Cisco Cisco Web Security Appliance S170 사용자 가이드
310
I R O N P O R T A S Y N C O S 6 . 3 F O R W E B U S E R G U I D E
WE B R E P U T A T I O N F I L T E R S O V E R V I E W
IronPort Web Reputation Filters is a security feature that analyzes web server behavior and
assigns a reputation score to a URL to determine the likelihood that it contains URL-based
malware. It helps protect against URL-based malware that threatens end-user privacy and
sensitive corporate information. The Web Security appliance uses URL reputation scores to
identify suspicious activity and stop malware attacks before they occur.
assigns a reputation score to a URL to determine the likelihood that it contains URL-based
malware. It helps protect against URL-based malware that threatens end-user privacy and
sensitive corporate information. The Web Security appliance uses URL reputation scores to
identify suspicious activity and stop malware attacks before they occur.
You can use Web Reputation Filters with both Access and Decryption Policies.
The Web Reputation Database
The Web Security appliance collects information and maintains a filtering database that
contains aggregated traffic statistics, request attributes, and information about how different
types of requests are handled. Additionally, the appliance can be configured to send web
reputation statistics to a SenderBase server. SenderBase server information is leveraged with
data feeds from the IronPort Common Security Database (SenderBase® Network) and the
collective information is used to produce a Web Reputation Score.
contains aggregated traffic statistics, request attributes, and information about how different
types of requests are handled. Additionally, the appliance can be configured to send web
reputation statistics to a SenderBase server. SenderBase server information is leveraged with
data feeds from the IronPort Common Security Database (SenderBase® Network) and the
collective information is used to produce a Web Reputation Score.
Note — For more information, see “The SenderBase Network” on page 16.
Maintaining the Database Tables
The web reputation filtering component periodically receives updates to its database tables
from the IronPort update server (
from the IronPort update server (
https://update-manifests.ironport.com
). Server
updates are automated, and the update interval is set by the server as opposed to the
appliance. Updates to the database tables occur with a regular degree of frequency, and
require no administrator intervention.
appliance. Updates to the database tables occur with a regular degree of frequency, and
require no administrator intervention.
For information about update intervals and the IronPort update server, see “Manually
Updating Security Service Components” on page 525.
Updating Security Service Components” on page 525.