Cisco Cisco Web Security Appliance S160 Guía Del Usuario
12-2
AsyncOS 8.1 for Cisco Web Security User Guide
Chapter 12 Configuring Security Services
Overview of Web Reputation Filters
Related Topics
•
•
•
Overview of Web Reputation Filters
Web Reputation Filters assigns a web-based reputation score (WBRS) to a URL to determine the
likelihood that it contains URL-based malware. The Web Security appliance uses web reputation scores
to identify and stop malware attacks before they occur. You can use Web Reputation Filters with Access,
Decryption, and Cisco IronPort Data Security Policies.
likelihood that it contains URL-based malware. The Web Security appliance uses web reputation scores
to identify and stop malware attacks before they occur. You can use Web Reputation Filters with Access,
Decryption, and Cisco IronPort Data Security Policies.
Web Reputation Scores
Web Reputation Filters use data to assess the reliability of Internet domains and score the reputation of
URLs. The web reputation calculation associates a URL with network parameters to determine the
probability that malware exists. The aggregate probability that malware exists is then mapped to a Web
Reputation Score between -10 and +10, with +10 being the least likely to contain malware.
URLs. The web reputation calculation associates a URL with network parameters to determine the
probability that malware exists. The aggregate probability that malware exists is then mapped to a Web
Reputation Score between -10 and +10, with +10 being the least likely to contain malware.
Example parameters include the following:
•
URL categorization data
•
Presence of downloadable code
•
Presence of long, obfuscated End-User License Agreements (EULAs)
•
Global volume and changes in volume
•
Network owner information
•
History of a URL
•
Age of a URL
•
Presence on any block lists
•
Presence on any allow lists
•
URL typos of popular domains
•
Domain registrar information
Web Reputation Filters Analyzes web server behavior and
determines whether the URL contains
URL-based malware
URL-based malware
Advanced Malware
Protection
Protection
Protects from threats in downloaded
files by evaluating file reputation and
by analyzing file characteristics.
files by evaluating file reputation and
by analyzing file characteristics.
Option
Description
Link