Cisco Cisco Content Security Management Appliance M1070 Guida Utente
Chapter 4 Using Centralized Web Reporting
4-38
Cisco IronPort AsyncOS 7.2.0 for Security Management User Guide
OL-21768-01
If you wanted to go further, you can now get down to web tracking details by
clicking on Transactions Completed link in the interactive table. This brings up
the
clicking on Transactions Completed link in the interactive table. This brings up
the
where you can see the actual details about what dates the
user accessed the sites, the full URL, the time spent on that URL, etc.
To view another example of how the URL Categories page may be used, see
.
Custom URL Categories
The Security Management appliance, just like the Web Security appliance, ships
with many predefined URL categories by default, such as Web-based Reporting,
and more. However, you can also create user defined custom URL categories that
specify specific host names and IP addresses. You might want to create custom
URL categories for internal sites or a group of external sites you know you can
trust.
with many predefined URL categories by default, such as Web-based Reporting,
and more. However, you can also create user defined custom URL categories that
specify specific host names and IP addresses. You might want to create custom
URL categories for internal sites or a group of external sites you know you can
trust.
Note
The Security Management appliance uses the first four characters of custom URL
category names preceded by the letter “c_” in the access logs. Consider the
custom URL category name if you use Sawmill for Cisco IronPort to parse the
access logs. If the first four characters of the custom URL category include a
space, Sawmill for Cisco IronPort cannot properly parse the access log entry.
Instead, only use supported characters in the first four characters if you will use
Sawmill for Cisco IronPort to parse the access logs. If you want to include the full
name of a custom URL category in the access logs, add the %XF format specifier
to the access logs.
category names preceded by the letter “c_” in the access logs. Consider the
custom URL category name if you use Sawmill for Cisco IronPort to parse the
access logs. If the first four characters of the custom URL category include a
space, Sawmill for Cisco IronPort cannot properly parse the access log entry.
Instead, only use supported characters in the first four characters if you will use
Sawmill for Cisco IronPort to parse the access logs. If you want to include the full
name of a custom URL category in the access logs, add the %XF format specifier
to the access logs.
It is possible to create multiple custom URL categories and include the same URL
in each category. The order of the custom URL categories matters. Categories
listed higher in the list take priority over categories listed lower. When you
include these custom URL categories in the same Access, Decryption, or Cisco
IronPort Data Security Policy group and define different actions to each category,
the action of the higher included custom URL category takes effect.
in each category. The order of the custom URL categories matters. Categories
listed higher in the list take priority over categories listed lower. When you
include these custom URL categories in the same Access, Decryption, or Cisco
IronPort Data Security Policy group and define different actions to each category,
the action of the higher included custom URL category takes effect.
To create, edit, or delete a custom URL category:
Step 1
On the Security Management appliance window, choose Web > Configuration
Master 7.1 > Custom URL Categories.
Master 7.1 > Custom URL Categories.