Cisco Cisco Web Security Appliance S170 Guida Utente

Pagina di 734
 
11-3
Cisco IronPort AsyncOS 7.5.7 for Web User Guide
 
Chapter 11      Working with External Proxies
Evaluating Routing Policy Group Membership
Note
You can only specify one existing proxy during the System Setup Wizard. AsyncOS creates a proxy 
group with one proxy using the information you enter in the System Setup Wizard. You can specify 
additional proxies in the web interface after initial setup.
To create a proxy group:
Step 1
Navigate to Network > Upstream Proxies, and click Add Group.
The Add Upstream Proxy Group page appears.
Step 2
Enter a name for the proxy group in the Name field.
Step 3
In the Proxy Servers section, define at least one external proxy.
a.
In the Proxy Address field, enter the hostname or IP address of the proxy server.
b.
In the Port field, enter the port number used to access the proxy.
c.
In the Reconnection Attempts field, enter the number of times the Web Proxy should try to connect 
to the proxy server before ignoring it.
d.
Optionally, you can define another proxy server by clicking Add Row.
Step 4
In the Load Balancing field, choose the method the Web Proxy should use to distribute transactions to 
the proxies when the group contains multiple proxies.
For more information about the load balancing options, see 
.
Step 5
In the Failure Handling field, choose how the Web Proxy should handle transactions when all proxies in 
the group fail.
Step 6
Submit and commit your changes.
Evaluating Routing Policy Group Membership
After the Web Proxy assigns an Identity to a client request, it evaluates the request against the other 
policy types to determine which policy group it belongs for each type. Any request that does not get 
terminated due to failed authentication gets evaluated against the Routing Policies to determine from 
where to fetch the data.
Once the Web Proxy assigns a Routing Policy group to a request, it fetches the content from the location 
configured for the policy group, either from a configured proxy group or directly from the server.