webcc

distributed

connectiontype ipv6

Description

This command changes the WebCC operational mode of amanaged devicefrom the default centralized mode to distributed mode. The WebCC operational mode determines whether themanaged deviceorMobility Conductorcontacts the cloud WebRoot server for URL lookup queries. In the default centralized mode, theMobility Conductorcontacts the cloud WebRoot server for URL lookup queries, whereas in distributed mode, themanaged devicecontacts the cloud WebRoot server for URL lookup queries.

The WebCC license allows all web traffic to be classified and allows themanaged deviceto apply firewall policies based on web content category and reputation. The category and reputation data for each URL is obtained from an external WebRoot Server. The WebCC feature can operate in two distinct modes, which control whether themanaged deviceorMobility Conductorperforms the WebCC content lookup tasks. This command can be executed only from the/ mdsubtree of theMobility Conductor.

Parameter	Description
distributed	Sets the WebCC mode for themanaged deviceto distributed mode.
connectiontype ipv6	Sets the WebCC connection type from IPv4 to IPv6 address. The default is IPv4.

Centralized Mode

In the defaultcentralizedmode, onlyMobility Conductordownloads the URL entry database from the WebRoot Server. If a URL for web traffic sent through themanaged devicedoes not appear in its datapath cache, themanaged devicesends a query request toMobility Conductor. TheMobility Conductorqueries the WebRoot Server, adds the response to its database and sends information about the URL back to themanaged device.

WebCC license usage is calculated for each license pool, and the total count in each pool is sent to each managed device within that pool. If the WebCC licenses expire, or the available WebCC licenses are fewer than the AP licenses, then individualmanaged devices池内will no longer be able to send query requests toMobility Conductor, and WebCC classification will be blocked.

If WebCC classification is blocked due to expired or insufficient licenses, individualmanaged devicescontinue to classify requested URLs currently available in themanaged devicedatapath cache until the cache entries time out (usually over a period of 24 to 96 hours, depending upon the reputation level of the URL).

Distributed Mode

Indistributedmode, each individualmanaged devicedownloads the complete URL entry database (approximately 22 MB) directly from the WebRoot Server. If a URL for web traffic sent through themanaged devicedoes not appear in this database, themanaged devicesends a query to the WebRoot Server, then adds the response to its datapath cache.

WebCC license usage is calculated for each license pool, and the total count in each pool is sent to each managed device within that pool. If the WebCC licenses expire, or the available WebCC licenses are fewer than the AP licenses, then individualmanaged devices池内will no longer be able to send new query requests to the WebRoot server. However, the WebCC feature continue to classify requested URLs that are already in the URL entry database on themanaged device.

Example

The following example changes the WebCC operational mode of amanaged devicefrom the default centralized mode to distributed mode.

Command History

Release	Modification
ArubaOS8.4.0.0	Theconnectiontype ipv6parameter was added.
ArubaOS8.2.0.0	Command introduced.

Command Information

Platforms	License	Command Mode
All platforms	WebCC license.	配置模式Mobility Conductor.