Cisco Cisco Web Security Appliance S160 Guía Del Usuario
3-5
AsyncOS 9.0.1 for Cisco Web Security Appliances User Guide
Chapter 3 Connect the Appliance to a Cisco Cloud Web Security Proxy
Controlling Web Access Using Directory Groups in the Cloud
Controlling Web Access Using Directory Groups in the Cloud
You can use Cisco Cloud Web Security to control web access based on directory groups. When traffic to
Cisco Cloud Web Security is being routed through a Web Security Appliance in Cloud Connector mode,
Cisco Cloud Web Security needs to receive the directory-group information with the transactions from
the Cloud Connector so it can apply the group-based cloud policies.
Cisco Cloud Web Security is being routed through a Web Security Appliance in Cloud Connector mode,
Cisco Cloud Web Security needs to receive the directory-group information with the transactions from
the Cloud Connector so it can apply the group-based cloud policies.
Before You Begin
•
Add an authentication realm to the Web Security Appliance configuration.
Step 1
Navigate to Network > Cloud Connector.
Step 2
In the Cloud Policy Directory Groups area, click Edit Groups.
Step 3
Select the User Groups and Machine Groups for which you have created Cloud Policies within Cisco
Cloud Web Security.
Cloud Web Security.
Step 4
Click Add.
Step 5
Click Done and Commit your changes.
Related information
•
Bypassing the Cloud Proxy Server
Cloud routing policies allow you to route web traffic to either Cisco Cloud Web Security proxies or
directly to the Internet based on these characteristics:
directly to the Internet based on these characteristics:
•
Identification Profile
•
Proxy Port
•
Subnet
•
URL Category
•
User Agent
The process of creating cloud routing policies in Cloud Connector mode is identical to the process of
creating routing policies using the standard mode.
creating routing policies using the standard mode.
Related Topics
•
Partial Support for FTP and HTTPS in Cloud Connector Mode
The Web Security appliance in Cloud Connector mode does not fully support FTP or HTTPS.
FTP
FTP is not supported by the Cloud Connector. AsyncOS drops native FTP traffic when the appliance is
configured for Cloud Connector.
configured for Cloud Connector.