Determining the Correct Configuration Publishing Method

There are two different processes for publishing configurations from the Secure Email and Web Manager appliance, and each publishes different settings. Some settings cannot be centrally managed.

To Configure

Do This

Features that appear under the Web Security Manager menu on the Web Security appliance, such as policies and custom URL categories.

Exception: L4 Traffic Monitor (L4TM) settings are not included in Configuration Masters.

The exact features supported depend on the configuration master version, which corresponds to an AsyncOS for Web Security version.

Publish a Configuration Master.

Many features that are configurable in a Configuration Master also require configurations directly on the Web Security appliance in order to work. For example, SOCKS Policies are configurable via Configuration Master, but a SOCKS Proxy must first be configured directly on the Web Security appliance.

Note: Integration with a Cisco Identity Services Engine (ISE) must be configured independently on each Web Security appliance. Cisco Identity Services Engine settings cannot be published from a Cisco Secure Email and Web Manager appliance.

Use Advanced File Publishing.

FIPS mode for Federal Information Processing Standard, Network/interface settings, DNS, Web Cache Communication Protocol (WCCP), upstream proxy groups, certificates, the proxy mode, time settings such as NTP, L4 Traffic Monitor (L4TM) settings, and authentication redirect hostname.

Configure settings directly on your managed Web Security appliances.

See the AsyncOS for Cisco Web Security Appliances User Guide