Security Services
Managing the Security Services
Cisco ISA500 Series Integrated Security Appliance Administrator Guide
211
7
About the Security Services
The security services activated by the security license are listed in the following
table.
Security Services
Description
Intrusion
Prevention System
The Intrusion Prevention System (IPS) service can protect
the zones for a given set of categories. IPS monitors
network traffic for malicious or unwanted behaviors on
the security appliance and can react, in real-time, to block
or prevent those activities. For more information, see
Intrusion Prevention Service, page 214
Anti-Virus
The Anti-Virus service prevents network threats over a
multitude of protocols including HTTP, FTP, POP3, SMTP,
CIFS, NETBIOS, and IMAP. For more information, see
Email Reputation
Filter
The Email Reputation Filter service detects the email
sender’s reputation score. If the reputation score is below
a threshold, then the email is blocked or tagged as SPAM
or SUSPECT SPAM. For more information, see
Web URL Filter
The Web URL Filter service provides protection against
URL categories. For more information, see
Web Reputation
Filter
The Web Reputation Filter service detects threats based
on a web page’s reputation score. Web pages with
reputation scores below a specific threshold are
considered threats and blocked. For more information,
see
Web Reputation Filter, page 230
Network
Reputation
The Network Reputation service checks the source and
destination address of each packet against the address
blacklist to determine whether to proceed or drop the
packet. For more information, see
