Cisco Cisco Web Security Appliance S690 Guida Utente

Pagina di 455
 
17-11
AsyncOS 8.7 for Cisco Web Security Appliances User Guide
 
Chapter 17      Notify End-Users of Proxy Actions
  End-User Acknowledgment Page
Configuring the End-User Acknowledgment Page
You can enable and configure the end-user acknowledgment page in the web interface or the command 
line interface. When you configure the end-user acknowledgment page in the web interface, you can 
include a custom message that appears on each page.
In the CLI, use 
advancedproxyconfig > eun
.
Step 1
Security Services > End-User Notification.
Step 2
Click Edit Settings.
Step 3
Enable the “Require end-user to click through acknowledgment page” field. 
Step 4
In the Time Between Acknowledgments field, enter the time interval the appliance uses between 
displaying the end-user acknowledgment page.
Surrogate Type
Determines which method the Web Proxy uses to track the user:
IP Address. The Web Proxy allows the user at that IP address to use any 
web browser or non-browser HTTP process to access the web once the user 
clicks the link on the end-user acknowledgment page. Tracking the user by 
IP address allows the user to access the web until the Web Proxy displays a 
new end-user acknowledgment page due to inactivity or the configured time 
interval for new acknowledgments. Unlike tracking by a session cookie, 
tracking by IP address allows the user to open up multiple web browser 
applications and not have to agree to the end-user acknowledgment unless 
the configured time interval has expired.
Note
When IP address is configured and the user is authenticated, the Web 
Proxy tracks users by username instead of IP address.
Session Cookie. The Web Proxy sends the user’s web browser a cookie 
when the user clicks the link on the end-user acknowledgment page and 
uses the cookie to track their session. Users can continue to access the web 
using their web browser until the Time Between Acknowledgments value 
expires, they have been inactive longer than the allotted time, or they close 
their web browser.
If the user using a non-browser HTTP client application, they must be able 
to click the link on the end-user acknowledgment page to access the web. If 
the user opens a second web browser application, the user must go through 
the end-user acknowledgment process again in order for the Web Proxy to 
send a session cookie to the second web browser.
Note
Using a session cookie to track users when the client accesses HTTPS 
sites or FTP servers using FTP over HTTP is not supported. 
Custom message
Customize the text that appears on every end-user acknowledgment page. You 
can include some simple HTML tags to format the text. 
Note
You can only include a custom message when you configure the 
end-user acknowledgment page in the web interface, versus the CLI.
Setting
Description