Implementing which of the following features provides a cloudbased subscription method of URL filtering that
can be used with Cisco’s ZFW? (Select the best answer.)
A.
Websense
B.
Trend Micro TRPS
C.
Secure Computing SmartFilter
D.
blacklists and whitelists
Explanation:
The Trend Micro Trend Router Provisioning Server (TRPS) provides a cloudbased subscription method of
Uniform Resource Locator (URL) filtering that can be used with Cisco’s zonebased policy firewall (ZFW). URL
filtering inspects Hypertext Transfer Protocol (HTTP) requests and blocks access to websites that match
certain criteria. For example, URL filtering is commonly configured on perimeter routers to prevent users from
inadvertently accessing URLs that have been deemed inappropriate or identified as hosting malware.
Subscriptionbased URL filtering services assign websites to categories, which are used by administrators to
limit or block access to these sites. With a Trend Micro subscription, the Cisco firewall sends URL queries to a
TRPS located on the Internet. The TRPS will reply with category information for the requested URL. The Cisco
firewall will then allow or block the traffic based on the category.
Websense and Secure Computing SmartFilter provide a local serverbased method of URL filtering that can be
used with Cisco’s ZFW. The Cisco firewall sends URL queries to the Websense or SmartFilter server. The
server will reply with category information for the requested URL. The Cisco firewall will then allow or block the
traffic based on the category. The primary difference between a Websense or SmartFilter server and a TRPS is
that the Websense and SmartFilter servers are hosted on the local network? the TRPS is located on the
Internet.
Blacklists and whitelists are methods of URL filtering that can be used with Cisco’s ZFW. However, they do not
require a subscription? these features are included in the Cisco IOS. A blacklist contains a list of domains that
you want to explicitly block, and a whitelist contains a list of domains that you want to explicitly allow. You can
also block traffic that contains certain keywords in the URL. Blacklists, whitelists, and URL keyword filtering can
be used in conjunction with a URL filtering subscription service.Cisco: Subscriptionbased Cisco IOS Content Filtering
Cisco: Cisco IOS Content Filtering Configuration Guide