Security Services
Activating Security Services
Cisco ISA500 Series Integrated Security Appliances Administration Guide 293
7
Anti-Virus, Application Control, and IPS are signature-based security services. You
must update the signatures frequently to ensure that these security services can
give you the best protection.
Spam Filter, Network Reputation, Web Reputation Filtering, and Web URL Filtering
are reputation-based security services. They obtain the security data from the
SecApps servers and determine which traffic is allowed or blocked. Make sure
that the SecApps servers are online after you enable these security services,
otherwise they will not be available.
Activating Security Ser vices
The security services are licensable. You must install a valid security license on
the security appliance to activate security services. A valid security license is also
required for support of SSLVPN with mobile devices such as smart phones and
tablets.The Product Authorization Key (PAK) is required to validate the security
license. You can find the license code from the Software License Claim Certificate
that Cisco provides upon purchase of the security appliance.
Make sure that the security license is installed and does not expire before you
configure security services. Go to the Device Management > License
Management page to validate the security license or to renew the security license
before it expire s. See Installing or Renewing Security License, page 441.
Priority of Security Services
Multiple security services can work simultaneously to protect your network. Web
Reputation Filtering has a higher priority than Web URL Filtering. You can add the
website exceptions in the website access control list when you configure a Web
URL Filtering policy profile. The website exceptions can override the profile’s URL
category settings, but cannot override the Web Reputation Filtering settings.
For example, a website as an exception is allowed to access by Web URL Filtering,
but it has reputation score lower than the web reputation threshold specified in
Web Reputation Filtering. Web Reputation Filtering will block access to this
website even if it is an exception in the website access control list, unless you
change the web reputation threshold.