Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi
9-2
AsyncOS 9.1 for Cisco Content Security Management Appliances User Guide
Chapter 9 Managing Web Security Appliances
Setting Up Configuration Masters to Centrally Manage Web Security Appliances
Setting Up Configuration Masters to Centrally Manage Web
Security Appliances
Security Appliances
To Configure
Do This
Features that appear under the Web Security Manager menu on the Web
Security appliance, such as policies and custom URL categories.
Security appliance, such as policies and custom URL categories.
Exception: L4 Traffic Monitor (L4TM) settings are not included in
Configuration Masters.
Configuration Masters.
The exact features supported depend on the configuration master
version, which corresponds to an AsyncOS for Web Security version.
version, which corresponds to an AsyncOS for Web Security version.
Publish a Configuration Master.
Many features that are configurable in a
Configuration Master also require configurations
directly on the Web Security appliance in order to
work. For example, SOCKS Policies are
configurable via Configuration Master, but a
SOCKS Proxy must first be configured directly on
the Web Security appliance.
Configuration Master also require configurations
directly on the Web Security appliance in order to
work. For example, SOCKS Policies are
configurable via Configuration Master, but a
SOCKS Proxy must first be configured directly on
the Web Security appliance.
Features related to managing the appliance, for example configuring log
subscriptions or alerts, or distributing administrative responsibilities.
subscriptions or alerts, or distributing administrative responsibilities.
Use Advanced File Publishing.
FIPS mode for Federal Information Processing Standard,
Network/interface settings, DNS, Web Cache Communication Protocol
(WCCP), upstream proxy groups, certificates, the proxy mode, time
settings such as NTP, L4 Traffic Monitor (L4TM) settings, and
authentication redirect hostname.
Network/interface settings, DNS, Web Cache Communication Protocol
(WCCP), upstream proxy groups, certificates, the proxy mode, time
settings such as NTP, L4 Traffic Monitor (L4TM) settings, and
authentication redirect hostname.
Configure settings directly on your managed Web
Security appliances.
Security appliances.
See the AsyncOS for Cisco Web Security
Appliances User Guide
Appliances User Guide
On This Appliance
Do This
More Information
—
Check for general configuration requirements
and caveats.
and caveats.
See
.
—
Determine the Configuration Master version to
use for each Web Security appliance.
use for each Web Security appliance.
See
.
Web Security appliance
(Optional) If you have a working Web Security
appliance that can serve as a configuration
model for all of your Web Security appliances,
you can use a configuration file from that Web
Security appliance to speed configuration of a
Configuration Master in the Security
Management appliance.
appliance that can serve as a configuration
model for all of your Web Security appliances,
you can use a configuration file from that Web
Security appliance to speed configuration of a
Configuration Master in the Security
Management appliance.
For instructions on downloading a
configuration file from a Web Security
appliance, see “Saving and Loading the
Appliance Configuration” in the AsyncOS for
Cisco Web Security Appliances User Guide.
configuration file from a Web Security
appliance, see “Saving and Loading the
Appliance Configuration” in the AsyncOS for
Cisco Web Security Appliances User Guide.
Security Management
appliance
appliance
Enable and configure Centralized
Configuration Management.
Configuration Management.
See
.
Security Management
appliance
appliance
Initialize the Configuration Masters.
See
Security Management
appliance
appliance
Associate Web Security appliances to the
Configuration Masters.
Configuration Masters.
See
Security Management
appliance
appliance
Import and/or manually configure policies,
custom URL categories, and/or a web proxy
bypass list in the Configuration Masters.
custom URL categories, and/or a web proxy
bypass list in the Configuration Masters.
See