Cisco Cisco Web Security Appliance S370 Leaflet

Page of 6
© 2015 Cisco and/or its affiliates. All rights reserved.
2   
Figure 2. Cisco Talos Security Intelligence and Research Group
I00I  III0I III00II  0II00II   I0I000  0110 00  
I00II   I0I000  0110 00  
I00I  III0I III00II  0II00II   I0I000  0110 00  
I00I  III0I III00II  0II00II   I0I000  0110 00   I00I  III0I III00II  0II00II   I  
I00I  III0I III00II  0II00II   I0I000  0110 00  
I00I  III0I III00II  0II00II   I0I000  0110 00  
I00I  III0I III00II  0II00II   I0I000  0110 00   I00I  III0I III00II  0II00II   I0I000   
Cisco Web Security Integration with Threat Intelligence
Built on unmatched collective security analytics
Threat 
Intelligence
Research
Response
Cisco® 
Talos
1.6 million
global sensors
100 TB
of data received per day
150 million+ 
deployed endpoints
600+
engineers, technicians,
and researchers
35%
worldwide email traffic
13 billion
web requests
24x7x365
operations
40+
languages
Email
•  180,000+ file samples per day
•  FireAMP™ community
•  Advanced Microsoft
  and industry disclosures
•  Snort and ClamAV open 
  source communities
•  Honeypots
•  Sourcefire AEGIS™ program
•  Private and public threat feeds
•  Dynamic analysis
  
Endpoints
WSA
+
Web
Networks
IPS
Devices
www
Advanced
Malware
Protection
Best Website Reputation Analysis
Cisco WSA correlates threats collected from Cisco’s network to produce a behavior score on 
which to take action. It applies and enforces web-reputation scores on parent sites and subsites.
Integrated, Multilayer Malware Defense for Adaptive Protection  
Effective web security used to mean blocking navigation to bad URLs. But today you’re 
more likely to contract a virus or download malware through legitimate websites. Cisco WSA 
defends against malware and advanced persistent threats using multiple layers of antimalware 
technologies and intelligence from Talos updated every three to five minutes. Every piece of web 
content accessed—from HTML to images to Flash files—is analyzed using security and context-
aware scanning engines. 
Cisco WSA analyzes traffic in real time, breaks it into functional elements, and pushes elements 
to best-designed malware engines for inspection while maintaining high processing speeds (see 
Figure 3).