Cisco Cisco Content Security Management Appliance M160 사용자 가이드
4-63
Cisco IronPort AsyncOS 7.2.0 for Security Management User Guide
OL-21768-01
Chapter 4 Using Centralized Web Reporting
The web reputation calculation associates a URL with network parameters to
determine the probability that malware exists. The aggregate probability that
malware exists is then mapped to a Web Reputation Score between -10 and +10,
with +10 being the least likely to contain malware.
determine the probability that malware exists. The aggregate probability that
malware exists is then mapped to a Web Reputation Score between -10 and +10,
with +10 being the least likely to contain malware.
Example parameters include the following:
•
URL categorization data
•
Presence of downloadable code
•
Presence of long, obfuscated End-User License Agreements (EULAs)
•
Global volume and changes in volume
•
Network owner information
•
History of a URL
•
Age of a URL
•
Presence on any block lists
•
Presence on any allow lists
•
URL typos of popular domains
•
Domain registrar information
•
IP address information
For more information on Web Reputation Filtering, see ‘Web Reputation Filters’
in Cisco IronPort AsyncOS for Web User Guide.
in Cisco IronPort AsyncOS for Web User Guide.
To access the Web Reputation Filters page, perform the following:
Step 1
On the Security Management appliance window, choose Web > Reporting > Web
Reputation Filters.
Reputation Filters.
The Web Reputation Filters page appears.