Cisco Cisco Web Security Appliance S660 Guida Utente

Pagina di 606
 
18-3
Cisco IronPort AsyncOS 7.7 for Web User Guide
 
Chapter 18      Understanding Application Visibility and Control
Understanding Application Control Settings
Step 4
In the Acceptable Use Controls Service area, select Cisco IronPort Web Usage Controls, and then select 
Enable Application Visibility and Control.
Step 5
Submit and commit your changes.
Understanding Application Control Settings
Controlling applications involves configuring the following elements:
  •
Application types. A category that contains one or more applications. For example, Instant 
Messaging is an application type that contains Google Talk and AOL Instant Messenger.
  •
Applications. Particular applications that belong in an application type. For example, YouTube is 
an application in the Media application type.
  •
Application behaviors. Particular actions or behaviors that users can do within an application that 
administrators can control. For example, users can transfer files while using an application, such as 
Yahoo Messenger. Not all applications include application behaviors you can configure.
You can configure application control settings in Access Policy groups. From the Web Security Manager 
> Access Policies page, click the Applications link for the policy group you want to configure. The 
Access Policies: Applications Visibility and Control: policyname page appears, or the “Applications 
Visibility and Control page” for short.
The Applications Visibility and Control page shows the current applications you can configure as 
determined by the current AVC engine signature. Regardless of the particular applications you can 
configure, the Applications Visibility and Control page offers the following views for configuring 
applications:
  •
Browse view. You can browse for application types. You might want to use Browse view to 
configure applications of a particular type at the same time. For more information, see 
  •
Search view. You can search for applications. You might want to use Search view when the total list 
of applications is long and you need to quickly find and configure a particular application. For more 
information, see 
You can configure most of the same control settings in both views. However, you can only configure the 
bandwidth control limits for application types in Browse view.
When configuration applications, you can choose the following actions:
  •
Block. This action is a final action. Users are prevented from viewing a webpage and instead an 
end-user notification page displays.
  •
Monitor. This action is an intermediary action. The Web Proxy continues comparing the transaction 
to the other control settings to determine which final action to apply. For more information, see 
.
  •
Restrict. This action indicates that an application behavior is blocked. For example, when you block 
file transfers for a particular instant messaging application, the action for that application is Restrict.
Working with Browse View
 shows the Applications Visibility and Control page in Browse view for a user defined Access 
Policy.