Руководство Пользователя для Cisco Cisco Web Security Appliance S170

Скачать
Страница из 478
 
9-13
AsyncOS 9.0.1 for Cisco Web Security Appliances User Guide
 
Chapter 9      Classify URLs for Policy Application
  Creating and Editing Custom URL Categories
Step 5
In the Predefined URL Category Filtering section, choose one of the following actions for each category:
Use Global Settings
Monitor
Block
Step 6
In the Uncategorized URLs section, choose the action to take for upload requests to web sites that do not 
fall into a predefined or custom URL category. This setting also determines the default action for new 
and merged categories resulting from URL category set updates. 
Step 7
Submit and Commit Changes.
Creating and Editing Custom URL Categories
You can also create user defined custom URL categories that specify specific hostnames and IP 
addresses. In addition, you can edit and delete existing URL categories. When you include these custom 
URL categories in the same Access, Decryption, or Cisco Data Security Policy group and define 
different actions to each category, the action of the higher included custom URL category takes effect. 
Note
The Web Security appliance uses the first four characters of custom URL category names preceded by 
“c_” in the access logs. Consider the custom URL category name if you use Sawmill for to parse the 
access logs. If the first four characters of the custom URL category include a space, Sawmill for cannot 
properly parse the access log entry. Instead, only use supported characters in the first four characters if 
you will use Sawmill for to parse the access logs. If you want to include the full name of a custom URL 
category in the access logs, add the %XF format specifier to the access logs. 
Step 1
Choose Web Security Manager > Custom URL Categories.
Step 2
To create a custom URL category, click Add Custom Category. To edit an existing custom URL 
category, click the name of the URL category.
Monitor
The Web Proxy neither allows nor blocks the request. Instead, it continues to 
evaluate the upload request against other policy group control settings, such as web 
reputation filtering.
Block
The Web Proxy denies transactions that match this setting.
Action
Description