Cisco Cisco Content Security Management Appliance M680 Guia Do Utilizador

Web Reputation Filters use statistically significant data to assess the reliability of Internet domains and 
score the reputation of URLs. Data such as how long a specific domain has been registered, or where a 
web site is hosted, or whether a web server is using a dynamic IP address is used to judge the 
trustworthiness of a given URL. 

The web reputation calculation associates a URL with network parameters to determine the probability 
that malware exists. The aggregate probability that malware exists is then mapped to a Web Reputation 
Score between -10 and +10, with +10 being the least likely to contain malware. 

Example parameters include the following:

URL categorization data

Presence of downloadable code

Presence of long, obfuscated End-User License Agreements (EULAs)

Global volume and changes in volume

Network owner information

History of a URL

Age of a URL

Presence on any block lists

Presence on any allow lists

URL typos of popular domains

Domain registrar information

IP address information

For more information on Web Reputation Filtering, see ‘Web Reputation Filters’ in the online help or 
user guide for your Web Security appliance.

From the Web Reputation Filters page, you can view the following information:

A drop-down list that can range from a day to 90 days or a custom 
range. For more information on time ranges and customizing this 
for your needs, see the 

. 

This section, in graph format, displays the total number of web 
reputation actions (vertical) against the time specified (horizontal 
timeline). From this you can see potential trends over time for 
web reputation actions.

This section displays the web reputation action volume in 
percentages by transactions. 

This section displays the Web Reputation type that has been 
blocked.