Integrating Forcepoint URL Filtering with Cisco

Forcepoint URL Filtering can be integrated with Cisco™ Adaptive Security Appliance (ASA) v8.0 and later and Cisco IOS routers v15 and later.

Integrating with a Cisco product involves the following components:

• Filtering Service works with the Cisco product and Network Agent to respond to Internet requests.

  For redundancy, two or more instances of Filtering Service may be used. Only one instance (the primary server) is active at any given time. URL look-up requests are be sent only to the primary server.

• Network Agent manages Internet protocols that are not managed by your integrated Cisco product. Network Agent can log bandwidth data for reporting block Internet requests based on bandwidth consumption.
• If HTTP(S) or FTP authentication is enabled in the Cisco product, User Service must be installed in the same domain or root context as authenticated users to get correct user information and provide it to Filtering Service for accurate application of user-based policies.

  If you are using a transparent identification agent or manual authentication, this configuration is not necessary.

To enable the integration, direct Internet requests through your Cisco product, and configure it for use with Forcepoint URL Filtering.

• Getting started with a Cisco integration provides general introductory information.
• Configuring a Cisco Security Appliance discusses Cisco Adaptive Security Appliance (ASA).
• Configuring a Cisco IOS Router discusses Cisco IOS router.