From the course: Cisco CCNP Security SCOR v1.1 (350-701) Cert Prep

Unlock this course with a free trial

Join today to access over 24,800 courses taught by industry experts.

Secure internet gateway

Secure internet gateway

- [Instructor] We're going to begin our look at web security here, specifically, how we can achieve a secure internet gateway with the Cisco Web Security Appliance, or WSA. Cisco WSA has many different feature engines built in with the main goal being to protect users from malicious websites and malware. The WSA acts as a proxy for web requests, analyzing and categorizing URLs in order to determine the level of risk they pose before completing a requested connection from a client. We can deploy this as a virtual or physical appliance, and this would be deployed inside our internet edge firewall most commonly. We can deploy the Cisco WSA in one of two modes, explicit forward mode or transparent mode. With explicit forward mode clients on the network would be explicitly configured to use the WSA proxy. In this mode, the client sends all traffic to the WSA proxy and the WSA would be responsible for DNS resolution for these traffic requests. Although with this mode, we would not need to…

Contents