Cisco Cisco Web Security Appliance S690 User Guide

When you use the Web Security appliance in a network that contains another proxy server, it is 
recommended that you place the Web Security appliance downstream from the proxy server, 
closer to the clients. 

Time Zone

Provide time-zone information for location of the appliance; affects 
timestamps in message headers and log files.

Appliance Mode 
of Operation

Standard – Used for standard on-premise policy enforcement.

Cloud Web Security Connector – Used primarily to direct traffic to Cisco’s 
Cloud Web Security service for policy enforcement and threat defense. 

 for more information about 

these modes of operation.

Is there another 
web proxy on your 
network?

Is there another proxy on your network, such that

traffic must pass through it?

it will be upstream of the Web Security appliance?

If yes for both points, select the checkbox. This allows you to create a proxy group 
for one upstream proxy. You can add more upstream proxies later.

Proxy group name A name used to identify the proxy group on the appliance. 

Address

The hostname or IP address of the upstream proxy server.

Port

The port number of the upstream proxy server.

Cloud Web Security 
Proxy Servers

The address of the Cloud Proxy Server (CPS), for example, 

proxy1743.scansafe.net

.

Failure  Handling

If AsyncOS fails to connect to a Cloud Web Security proxy, either Connect 
directly to the Internet, or Drop requests.

Cloud Web Security 
Authorization Scheme

Method for authorizing transactions: 

Web Security Appliance public-facing IPv4 address.

Authorization key included with each transaction. You can generate an 
authorization key within the Cisco Cloud Web Security Portal.