Cisco Systems CL-28826-01 Configuring ScanSafe Web Security

20-2
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 20 Working with ScanSafe Web Security
Configuring ScanSafe Web Security
Security Manager does not support the following features:
•PAM configuration when inspect or ZBF rules for http/https are not present
•Auth-proxy using LDAP on older IOS versions. (That is, only IOS versions that support ScanSafe
Web S ecu rit y)
•Identity policy with auth-proxy as AAA method. (Support only for NTLM and http-basic.)
•Validation of Virtual Template number for identity policy creation
•Validation of the Secure Trust Point for LDAP server
•Inheritance of content scanning rules
•AD browsing of user groups and users
•Tool support for newer policies (such as policy query)
•Control tag policy
For more information on the ScanSafe Web Security product, go to
http://www.cisco.com/en/US/partner/products/ps11720/index.html.
Related Topics
•ScanSafe Web Security Page, page20-4
•ScanSafe Web Security Settings Page, page20-6
•Configuring ScanSafe Web Security, page 20-2
•Add and Edit Default User Groups Dialog Box, page 20-6
This chapter contains the following topics:
•Configuring ScanSafe Web Security, page 20-2
•ScanSafe Web Security Page, page20-4
•ScanSafe Web Security Settings Page, page20-6
Configuring ScanSafe Web Security
Use the ScanSafe Web Security Settings page to define the settings for the default user group. As with
other settings policies, you can share the default user group policy settings.
Related Topics
•ScanSafe Web Security Page, page20-4
•ScanSafe Web Security Settings Page, page20-6
•Chapter 20, “Working with ScanSafe Web Security”
•Add and Edit Default User Groups Dialog Box, page 20-6
•AAA Rules Page, page 15-10
Note All steps are shown as performed from the Policy view.