Cisco Web Security Appliance overview

The Cisco Web Security Appliance (WSA) is a web content security system that is used to provide secure web access, content security, and threat mitigation for users within an organization. With the integration of the Cisco Advanced Malware Protection (AMP), the Cisco WSA can use telemetry data, analysis, and analytics from Cisco's threat intelligence to better detect and block threats. Having a Cisco Web Security Appliance provides advanced malware protection, insightful reporting, and secure mobility.

Cisco WSA deployment model

If a user is requesting a website, the following process takes place:

1. The request from the corporate user's device is sent to the firewall
2. The firewall sends the request to the Cisco WSA
3. If there is a policy, or the appliance detects malicious activities, the Cisco WSA will deny the traffic
4. If the traffic is allowed, the Cisco WSA forwards it to the web server
5. The web server sends the return traffic back to the Cisco WSA for validation...