User's Manual

Security Services
Network Reputation
Cisco ISA500 Series Integrated Security Appliance Administrator Guide 231
7
STEP 2 Enter the folllowing information:
• Enable Web Threat Filter: Click On to enable the Web Reputation Filter
feature, or click Off to disable it.
• Choose Reputation Threshold: If you enable the Web Reputation Filter
feature, specify the block sensitivity as either Conservative, Moderate, or
Aggressive, or as a numerical threshold (Custom). The threshold values for
Conservative, Moderate, or Aggressive option are predefined and
uneditable. If you want to customize a threshold value, click Custom and
choose the threshold value from the drop-down list. The available values for
the threshold are integers from -10 to -1 and the value -0.5.
STEP 3 Specify one of the following actions if the Web Reputation Filter services are
unavailable:
• Block all web traffic until the web reputation filter services are restored:
If you choose this option, all web traffic will be blocked until the Web
Reputation Filter services are restored, and the default blocked page will
used. The default blocked page displays a message to remind the user. You
can edit the message in the Block Message field.
• Allow all web traffic until the web reputation filter services are restored:
If you choose this option, all web traffic will be allowed until the Web
Reputation Filter services are restored.
STEP 4 Click Save to apply your settings.
Network Reputation
Network Reputation checks the source and destination address of each packet
against the address blacklist to determine whether to proceed or to drop the
packet. The blacklist data is automatically updated in its entirety a few times per
day.
NOTE No configuration is needed for the Network Reputation feature. You only need to
enable or disable this feature from the Security Services -> Dashboard page.