Cisco Cisco Web Security Appliance S390 사용자 가이드

 describes the default Web Reputation Scores for Decryption Policies. 

 describes the default Web Reputation Scores for Cisco IronPort Data Security. 

The Web Security appliance anti-malware feature is a security component that uses the Cisco IronPort 
DVS™ engine in combination with multiple anti-malware scanning engines integrated on the appliance 
to identify and stop web-based malware threats, including zero-day threats. The DVS engine works with 
the Webroot™, McAfee, and Sophos anti-malware scanning engines.

For more information about the DVS engine, see 

To use the anti-malware component of the appliance, you must first enable anti-malware scanning and 
configure global settings, and then apply specific settings to different policies. For more information, 
see 

 and 

.

The Cisco IronPort Dynamic Vectoring and Streaming (DVS) engine inspects web traffic to provide 
protection against the widest variety of web-based malware ranging from commercially invasive adware 
applications, to malicious trojans, system monitors, and phishing attacks. 

-10 to -9.0

Drop

Bad site. The request is dropped with no notice sent to the end user. 

Use this setting with caution.

-8.9 to 5.9

Decrypt

Undetermined site. Request is allowed, but the connection is decrypted 
and Access Policies are applied to the decrypted traffic.

For more information about how the appliance decrypts HTTPS traffic, 
see 

.

6.0 to 10.0

Pass through

Good site. Request is passed through with no inspection or decryption.

-10 to -6.0

Block

Bad site. The transaction is blocked, and no further scanning occurs.

-5.9 to 0.0

Monitor

The transaction will not be blocked based on Web Reputation, and will 
proceed to content checks (file type and size). 

Sites with no score are monitored.