About The Security Services - Cisco ISA500 Series Administration Manual

Security Services
Managing the Security Services
Cisco ISA500 Series Integrated Security Appliance Administrator Guide

About the Security Services

The security services activated by the security license are listed in the following
table.
Security Services
Intrusion
Prevention System
Anti-Virus
Email Reputation
Filter
Web URL Filter
Web Reputation
Filter
Network
Reputation
Description
The Intrusion Prevention System (IPS) service can protect
the zones for a given set of categories. IPS monitors
network traffic for malicious or unwanted behaviors on
the security appliance and can react, in real-time, to block
or prevent those activities. For more information, see
Intrusion Prevention Service, page
The Anti-Virus service prevents network threats over a
multitude of protocols including HTTP, FTP, POP3, SMTP,
CIFS, NETBIOS, and IMAP. For more information, see
Virus, page 220.
The Email Reputation Filter service detects the email
sender's reputation score. If the reputation score is below
a threshold, then the email is blocked or tagged as SPAM
or SUSPECT SPAM. For more information, see
Reputation Filter, page
The Web URL Filter service provides protection against
URL categories. For more information, see
Filter, page 226.
The Web Reputation Filter service detects threats based
on a web page's reputation score. Web pages with
reputation scores below a specific threshold are
considered threats and blocked. For more information,
see Web Reputation Filter, page
The Network Reputation service checks the source and
destination address of each packet against the address
blacklist to determine whether to proceed or drop the
packet. For more information, see
page 231.
214.
224.
Web URL
230.
Network Reputation,
7
Anti-
Email
211