Cisco Cisco Web Security Appliance S360 Guía Del Usuario

Descargar
Página de 486
 
3-5
AsyncOS 10.0 for Cisco Web Security Appliances User Guide
 
Chapter 3      Connect the Appliance to a Cisco Cloud Web Security Proxy
  Controlling Web Access Using Directory Groups in the Cloud
Controlling Web Access Using Directory Groups in the Cloud
You can use Cisco Cloud Web Security to control web access based on directory groups. When traffic to 
Cisco Cloud Web Security is being routed through a Web Security Appliance in Cloud Connector mode, 
Cisco Cloud Web Security needs to receive the directory-group information with the transactions from 
the Cloud Connector so it can apply the group-based cloud policies. 
Before You Begin
Add an authentication realm to the Web Security Appliance configuration.
Step 1
Navigate to Network Cloud Connector.
Step 2
In the Cloud Policy Directory Groups area, click Edit Groups.
Step 3
Select the User Groups and Machine Groups for which you have created Cloud Policies within Cisco 
Cloud Web Security.
Step 4
Click Add.
Step 5
Click Done and Commit your changes.
Related information
Bypassing the Cloud Proxy Server
Cloud routing policies allow you to route web traffic to either Cisco Cloud Web Security proxies or 
directly to the Internet based on these characteristics:
Identification Profile
Proxy Port
Subnet
URL Category
User Agent
The process of creating cloud routing policies in Cloud Connector mode is identical to the process of 
creating routing policies using the standard mode.
Related Topics
Partial Support for FTP and HTTPS in Cloud Connector Mode 
The Web Security appliance in Cloud Connector mode does not fully support FTP or HTTPS.
FTP
FTP is not supported by the Cloud Connector. AsyncOS drops native FTP traffic when the appliance is 
configured for Cloud Connector.