Cisco PIX 520 - PIX Firewall 520, Онлайн руководство пользователя

Страница: 194 / 256

TCP1 and TCP4, which are TCP-based, and UDP4, which is UDP-based. Version 4 of these
protocols provides functionality beyond version 1. Specifically, when PIX AAA filtering is enabled
to perform user authentication, the username information is passed to the Websense server so that it
may perform URL filtering and log URL activity by username.
Note: The table shows the servers in prioritized order. The server at the top of the list will be
the only one used unless it fails. If the first server fails, the PIX Firewall will go down the list
until it finds an active server.
Insert Before—Opens the Add parameters for URL Filtering dialog box when an existing table row is
selected, so you can add a new server above the selected one.
●
Insert After—Opens the Add parameters for URL Filtering dialog box when an existing table row is
selected, so you can add a new server below the selected one.
●
Add—Opens the Add parameters for URL Filtering dialog box, where you can configure up to 16 URL
servers.
●
Edit—Opens the Edit parameters for URL Filtering dialog box when an existing table row is selected,
so you can edit the selected URL server.
●
Delete—Deletes the selected URL server.
●
URL Cache
Note: Access to the URL cache does not update the Websense accounting logs. Before using this feature,
let Websense run to accumulate logs to let you view Websense accounting information. After you get a
usage profile that meets your security needs, enable this feature to increase throughput.
Enable caching—Select this check box to improve throughput by caching responses to URL
filtering requests sent to the Websense URL server.
❍
Base cache entries on—Click Destination Address if all users share the same URL filtering policy
on the Websense server. Click Source/Destination Address if users do not share the same URL
filtering policy on the Websense server.
❍
Size of cache—Enter a value for the cache size within the range 1 to 128 kilobytes. The default is 1
KB.
❍
●
Apply to PIX—Applies changes you have made to the PIX Firewall.
●
Reset—Discards any changes without applying them.
●
Adding a Websense URL Server
Follow these steps to add a URL server:
In the URL Filtering panel, click one of the following buttons:
Add if there are no entries in the table.
❍
Insert Before if you want to insert a URL server before an existing one.
❍
Insert After if you want to insert a URL server after an existing one.
❍
The Add parameters for URL Filtering dialog box appears.
1.
Configure the server as desired and click OK. 2.
Click Apply to PIX. 3.