Cisco Cisco Web Security Appliance S670 Mode D'Emploi

Page de 606
 
7-12
Cisco IronPort AsyncOS 7.7 for Web User Guide
Chapter 7      Policies
Working with User Agent Based Policies
Figure 7-3
Defining Policy Group Membership by User Agent
On this page, you can select as many user agents as desired. The web interface includes some of the more 
common user agents that you can select using a check box. You can also type a regular expression to 
define any user agent necessary.
For each user agent you select in the Common User Agents section, AsyncOS for Web creates a regular 
expression to define the user agent. However, if you select the Any Versions option for each browser 
type, AsyncOS for Web creates a single regular expression that represents all versions of that browser 
instead an expression for each version. Creating one regular expression instead of multiple increases 
performance. 
For example, when you select “Version 2.X” and “Version 1.X or earlier” for Firefox, AsyncOS for Web 
uses the following regular expressions:
Firefox/2 
Firefox/1
 
However, when you select “Firefox Any Versions,” AsyncOS uses the following regular expression:
Firefox
 
Also, you can configure the policy group membership to either match the user agents you define, or 
matching all other user agents than the ones defined.
Exempting User Agents from Authentication
Step 1
Create an Identity policy group with membership that is based on the user agent to exempt.
Note
Do not require authentication for the Identity policy group.