Cisco Cisco Web Security Appliance S170 사용자 가이드

다운로드
페이지 734
 
6-35
Cisco IronPort AsyncOS 7.5.7 for Web User Guide
 
Chapter 6      Web Proxy Services
Advanced Proxy Configuration
Scanning Options
 describes the scanning options for the 
advancedproxyconfig
 CLI command. The scanning 
options can be edited only when Adaptive Scanning is disabled. 
Miscellaneous Options
 describes the miscellaneous options for the 
advancedproxyconfig
 CLI command.
Table 6-11
advancedproxyconfig CLI Command—Scanning Options 
Option
Valid 
Values
Default 
Value
Web Proxy 
Must Restart
Description
Would you like the proxy 
to do malware scanning 
all content regardless of 
content type? Note that 
this will have serious 
performance impact and 
is not recommended.
Yes, No
(Boolean)
No
No
Choose whether or not the DVS 
engine should scan all response 
content regardless of the content 
type.
Note
Enabling this setting results 
in a significant performance 
impact for the Web Proxy.
Table 6-12
advancedproxyconfig CLI Command—Miscellaneous Options 
Option
Valid 
Values
Default 
Value
Web Proxy 
Must Restart
Description
Would you like proxy to 
respond to health checks 
from Layer 4 switches 
(always enabled if WSA 
is in L4 transparent 
mode)?
Yes, No
(Boolean)
No
Yes
Disable/Enable support for 
responding to health checks from 
Layer 4 switches (always enabled if 
WSA is in L4 transparent mode). 
Layer 4 switches issue ‘HEAD / 
HTTP/1.0’ requests directed at the 
proxy to ensure that it is responding.
Would you like proxy to 
perform dynamic 
adjustment of TCP 
receive window size?
Yes, No
(Boolean)
Yes
Yes
Disable/Enable dynamic adjustment 
of TCP receive window size.
Enable caching of 
HTTPS responses?
Yes, No
(Boolean)
No
No
Choose whether or not the Web 
Security appliance should store 
HTTPS responses in the web cache.
Enter minimum idle 
timeout for checking 
unresponsive upstream 
proxy (in seconds).
Time in 
seconds
10
No
The minimum amount of time the 
Web Proxy waits before checking if 
an upstream proxy is still 
unavailable. 
Enter maximum idle 
timeout for checking 
unresponsive upstream 
proxy (in seconds).
Time in 
seconds
86400
No
The maximum amount of time the 
Web Proxy waits before checking if 
an upstream proxy is still 
unavailable.