Cisco Cisco Web Security Appliance S170 ユーザーガイド
13-5
AsyncOS 8.6 for Cisco Web Security Appliances User Guide
Chapter 13 File Reputation Filtering and File Analysis
Configuring File Reputation and Analysis Features
•
Communication with cloud services for file reputation and analysis occurs over IPv4.
•
The following firewall ports must be open:
•
When you configure the file reputation feature, choose whether to use SSL over port 443.
Related Topics
•
Routing Traffic to File Reputation and File Analysis Servers Through a Data Interface
If the appliance is configured to restrict the management port to appliance management services only
(on the Network > Interfaces page), configure the appliance to route file reputation and analysis traffic
through the data port instead.
(on the Network > Interfaces page), configure the appliance to route file reputation and analysis traffic
through the data port instead.
Add routes for data traffic on the Network > Routes page. For general requirements and instructions, see
Related Topics
•
Enabling and Configuring File Reputation and Analysis Services
Before You Begin
•
Acquire feature keys for the file reputation service and the file analysis service.
•
Meet the
.
Firewall
Ports Description
Ports Description
Protocol
In/Out
Hostname
Appliance
Interface
Interface
32137
(default
) or 443
(default
) or 443
Access to cloud services
for obtaining file
reputation.
for obtaining file
reputation.
TCP
Out
As configured in Security Services >
Anti-Malware and Reputation, Advanced
section, Cloud Server Pool parameter.
Anti-Malware and Reputation, Advanced
section, Cloud Server Pool parameter.
Management,
unless a static
route is
configured to
route this
traffic through
a data port.
unless a static
route is
configured to
route this
traffic through
a data port.
443
Access to cloud services
for file analysis.
for file analysis.
TCP
Out
As configured in Security Services >
Anti-Malware and Reputation, Advanced
section.
Anti-Malware and Reputation, Advanced
section.
For Connection To
Destination Network
Gateway
The file reputation service IP addresses of the Cloud Server Pool, as
configured in Security Services >
Anti-Malware and Reputation, Advanced
section.
Anti-Malware and Reputation, Advanced
section.
IP address of the gateway for
the data port
the data port
The file analysis service
IP address of the File Analysis Server, as
configured in Security Services >
Anti-Malware and Reputation, Advanced
section.
configured in Security Services >
Anti-Malware and Reputation, Advanced
section.
IP address of the gateway for
the data port
the data port