Symantec Web Security Service Access Method: Admin

88 Pages·2017·0.91 MB·English

Web Security Service
Registration and
Admin Guide
Version 6.10.4.3/MAR.08.2019
SymantecWebSecurityService/Page2
Page3
Copyrights
Copyright©2019SymantecCorp.Allrightsreserved.Symantec,theSymantecLogo,theCheckmarkLogo,BlueCoat,and
theBlueCoatlogoaretrademarksorregisteredtrademarksofSymantecCorp.oritsaffiliatesintheU.S.andothercoun-
tries.Othernamesmaybetrademarksoftheirrespectiveowners.Thisdocumentisprovidedforinformationalpurposesonly
andisnotintendedasadvertising.Allwarrantiesrelatingtotheinformationinthisdocument,eitherexpressorimplied,are
disclaimedtothemaximumextentallowedbylaw.Theinformationinthisdocumentissubjecttochangewithoutnotice.
THEDOCUMENTATIONISPROVIDED"ASIS"ANDALLEXPRESSORIMPLIEDCONDITIONS,
REPRESENTATIONSANDWARRANTIES,INCLUDINGANYIMPLIEDWARRANTYOFMERCHANTABILITY,
FITNESSFORAPARTICULARPURPOSEORNON-INFRINGEMENT,AREDISCLAIMED,EXCEPTTOTHE
EXTENTTHATSUCHDISCLAIMERSAREHELDTOBELEGALLYINVALID.SYMANTECCORPORATIONSHALL
NOTBELIABLEFORINCIDENTALORCONSEQUENTIALDAMAGESINCONNECTIONWITHTHEFURNISHING,
PERFORMANCE,ORUSEOFTHISDOCUMENTATION.THEINFORMATIONCONTAINEDINTHIS
DOCUMENTATIONISSUBJECTTOCHANGEWITHOUTNOTICE.SYMANTECCORPORATIONPRODUCTS,
TECHNICALSERVICES,ANDANYOTHERTECHNICALDATAREFERENCEDINTHISDOCUMENTARE
SUBJECTTOU.S.EXPORTCONTROLANDSANCTIONSLAWS,REGULATIONSANDREQUIREMENTS,AND
MAYBESUBJECTTOEXPORTORIMPORTREGULATIONSINOTHERCOUNTRIES.YOUAGREETOCOMPLY
STRICTLYWITHTHESELAWS,REGULATIONSANDREQUIREMENTS,ANDACKNOWLEDGETHATYOUHAVE
THERESPONSIBILITYTOOBTAINANYLICENSES,PERMITSOROTHERAPPROVALSTHATMAYBEREQUIRED
INORDERTOEXPORT,RE-EXPORT,TRANSFERINCOUNTRYORIMPORTAFTERDELIVERYTOYOU.
SymantecCorporation
350EllisStreet
MountainView,CA94043
www.symantec.com

WebSecurityServiceAdminGuide/Page5
Web Security Service Admin Guide
TheSymantecWebSecurityServicesolutionsprovidereal-timeprotectionagainstweb-bornethreats.Asacloud-based
product,theWebSecurityServiceleveragesSymantec'sprovensecuritytechnology,includingtheWebPulse™cloud
community.
Withextensivewebapplicationcontrolsanddetailedreportingfeatures,ITadministratorscanusetheWebSecuritySer-
vicetocreateandenforcegranularpoliciesthatareappliedtoallcoveredusers,includingfixedlocationsandroaming
users.
ThisdocumentcontainsWebSecurityServiceAdmin-relatedtopicscollectedfromtheWebSecurityServiceWebGuides.
Forthecompletedocset,see:
https://bto.bluecoat.com/documentation/All-Documents/WebSecurityService
Table Of Contents
Copyrights 3
Web SecurityServiceAdmin Guide 5
TableOfContents 5
Register Your Web SecurityServicePortal 8
Prerequisites 8
Procedure 8
NextStep 13
ManageServiceAccess 14
AddServiceUserintheAdministratorRole 15
ConfigureAdministratorAccountstouseSymantecSecureLogin 17
AbouttheSymantecSecureLoginService 17
ConfigureAdministratorAccountsforSymantecSecureLogin 17
AboutSymantecTwoFactorAuthenticationandSymantecVIP 18
EditInformationforaCurrentServiceUser 20
AssignServiceUserBasedonRole 21
AddServiceUserinaReviewerRole 23
(Optional) NextStep 24
AddServiceUserintheReportingOnlyRole 25
(Optional) NextStep 27
ChangetheRoleofaCurrentServiceUser 28
Reference: Role-Based AccessFields 29
SymantecWebSecurityService/Page6
ReviewWebSecurityServiceUserAccess 30
User:ChangeYourPassword 31
DisableorEnableCurrentServiceUsers 33
Add aWeb SecurityServiceAccessLocation 34
AddaGatewayFirewall/VPNLocation(IPsec) 35
AddanExplicitProxyLocation 37
AddaProxyForwardLocation 38
Admin ReferenceTopics 39
Reference: RequiredLocations,Ports,andProtocols 40
SymantecResource 40
AccessMethods 40
Authentication 41
Cloud-to-PremisesDLP 42
Reference:WebSecurityServiceDataCenterIngress IPs 43
Reference:AuthenticationIPAddresses 44
Reference: Authentication Modes 45
Reference: UpdatedContentFilteringCategories 48
Reference:FileTypesDetectedbyAdvancedPolicy 53
LosslessAudio 55
LossyAudio 55
OtherMusicFormats 56
PlaylistFormats 57
AudioEditingandMusicProductionFormats 57
HTTP FileExtensions 62
HTTP ResponseHeaders 62
ContentDispositions 62
HALOEngine 63
TrackManiaUnited/NationsForeverEngine 63
DOOMEngine 63
QuakeEngine 64
UnrealEngine 64
DukeNukem3DEngine 64
DiabloEngine 65
WebSecurityServiceAdminGuide/Page7
OtherFormats 65
ColorPalettes 65
RasterGraphics 66
Vectorgraphics 68
3Dgraphics 68
Other 70
Cursors 71
FinancialRecords 71
Documents 71
MathematicalMarkup Language(MML) 72
PageDescription Language 72
PersonalInformationManager 73
Presentation 73
ProjectManagementSoftware 74
Formatsoffilesusedinsoftwareforbibliographicinformation(citation)management. 74
Spreadsheet 74
Tabulateddata 75
ObjectCode,ExecutableFiles,SharedandDynamically-LinkedLibraries 76
ObjectExtensions 77
SourceCodeforComputerPrograms 77
VideoFileFormats 79
VideoEditing&Productionformats 81
MicrosoftVirtualPC/VirtualServer 81
EMCVMwareESX/GSX/Workstation/Player 81
Virtualbox 81
ParallelsWorkstation 81
DeviceIntegrationTokens 82
Reference: Supported Cipher Suites(Datapath) 84
Reference:SupportedCipherSuites(Portal) 86
SymantecWebSecurityService/Page8
Register Your Web Security Service Portal
WhenyouaccesstheWebSecurityServiceforthefirsttime,thebrowserdisplaysthefirstpageoftheInitialConfiguration
Wizard.Theonlyrequiredtaskistodefinetheadministratorcredentials,setaninitialdefaultpolicytemplate.Youcanper-
formallconnectionconfigurationsandcustompolicydefinitionsatalatertime.
Prerequisites
Beforebeginning,youmusthave:
n ASubscriptionID,whichwassentinaWelcomeemailbySymantec.
n APrimaryAdministratoremailaddress.YourWebSecurityServiceportalaccountwillbetiedtothisaddress.
n NortonSecureLogon(NSL)credentialsarerequiredtoconfirmyourregistration. Ifyoudonothaveanaccount,goto
https://login.symantec.comtocreateone.
Procedure
Perform the following steps to help you complete the wizard
Tip:Certainwizardpagesprovideconfigurationoptions,suchasaddingalocationoradding
theAuthConnector.Nosuchconfigurationsarerequiredtocompletetheinitialregistration
process.YoucanperformthesespecificAccess Methodtasksfromwithintheportalatany
timefollowingregistration.Somemethodsrequireconsiderableplanning.Theoptionsare
providedforexperiencedWebSecurityServiceuserswhoalreadyknowthisinformationand
requireaquickerdeploymentprocess.
RegisterYourWebSecurityServicePortal/Page9
1. Inabrowser,enterhttps://portal.threatpulse.com/register..
a. EntertheEmailAddressthatwillbetheprimaryWebSecurityServiceadministrator.
b. EnteryourSubscription ID.
c. ClickRegister.
Theportaldisplaysadialoginformingyoutocheckthenewly-registeredemailaccount.
d. Inthatmail,clickGetStarted.
2. ThelinkopenstheSymantecSecureLoginpage.Symantec'sNSL isthepasswordfacilitator.Enteryour
NSL credentials.
3. TheWebSecurityServicebeginsthefirstphaseofaninitialconfigurationwizard.
ThefirstpagepromptsyoudefineyourAdministratorpasswordandpasswordrecoverysecurityquestion.
SymantecWebSecurityService/Page10
Tip:SymantecrecommendsnotusingtheBrokenBoneschallenge;itiseasyto
guess.
Completeandclick Next(bottom-rightcorner).
4. ThenextpagepromptsyoutodefinetheAdministrator'sFirstandLastName.
a. CompleteandclickContinuetoProductSetup.
b. ClickOKtoclosetheconfirmationdialog.
5. TheWebSecurityServicebeginsthesecondinitialconfigurationphase,thefirstofwhichisProductConfiguration.
LocatetheWebSecurityproductlineandclicktheConfigurelink,whichisintheActioncolumn.
6. TheWebSecurityServiceservicedisplaystheDefaultPolicypage.