Web Reputation Rules

HTTP > HTTP Malware Scan > Policies | policy |Web Reputation Rule

Web Reputation provides a reputation score to URLs.  For each accessed URL, IWSVA queries this service for a reputation score and takes the necessary action based on the user-selected sensitivity level.

Because a Web Reputation query also returns URL category information, a pattern-size dependent local database for URL filtering is no longer necessary.  URL category filtering source depends entirely on the Web Reputation and the URL local cache.

Settings

To use the Web Reputation rule in this policy, you must select the Use Web Reputation rule in this policy check box, then enable this feature at the global level (HTTP > HTTP Malware Scan > Policies | Enable Web reputation checkbox).

Select Use Page Analysis in this policy to enable IWSVA to examine a Web page for malicious content (such as suspicious scripts or unrated URLs) and adjust the reputation score. For example, if malicious content is detected in a Web page, IWSVA decreases its reputation score and blocks access if the score is below the configured sensitivity threshold.

Sensitivity Level

Upon receiving the Web Reputation score, IWSVA determines whether the score is above or below the threshold. The threshold is defined by the sensitivity level specified by the user. Medium is the default sensitivity setting. This setting is recommended because it blocks most Web threats while not creating many false positives.

You can also select to enable the following features: