Defining Web Policies > Web Content & Security tab
|
|
Real-Time Content Classification returns a category for URLs that have not already been blocked by the active policy, and:
|
|
Real-Time Security Classification analyzes web pages in real time to discover security threats and malicious code in HTTP. You can enable advanced analysis for one of the following:
|
|
Antivirus File Analysis - Inbound analyzes files using traditional antivirus (AV) definitions to find virus-infected files that users are attempting to download.
|
|
Advanced Detection File Analysis - Inbound analyzes files using advanced detection techniques to discover malicious content, such as viruses, Trojan horses, and worms, returning a threat category for policy enforcement.
|
|
Rich Internet Application Analysis is applied to active content like Flash and Silverlight to detect and block malicious content.
|
|
Antivirus and Advanced Detection File Analysis - Outbound parallels the inbound file analysis applied by the Antivirus File Analysis and Advanced Detection File Analysis.
|
|
Bot and Spyware "phone home" Traffic Analysis detects phone-home communication attempts from malware in your network and ensures that they are categorized and blocked.
|
1.
|
To enable content security, select Real-Time Content Classification.
|
2.
|
Select Analyze links embedded in Web content to include embedded link analysis in content categorization. Requests that are blocked as a result of link analysis are logged and can be viewed in Analysis Activity reports.
|
3.
|
To enable security analysis, select Real-Time Security Classification.
|
|
Select Analyze content from sites with elevated risk profiles to enable file analysis on files from uncategorized sites and files from sites with elevated risk profiles, as identified by Security Labs.
|
|
Select Analyze content from sites with elevated risk profiles and from sites with lower risk profiles to analyze inbound files. This option is resource intensive.
|
4.
|
Select Antivirus File Analysis - Inbound to enable file analysis with antivirus definitions.
|
|
Select Analyze content from sites with elevated risk profiles to enable file analysis on files from uncategorized sites and files from sites with elevated risk profiles, as identified by Security Labs.
|
|
Select Analyze content from sites with elevated risk profiles and from sites with lower risk profiles to analyze inbound files. This option is resource intensive.
|
5.
|
|
Select Analyze content from sites with elevated risk profiles to enable file analysis on files from uncategorized sites and files from sites with elevated risk profiles, as identified by Security Labs.
|
|
Select Analyze content from sites with elevated risk profiles and from sites with lower risk profiles to analyze inbound files. This option is resource intensive.
|
6.
|
Select Rich Internet Application analysis to analyze Flash, Silverlight, and similar files for malicious content.
|
7.
|
Click Save.
|
Defining Web Policies > Web Content & Security tab
|