The Layer 4 Traffic Monitor feature on the W SA enables visibility across all ports and
protocols by connecting to a Switched Port Analyzer (SPAN) mirrored port on a LAN switch. By
monitoring all traffic (not just Web traffic), Cisco improves its malware detection capability.