Cisco Cisco Web Security Appliance S170 ユーザーガイド

This chapter contains the following information:

AsyncOS for Web allows administrators to control user access based on the web server category of a 
particular HTTP or HTTPS request. For example, you can block all HTTP requests for gambling web 
sites, or you can decrypt all HTTPS requests for web-based email websites.

Using policy groups, you can create secure policies that control access to web sites containing 
objectionable or questionable content. The sites that are actually blocked, dropped, allowed, or 
decrypted depend on the categories you select when setting up category blocking for each policy group.

To control user access based on a URL category, you must enable Cisco IronPort Web Usage Controls. 
This is a multi-layered URL filtering engine that uses domain prefixes and keyword analysis to 
categorize URLs, and real-time response content analysis using the Dynamic Content Analysis engine 
if no category is determined by prefixes and keywords. It includes over 80 predefined URL categories. 
This engine also allows end users and administrators to report to Cisco any miscategorized URLs as well 
as uncategorized URLs for future inclusion in the categorization database. For more information, see 

.

You can use URL categories when performing the following tasks: