User's Manual

Security Services
Managing the Security Services
Cisco ISA500 Series Integrated Security Appliance Administrator Guide 211
7
About the Security Services
The security services activated by the security license are listed in the following
table.
Security Services Description
Intrusion
Prevention System
The Intrusion Prevention System (IPS) service can protect
the zones for a given set of categories. IPS monitors
network traffic for malicious or unwanted behaviors on
the security appliance and can react, in real-time, to block
or prevent those activities. For more information, see
Intrusion Prevention Service, page 214.
Anti-Virus The Anti-Virus service prevents network threats over a
multitude of protocols including HTTP, FTP, POP3, SMTP,
CIFS, NETBIOS, and IMAP. For more information, see Anti-
Virus, page 220.
Email Reputation
Filter
The Email Reputation Filter service detects the email
sender’s reputation score. If the reputation score is below
a threshold, then the email is blocked or tagged as SPAM
or SUSPECT SPAM. For more information, see Email
Reputation Filter, page 224.
Web URL Filter The Web URL Filter service provides protection against
URL categories. For more information, see Web URL
Filter, page 226.
Web Reputation
Filter
The Web Reputation Filter service detects threats based
on a web page’s reputation score. Web pages with
reputation scores below a specific threshold are
considered threats and blocked. For more information,
see Web Reputation Filter, page 230.
Network
Reputation
The Network Reputation service checks the source and
destination address of each packet against the address
blacklist to determine whether to proceed or drop the
packet. For more information, see Network Reputation,
page 231.