Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi
7-13
Cisco IronPort AsyncOS 7.2.0 for Security Management User Guide
OL-21768-01
Chapter 7 Managing Web Security Appliances
Note
An appliance running 6.3 can be assigned to the 5.7 Configuration Master. The
versions do not need to be identical, but you cannot assign an appliance to a
Configuration Master that is newer than the version on the appliance.
versions do not need to be identical, but you cannot assign an appliance to a
Configuration Master that is newer than the version on the appliance.
Configuration Master Publish
After editing settings in a Configuration Master, you can publish them to the Web
Security appliances associated to the Configuration Master.
Security appliances associated to the Configuration Master.
You use Configuration Masters to edit the following Web Security appliance
configuration variables only: policies (including access, decryption, SaaS, L4
Traffic Manager, routing and identities), proxy bypass lists, outbound malware
scanning, time ranges, policy tags, URL tags, custom URL categories, FTP proxy
(Configuration Master 6.3 only), Cisco IronPort Data Security Filters
(Configuration Master 6.3 only), and external DLP servers (Configuration Master
6.3 only).
configuration variables only: policies (including access, decryption, SaaS, L4
Traffic Manager, routing and identities), proxy bypass lists, outbound malware
scanning, time ranges, policy tags, URL tags, custom URL categories, FTP proxy
(Configuration Master 6.3 only), Cisco IronPort Data Security Filters
(Configuration Master 6.3 only), and external DLP servers (Configuration Master
6.3 only).
You will not be able to use the Configuration Masters to edit other configuration
variables (for example: users, alerts, and log subscriptions).
variables (for example: users, alerts, and log subscriptions).
You publish a Configuration Master to overwrite existing policy information on
the Web Security appliances associated to that Configuration Master.
the Web Security appliances associated to that Configuration Master.
Note
Publishing External DLP policies from a Security Management appliance to
multiple Web Security appliances that are not configured for RSA servers is not
an issue. When you try to publish, the Security Management appliance, will send
the following publish status warning, “The Security Services display settings
configured for Configuration Master 7.1 do not currently reflect the state of
one or more Security Services on Web Appliances associated with this publish
request. The affected appliances are: “[WSA Appliance Name]”. This may
indicate a misconfiguration of the Security Services display settings for this
particular Configuration Master. Go to the Web Appliance Status page for
each appliance provides a detailed view to troubleshooting this issue. Do you
want to continue publishing the configuration now?”
multiple Web Security appliances that are not configured for RSA servers is not
an issue. When you try to publish, the Security Management appliance, will send
the following publish status warning, “The Security Services display settings
configured for Configuration Master 7.1 do not currently reflect the state of
one or more Security Services on Web Appliances associated with this publish
request. The affected appliances are: “[WSA Appliance Name]”. This may
indicate a misconfiguration of the Security Services display settings for this
particular Configuration Master. Go to the Web Appliance Status page for
each appliance provides a detailed view to troubleshooting this issue. Do you
want to continue publishing the configuration now?”
If you decide to continue to publish, the Web Security appliance that is not