Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 652
15-69
Cisco IronPort AsyncOS 7.5 for Email Configuration Guide
OL-25136-01
Chapter 15      System Administration
Allow All. This mode allows all connections to the appliance. This is the 
default mode of operation.
Only Allow Specific Connections. This mode allows a user to connection to 
the appliance if the user’s IP address matches the IP addresses, IP ranges, or 
CIDR ranges included in the access list.
Only Allow Specific Connections Through Proxy. This mode allows a user 
to connect to the appliance through a reverse proxy if the following 
conditions are met:
The connecting proxy’s IP address is included in the access list’s IP 
Address of Proxy Server field.
The proxy includes the 
x-forwarded-header
 HTTP header in its 
connection request.
The value of 
x-forwarded-header
 is not empty.
The remote user’s IP address is included in 
x-forwarded-header
 and it 
matches the IP addresses, IP ranges, or CIDR ranges defined for users in 
the access list.
Only Allow Specific Connections Directly or Through Proxy. This mode 
allows users to connect through a reverse proxy or directly to the appliance if 
their IP address matches the IP addresses, IP ranges, or CIDR ranges included 
in the access list. The conditions for connecting through a proxy are the same 
as in the Only Allow Specific Connections Through Proxy mode.