Cisco Cisco Web Security Appliance S160 Guía Del Usuario

Submit and commit your changes.

When you commit a change to Identities, end-users must re-authenticate. 

Every non-Identity policy group specifies at least one Identity group as part of its policy group 
membership. You can configure a non-Identity policy group to use multiple Identity groups, and you can 
specify which users or groups of users are authorized to access the web using the policy group. 

You might want to specify multiple Identity groups in a policy group under the following circumstances:

You have an Identity group defined for HTTP transactions and another Identity group defined for 
native FTP transactions. You can create a single non-Identity policy group that applies to both HTTP 
and native FTP transactions

Separate Identity groups are defined for each authentication realm. You want to create one Access 
Policy group that defines the same access control settings for users in multiple authentication 
realms.

You can also specify All Identities and configure the authenticated users.

 shows a policy group that uses multiple Identities.

URL Categories

Choose the user defined or predefined URL categories.

Membership for both user defined and predefined URL categories is excluded by 
default, meaning the Web Proxy ignores all categories unless they are selected in 
the Add column.

User Agents

Choose whether or not to define policy group membership by the user agent used 
in the client request. You can select some commonly defined browsers, or define 
your own using regular expressions. Choose whether this policy group should 
apply to the selected user agents or to any user agent that is not in the list of selected 
user agents.

For more information on creating user agent based policies, see 

.