Cisco Cisco Web Security Appliance S360 Guía Para Resolver Problemas

WSA Allows Low WBRS Traffic Flow Without the
Loss of Antivirus Protection

Document ID: 117802

Contributed by Kei Ozaki and Zack Shaikh, Cisco TAC Engineers.
Jun 11, 2014

Contents

Introduction
Prerequisites
Requirements
Components Used
Problem
Solution

Introduction

This document describes how to allow traffic with low Web−Based Reputation Scores (WBRS) through the
Cisco Web Security Appliance (WSA) with the continued use of an Antivirus program.

Prerequisites

Requirements

Cisco recommends that you have knowledge of WSA devices.

Components Used

The information in this document is base on WSA devices that run AsyncOS Versions 5.6 and later.

Problem

A site is blocked due to a low WBRS. You desire to allow the traffic through, but still scan the traffic with an
Antivirus program.

Solution

If you desire to allow traffic to this destination, you must create a special Identity/Access policy that matches
the request. For example, if www.example.com has a score of −6.0 and is currently blocked, you must first
create a custom URL category for this URL. Then you must bind the new category to an identity, bind the
identity to an access policy, and finally modify the WBRS block range for the access policy.

Complete these steps in order to create a custom URL category:

Log into your WSA, navigate to Web Security Manager > Custom URL categories, and click Add
Custom Category....