Cisco Cisco Web Security Appliance S670 Guía Para Resolver Problemas
For example, there are configurations that contain all video sites for matches in the identity. The WSA has a
built−in tool that automatically updates when video sites change URLs, which occurs frequently. Thus, it
makes sense to allow the WSA to manage the URL categories automatically, and use the custom URL
categories for special, not yet categorized sites.
built−in tool that automatically updates when video sites change URLs, which occurs frequently. Thus, it
makes sense to allow the WSA to manage the URL categories automatically, and use the custom URL
categories for special, not yet categorized sites.
Be very careful with regular expressions. If special character matches such as dot (.) and star(*) are used, they
might prove to be very CPU and memory extensive. The WSA expands any regular expression to match it
against each transaction. For example, here is a regular expression:
might prove to be very CPU and memory extensive. The WSA expands any regular expression to match it
against each transaction. For example, here is a regular expression:
example.*
This expression will match any URL that contains the word example, not only the example.com domain.
Avoid the use of dot and star in regular expressions and use them only as a last resort.
Avoid the use of dot and star in regular expressions and use them only as a last resort.
Here is another example of a regular expression that might create issues:
www.example.com
If you use this example in the Regular Expressions filed, it will not only match www.example.com, but also
www.www3example2com.com, as the dot here means any character. If you desire to match only
www.example.com, escape the dot:
www.www3example2com.com, as the dot here means any character. If you desire to match only
www.example.com, escape the dot:
www\.example\.com
In this case, there is no reason to use the Regular Expressions feature when you can include this inside the
custom URL category domain with this format:
custom URL category domain with this format:
www.example.com
Anti−Malware and Reputation
If more than one scanning engine is enabled, consider the option to enable adaptive scanning also. Adaptive
scanning is a powerful but small engine on the WSA that pre−scans each request and determines the
comprehensive engine that should be used in order to scan requests. This slightly increases performance on
the WSA.
scanning is a powerful but small engine on the WSA that pre−scans each request and determines the
comprehensive engine that should be used in order to scan requests. This slightly increases performance on
the WSA.
Updated: Apr 09, 2015
Document ID: 118885