Cisco Cisco Web Security Appliance S170 Guida Utente

Pagina di 455
 
13-13
AsyncOS 8.7 for Cisco Web Security Appliances User Guide
 
Chapter 13      Configuring Security Services
  Configuring Anti-Malware and Reputation in Policies
Step 3
Under the Web Reputation and Anti-Malware Settings section, choose Define Web Reputation and 
Anti-Malware Custom Settings
.
This allows you to configure web reputation and anti-malware settings for this Access Policy that differ 
from the global policy.
Step 4
Verify the Enable Web Reputation Filtering field is enabled.
Step 5
Move the markers to change the range for URL block, scan, and allow actions.
Step 6
Submit and Commit Changes.
Note
You can edit the web reputation score thresholds in Access Policies when Adaptive Scanning is disabled
Configuring Web Reputation Filter Settings for Decryption Policy Groups
Step 1
Choose Web Security Manager > Decryption Policies.
Step 2
Click the link under the Web Reputation column for the Decryption Policy group you want to edit.
Step 3
Under the Web Reputation Settings section, choose Define Web Reputation Custom Settings. This 
allows you to override the web reputation settings from the Global Policy Group.
Step 4
Verify the Enable Web Reputation Filtering field is checked.
Step 5
Move the markers to change the range for URL drop, decrypt, and pass through actions.
Step 6
In the Sites with No Score field, choose the action to take on request for sites that have no assigned Web 
Reputation Score.
Step 7
Submit and Commit Changes.
Configuring Web Reputation Filter Settings for Data Security Policy Groups
Step 1
Choose Web Security Manager > Cisco IronPort Data Security.
Step 2
Click the link under the Web Reputation column for the Data Security Policy group you want to edit.
Step 3
Under the Web Reputation Settings section, choose Define Web Reputation Custom Settings
This allows you to override the web reputation settings from the Global Policy Group.
Step 4
Move the marker to change the range for URL block and monitor actions.
Step 5
Submit and Commit Changes.
Note
Only negative and zero values can be configured for web reputation threshold settings for Cisco IronPort 
Data Security Policies. By definition, all positive scores are monitored