Cisco Cisco Web Security Appliance S170 사용자 가이드

다운로드
페이지 606
 
17-17
Cisco IronPort AsyncOS 7.7 for Web User Guide
 
Chapter 17      URL Filters
Filtering Adult Content
Step 5
Submit and commit your changes.
Filtering Adult Content
You can configure the Web Security appliance to filter adult content from some web searches and 
websites. You might want to do this to allow access to these sites, such as google.com and youtube.com, 
while still restricting potentially unsafe content from reaching users. For example, a school district could 
allow access to educational videos on youtube.com, but block inappropriate content for students. 
AsyncOS for Web offers the following features to filter adult content:
  •
Enforce safe searches. Many search engines support a filtering technology feature that classifies 
inappropriate content on the web as adult. When this filtering feature is enabled, content classified 
as adult is filtered from the search results before presented to the user. This feature is commonly 
called safe search. However, for most search engines, this feature is enabled and disabled by end 
users. You can configure the Web Security appliance so that outgoing search requests appear to 
search engines as safe search requests. This gives the control to an administrator on the network 
instead of the end user. You might want to do this to prevent users from bypassing acceptable use 
policies using search engines.
  •
Enforce site content ratings. Many content sharing sites that serve user-generated photos and 
videos classify some of their content as adult.They allow users to restrict their own access to the 
adult content on these sites by either enforcing their own safe search feature or blocking access to 
adult content, or both. This classification feature is commonly called content ratings.
You enforce safe searches and site content ratings for different users by enabling the feature at the Access 
Policy level. Not all search engines or content sharing websites are supported, but AsyncOS for Web can 
support additional search engines and websites during URL filtering engine updates. The Access 
Policies > URL Filtering > policyname page always lists the currently supported search engines and 
websites for each feature. The list of supported search engines and content sharing websites may 
increase with AVC engine updates.
Consider the following rules and guidelines when enforcing safe search and site content ratings:
  •
To use the safe search and site content ratings features, AsyncOS for Web must use the URL filtering 
engine included with Cisco IronPort Web Usage Controls.
  •
The safe search feature enforces strict safe searches. 
  •
To enforce safe search and site content ratings, the AVC engine takes advantage of the safe mode 
feature implemented at a particular website by rewriting URLs and/or web cookies to force the 
safety mode to be on. Therefore, the user experience is determined by the site’s functionality. 
However, in cases where a website does not offer any safe mode functionality, such as craigslist.org, 
the AVC engine identifies known unsafe sections of the website and blocks or warns about the sites 
as appropriate. 
  •
When the URL of one of the supported search engines or supported content ratings websites is 
included in a custom URL category with the Allow action applied, then users can access that URL 
as if the safe search or content ratings features were disabled. That is, no search results are blocked 
and all content is visible.
  •
You can choose whether or not to block users from search engines that are not currently supported 
by the Web Security appliance safe search feature.
  •
Due to the limitations inherent in youtube.com, the Web Proxy is not able to block embedded 
YouTube videos from a third party website.