Cisco Cisco Web Security Appliance S170 사용자 가이드
18-1
Cisco IronPort AsyncOS 7.7.5 for Web User Guide
Chapter 18 Understanding Application Visibility and Control
Controlling Applications Overview
18
Understanding Application Visibility and Control
•
•
•
•
•
Controlling Applications Overview
The Web has become the ubiquitous platform for application delivery in the enterprise, whether that is
browser based application platforms like Salesforce.com and Google Apps, or rich media applications
like Cisco WebEx using web protocols as a widely available transport in and out of enterprise networks.
browser based application platforms like Salesforce.com and Google Apps, or rich media applications
like Cisco WebEx using web protocols as a widely available transport in and out of enterprise networks.
Cisco IronPort Web Usage Controls includes the Application Visibility and Control engine (AVC
engine) which enables administrators to apply deeper controls to particular application types. The AVC
engine is an acceptable use policy component that inspects web traffic to gain deeper understanding and
control of web traffic used for applications. Application control gives you more granular control over
web traffic than just URL filtering, for example.
engine) which enables administrators to apply deeper controls to particular application types. The AVC
engine is an acceptable use policy component that inspects web traffic to gain deeper understanding and
control of web traffic used for applications. Application control gives you more granular control over
web traffic than just URL filtering, for example.
The AVC engine allows you to create policies to control application activity on the network without
having to fully understand the underlying technology of each application.
having to fully understand the underlying technology of each application.
Application control gives you visibility and control over the following types of applications:
•
Evasive applications, such as anonymizers and encrypted tunnels.
•
Collaboration applications, such as Cisco Webex and instant messaging.
•
Resource intensive applications, such as streaming media.
To control applications using the AVC engine, perform the following steps:
1.
Enable the AVC engine. For more information, see
.
2.
Define application control settings in the Access Policies. For more information, see
.
Using the AVC engine, you can block or allow applications by application type or a particular
application. You can also apply deeper controls to particular application types. For example, you can
perform the following tasks:
application. You can also apply deeper controls to particular application types. For example, you can
perform the following tasks:
•
Limit bandwidth consumed by some application types to control congestion. For more
information, see
information, see
•
Allow instant messaging traffic, but disallow file sharing using instant messenger. For more
information, see
information, see
•
Enforce safe search on search engines and user generated content sites. For more information,
see
see