Cisco Cisco Web Security Appliance S660 Guida Utente

Pagina di 582
274
I R O N P O R T   A S Y N C O S   6 . 3   F O R   W E B   U S E R   G U I D E  
3. In the Custom URL Category Filtering section, choose an action for each custom URL 
category. Table 13-1 describes each action.
Table 13-1 URL Category Filtering for Access Policies
Action
Description
Include
(Exclude)
Choose whether or not the URL filtering engine should compare the 
client request against the custom URL category. The URL filtering engine 
compares client requests against included custom URL categories, and 
ignores excluded custom URL categories.
The URL filtering engine compares the URL in a client request to 
included
 custom URL categories before predefined URL categories. 
However, by default, custom URL categories are excluded from 
evaluation. You can override this behavior by clicking the Include link for 
a custom URL category.
Once you click the Include link, it changes to an Exclude link to allow 
you to exclude the category in the policy again.
When a custom URL category is excluded in the global Access Policy, 
then the default action for included custom URL categories in user 
defined Access Policies is Monitor instead of Use Global Settings. You 
cannot choose Use Global Settings when a custom URL category is 
excluded in the global Access Policy. 
Note: You must include a custom URL category before you can choose 
an action, such as block, to assign to it.
Use Global Setting
Uses the action for this category in the Global Policy Group. This is the 
default action for user defined policy groups.
Applies to user defined policy groups only.
Redirect
Redirects traffic originally destined for a URL in this category to a 
location you specify. When you choose this action, the Redirect To field 
appears. Enter a URL to which to redirect all traffic.
For more information about redirecting traffic, see “Redirecting Traffic” 
on page 284.
Allow 
Always allows client requests for web sites in this category. 
Allowed requests bypass all further filtering and malware scanning.
Only use this setting for trusted web sites. You might want to use this 
setting for internal sites. 
Monitor
The Web Proxy neither allows nor blocks the request. Instead, it 
continues to evaluate the client request against other policy group control 
settings, such as web reputation filtering.