Cisco Cisco Web Security Appliance S380 Guida Utente
7-6
Cisco IronPort AsyncOS 7.7 for Web User Guide
Chapter 7 Policies
Working with Policy Groups
Figure 7-1
Access Policies Table
shows the Decryption Policies table.
Figure 7-2
Decryption Policies Table
Any policy group that you create is added as a new row in the policies table. New policy groups inherit
global policy settings for each control setting until you override them. To edit policy groups, click the
links in each row.
global policy settings for each control setting until you override them. To edit policy groups, click the
links in each row.
When you create or configure a policy group, you define the following components:
•
Policy group membership. Define how to group users that belong to the policy group. For user
defined policy groups, you can group by different properties, such as client IP address,
authentication group or user name, or URL category. The properties you can define for a policy
depends on the policy type.
defined policy groups, you can group by different properties, such as client IP address,
authentication group or user name, or URL category. The properties you can define for a policy
depends on the policy type.
Click the policy group name to edit the group membership requirements, such as client IP address
and authentication requirements. A page is displayed where you can configure membership
requirements.
and authentication requirements. A page is displayed where you can configure membership
requirements.
Note
For global policies, you can only define the membership requirements for the global Identity
group and not for the global Access, Decryption, or Routing groups. Global Access, Decryption,
and Routing groups always match all Identities.
group and not for the global Access, Decryption, or Routing groups. Global Access, Decryption,
and Routing groups always match all Identities.
For more information about policy group membership, see
.
Click to customize policy
control settings.
control settings.
Click to edit user defined
policy group membership.
policy group membership.
Global policy group
(not editable).
(not editable).
Click to customize policy
control settings.
control settings.
Click to edit user defined policy
group membership.
group membership.
Global policy group
(not editable).
(not editable).