Cisco Cisco Web Security Appliance S690 User Guide
Chapter 17 Understanding Application Visibility and Control
Controlling Applications Overview
17-2
Cisco IronPort AsyncOS 7.0 for Web User Guide
OL-23079-01
The AVC engine allows you to create policies to control application activity on
the network without having to fully understand the underlying technology of each
application.
the network without having to fully understand the underlying technology of each
application.
Application control gives you more control over the following types of
applications:
applications:
•
Evasive applications, such as anonymizers and encrypted tunnels.
•
Collaboration applications, such as Cisco Webex and instant messaging.
•
Resource intensive applications, such as streaming media.
To control applications using the AVC engine, perform the following steps:
1.
Enable the AVC engine. For more information, see
.
2.
Define application control settings in the Access Policies. For more
information, see
information, see
Using the AVC engine, you can block or allow applications by application type or
a particular application. You can also apply deeper controls to particular
application types. For example, you can perform the following tasks:
a particular application. You can also apply deeper controls to particular
application types. For example, you can perform the following tasks:
•
Limit bandwidth consumed by some application types to control
congestion. For more information, see
congestion. For more information, see
.
•
Allow instant messaging traffic, but disallow file sharing using instant
messenger. For more information, see
messenger. For more information, see
•
Enforce safe search on search engines and user generated content sites.
For more information, see
For more information, see
.
•
Restrict access to adult content on some content sharing sites. For more
information, see
information, see
.
The AVC engine can dynamically receive updates from the Cisco IronPort update
server, including support for new applications and application types. For more
information, see
server, including support for new applications and application types. For more
information, see
.
You can also view the AVC engine scanning activity in the Application Visibility
report on the Monitor > Application Visibility page. For more information, see
report on the Monitor > Application Visibility page. For more information, see
.