Cisco Cisco Web Security Appliance S160 Guía Del Usuario

Descargar
Página de 638
 
2-11
Cisco IronPort AsyncOS 7.5 for Web User Guide
 
Chapter 2      Using the Web Security Appliance
The Cisco SensorBase Network
  •
CLI. Use the 
checkproxyrestart
 command before the 
commit
 command. If the configuration 
changes require a Web Proxy restart, the CLI displays “The changes will trigger a proxy restart.”
In addition to a brief interruption of Web Proxy services, you may notice the following effects when the 
Web Proxy restarts: 
  •
The authentication cache is cleared and users need to be authenticated again. 
  •
Tracking statistics are reset. This also affects SNMP because the values depend on tracking 
statistics.
  •
The Web Proxy DNS cache is cleared.
  •
The HTTPS certificate cache is cleared.
  •
Connections to authentication servers are renegotiated.
  •
Any data in the Web Proxy cache that was not written to disk is lost.
  •
Any logging data that is not written to a log file is lost.
The Cisco SensorBase Network
The Cisco SensorBase Network is a threat management database that tracks millions of domains around 
the world and maintains a global watch list for Internet traffic. SensorBase provides Cisco with an 
assessment of reliability for known Internet domains. The Web Security appliance uses the SensorBase 
data feeds to improve the accuracy of Web Reputation Scores.
Standard SensorBase Network Participation is enabled by default during system setup. You can edit the 
participation level and other settings on the Security Services > SensorBase page after system setup.
To edit SensorBase Network Participation:
Step 1
Navigate to the Security Services > SensorBase page.
Figure 2-4
Editing SensorBase Global Settings 
Step 2
Verify that SensorBase Network Participation is enabled. 
When it is disabled, none of the data that the appliance collects is sent back to the SensorBase Network 
servers.
Step 3
In the Participation Level section, choose one of the following levels:
  •
Limited. Basic participation summarizes server name information and sends MD5-hashed path 
segments to the SensorBase Network servers.