Siemens SCALANCE W1750D UI, Руководство по настройке

Страница: 372 / 570

Deep Packet Inspection and Application Visibility
22.6 Configuring Web Policy Enforcement Service
SCALANCE W1750D UI
372
Configuration Manual, 02/2018, C79000-G8976-C451-02
5. To filter access based on the security ratings of the website
Select Web reputation under Service.
Move the slider to the required security rating level. Move the slider to select a specific
web reputation value to deny access to websites with a reputation value lower than or
equal to the configured value or to permit access to websites with a reputation value
higher than or equal to the configured value. The following options are available:
–
Trustworthy—These are well known sites with strong security practices and may not
expose the user to security risks. There is a very low probability that the user will be
exposed to malicious links or payloads.
– Low risk—These are benign sites and may not expose the user to security risks.
There is a low probability that the user will be exposed to malicious links or payloads.
– Moderate risk—These are generally benign sites, but may pose a security risk. There
is some probability that the user will be exposed to malicious links or payloads.
– Suspicious—These are suspicious sites. There is a higher than average probability
that the user will be exposed to malicious links or payloads.
– High risk—These are high-risk sites. There is a high probability that the user will be
exposed to malicious links or payloads.
From the Action drop-down list, select Allow or Deny as required.
Note
For a complete list of categories and information about each of these categories, visit the
BrightCloud® Security Services web page at http://www.brightcloud.com/tools/change-
request-url-ip.php.
6. To set a bandwidth limit based on web category or web reputation score, select
Application Throttling check box and specify the downstream and upstream rates in Kbps.
For example, you can set a higher bandwidth for trusted sites and a low bandwidth rate
for high-risk sites.
7. If required, select the following check boxes:
–
Log
– Blacklist
– Disable scanning
– DSCP tag
– 802.1p priority
8. Click OK on the Roles tab to save the changes to the role for which you defined ACL
rules.