security Filters. 
If enabled, the Cisco Data Security Filters evaluate data leaving the network and 
allow you to create Cisco Data Security Policies to block particular types of 
upload requests. The default setting is enabled.