Cisco Cisco Web Security Appliance S360 User Guide

Submit your changes.

Configure Routing Policy group control settings to define how the Web Proxy handles transactions.

The new policy group automatically inherits global policy group settings until you configure options for 
each control setting. For more information, see 

.

Submit and commit your changes.

Subnets

Choose whether or not to define policy group membership by subnet or other 
addresses.

You can choose to use the addresses that may be defined with the associated 
Identity, or you can enter specific addresses here. 

Note: If the Identity associated with this policy group defines its membership by 
addresses, then in this policy group you must enter addresses that are a subset of 
the Identity’s addresses. Adding addresses in the policy group further narrows 
down the list of transactions that match this policy group.

Time Range

Choose whether or not to define policy group membership by a defined time range. 
Choose the time range from the Time Range field and then choose whether this 
policy group should apply to the times inside or outside the selected time range.

For more information on creating time based policies, see 

For more information on creating time ranges, see 

URL Categories

Choose whether or not to define policy group membership by URL categories. 
Select the user defined or predefined URL categories.

Note: If the Identity associated with this policy group defines Identity membership 
by this advanced setting, the setting is not configurable at the non-Identity policy 
group level.

User Agents

Choose whether or not to define policy group membership by the user agent used 
in the client request. You can select some commonly defined browsers, or define 
your own using regular expressions. Choose whether this policy group should 
apply to the selected user agents or to any user agent that is not in the list of 
selected user agents.

For more information on creating user agent based policies, see 

.

Note: If the Identity associated with this policy group defines Identity membership 
by this advanced setting, the setting is not configurable at the non-Identity policy 
group level.

User Location

Choose whether or not to define policy group membership by user location, either 
remote or local. 

This option only appears when the Secure Mobility is enabled. For more 
information, see