Cisco Cisco Web Security Appliance S660 Guida Utente
18-3
Cisco IronPort AsyncOS 7.7 for Web User Guide
Chapter 18 Understanding Application Visibility and Control
Understanding Application Control Settings
Step 4
In the Acceptable Use Controls Service area, select Cisco IronPort Web Usage Controls, and then select
Enable Application Visibility and Control.
Enable Application Visibility and Control.
Step 5
Submit and commit your changes.
Understanding Application Control Settings
Controlling applications involves configuring the following elements:
•
Application types. A category that contains one or more applications. For example, Instant
Messaging is an application type that contains Google Talk and AOL Instant Messenger.
Messaging is an application type that contains Google Talk and AOL Instant Messenger.
•
Applications. Particular applications that belong in an application type. For example, YouTube is
an application in the Media application type.
an application in the Media application type.
•
Application behaviors. Particular actions or behaviors that users can do within an application that
administrators can control. For example, users can transfer files while using an application, such as
Yahoo Messenger. Not all applications include application behaviors you can configure.
administrators can control. For example, users can transfer files while using an application, such as
Yahoo Messenger. Not all applications include application behaviors you can configure.
You can configure application control settings in Access Policy groups. From the Web Security Manager
> Access Policies page, click the Applications link for the policy group you want to configure. The
Access Policies: Applications Visibility and Control: policyname page appears, or the “Applications
Visibility and Control page” for short.
> Access Policies page, click the Applications link for the policy group you want to configure. The
Access Policies: Applications Visibility and Control: policyname page appears, or the “Applications
Visibility and Control page” for short.
The Applications Visibility and Control page shows the current applications you can configure as
determined by the current AVC engine signature. Regardless of the particular applications you can
configure, the Applications Visibility and Control page offers the following views for configuring
applications:
determined by the current AVC engine signature. Regardless of the particular applications you can
configure, the Applications Visibility and Control page offers the following views for configuring
applications:
•
Browse view. You can browse for application types. You might want to use Browse view to
configure applications of a particular type at the same time. For more information, see
configure applications of a particular type at the same time. For more information, see
•
Search view. You can search for applications. You might want to use Search view when the total list
of applications is long and you need to quickly find and configure a particular application. For more
information, see
of applications is long and you need to quickly find and configure a particular application. For more
information, see
You can configure most of the same control settings in both views. However, you can only configure the
bandwidth control limits for application types in Browse view.
bandwidth control limits for application types in Browse view.
When configuration applications, you can choose the following actions:
•
Block. This action is a final action. Users are prevented from viewing a webpage and instead an
end-user notification page displays.
end-user notification page displays.
•
Monitor. This action is an intermediary action. The Web Proxy continues comparing the transaction
to the other control settings to determine which final action to apply. For more information, see
to the other control settings to determine which final action to apply. For more information, see
.
•
Restrict. This action indicates that an application behavior is blocked. For example, when you block
file transfers for a particular instant messaging application, the action for that application is Restrict.
file transfers for a particular instant messaging application, the action for that application is Restrict.
Working with Browse View
shows the Applications Visibility and Control page in Browse view for a user defined Access
Policy.