Cisco Cisco Web Security Appliance S190 Guía Del Usuario
16-11
AsyncOS 8.5 for Cisco Web Security Appliances User Guide
Chapter 16 Notify End-Users of Proxy Actions
End-User Acknowledgment Page
Configuring the End-User Acknowledgment Page
You can enable and configure the end-user acknowledgment page in the web interface or the command
line interface. When you configure the end-user acknowledgment page in the web interface, you can
include a custom message that appears on each page.
line interface. When you configure the end-user acknowledgment page in the web interface, you can
include a custom message that appears on each page.
In the CLI, use
advancedproxyconfig > eun
.
Step 1
Security Services > End-User Notification.
Step 2
Click Edit Settings.
Step 3
Enable the “Require end-user to click through acknowledgment page” field.
Step 4
In the Time Between Acknowledgments field, enter the time interval the appliance uses between
displaying the end-user acknowledgment page.
displaying the end-user acknowledgment page.
Surrogate Type
Determines which method the Web Proxy uses to track the user:
•
IP Address. The Web Proxy allows the user at that IP address to use any
web browser or non-browser HTTP process to access the web once the user
clicks the link on the end-user acknowledgment page. Tracking the user by
IP address allows the user to access the web until the Web Proxy displays a
new end-user acknowledgment page due to inactivity or the configured time
interval for new acknowledgments. Unlike tracking by a session cookie,
tracking by IP address allows the user to open up multiple web browser
applications and not have to agree to the end-user acknowledgment unless
the configured time interval has expired.
web browser or non-browser HTTP process to access the web once the user
clicks the link on the end-user acknowledgment page. Tracking the user by
IP address allows the user to access the web until the Web Proxy displays a
new end-user acknowledgment page due to inactivity or the configured time
interval for new acknowledgments. Unlike tracking by a session cookie,
tracking by IP address allows the user to open up multiple web browser
applications and not have to agree to the end-user acknowledgment unless
the configured time interval has expired.
Note
When IP address is configured and the user is authenticated, the Web
Proxy tracks users by username instead of IP address.
Proxy tracks users by username instead of IP address.
•
Session Cookie. The Web Proxy sends the user’s web browser a cookie
when the user clicks the link on the end-user acknowledgment page and
uses the cookie to track their session. Users can continue to access the web
using their web browser until the Time Between Acknowledgments value
expires, they have been inactive longer than the allotted time, or they close
their web browser.
when the user clicks the link on the end-user acknowledgment page and
uses the cookie to track their session. Users can continue to access the web
using their web browser until the Time Between Acknowledgments value
expires, they have been inactive longer than the allotted time, or they close
their web browser.
If the user using a non-browser HTTP client application, they must be able
to click the link on the end-user acknowledgment page to access the web. If
the user opens a second web browser application, the user must go through
the end-user acknowledgment process again in order for the Web Proxy to
send a session cookie to the second web browser.
to click the link on the end-user acknowledgment page to access the web. If
the user opens a second web browser application, the user must go through
the end-user acknowledgment process again in order for the Web Proxy to
send a session cookie to the second web browser.
Note
Using a session cookie to track users when the client accesses HTTPS
sites or FTP servers using FTP over HTTP is not supported.
sites or FTP servers using FTP over HTTP is not supported.
Custom message
Customize the text that appears on every end-user acknowledgment page. You
can include some simple HTML tags to format the text.
can include some simple HTML tags to format the text.
Note
You can only include a custom message when you configure the
end-user acknowledgment page in the web interface, versus the CLI.
end-user acknowledgment page in the web interface, versus the CLI.
Setting
Description