Cisco Cisco Web Security Appliance S670 User Guide

Optionally, you can add another DLP server by clicking Add Row and entering 
the DLP Server information in the new fields provided.

You can test the connection between the Web Security appliance and the defined 
external DLP server(s) by clicking Start Test. 

Submit and commit your changes.

Each upload request is assigned to an External DLP Policy group and inherits the 
control settings of that policy group. The control settings of the External DLP 
Policy group determine whether or not to send the upload request to the external 
DLP system for scanning. 

Once the Web Proxy receives the upload request headers, it has all the information 
necessary to decide if the request should go to the external DLP system for 
scanning. The DLP system scans the request and returns a verdict to the Web 
Proxy, either block or monitor (evaluate the request against the Access Policies). 
The block page provided by the DLP system appears to the end user, if applicable.

Maximum 
Simultaneous 
Connections

Specifies the maximum number of simultaneous ICAP 
request connections from the Web Security appliance to 
each configured external DLP server. The Failure 
Handling setting on this page applies to any request 
which exceeds this limit.

Default is 25.

Failure Handling

Choose whether upload requests are blocked or allowed 
(passed to Access Policies for evaluation) when the DLP 
server fails to provide a timely response.

Default is allow (“Permit all data transfers to proceed 
without scanning”).