Cisco Cisco Web Security Appliance S380 Guida Utente

Pagina di 606
 
7-6
Cisco IronPort AsyncOS 7.7 for Web User Guide
Chapter 7      Policies
Working with Policy Groups
Figure 7-1
Access Policies Table
 shows the Decryption Policies table.
Figure 7-2
Decryption Policies Table
Any policy group that you create is added as a new row in the policies table. New policy groups inherit 
global policy settings for each control setting until you override them. To edit policy groups, click the 
links in each row. 
When you create or configure a policy group, you define the following components:
  •
Policy group membership. Define how to group users that belong to the policy group. For user 
defined policy groups, you can group by different properties, such as client IP address, 
authentication group or user name, or URL category. The properties you can define for a policy 
depends on the policy type.
Click the policy group name to edit the group membership requirements, such as client IP address 
and authentication requirements. A page is displayed where you can configure membership 
requirements.
Note
For global policies, you can only define the membership requirements for the global Identity 
group and not for the global Access, Decryption, or Routing groups. Global Access, Decryption, 
and Routing groups always match all Identities.
For more information about policy group membership, see 
.
Click to customize policy 
control settings.
Click to edit user defined 
policy group membership.
Global policy group 
(not editable).
Click to customize policy 
control settings.
Click to edit user defined policy 
group membership.
Global policy group 
(not editable).