Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 4 replies
  • Subscribers 5 subscribers
  • Views 3882 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Categorization Failing

DrewbleIT

Good morning,

This morning we came into a storm of requests related to our gateway blocking access to content. For security our organization blocked uncategorized content and it appears that a large amount of website this morning are being seen as uncategorized. As a work around, we've had to adjust our security posture. Is anyone else experiencing this? 

Thanks!



This thread was automatically locked due to age.
Parents
  • 0

    More information; Facebook.com is even uncategorized. 

     

    Aug 17 09:13:58 <SANITIZED> 2018:08:17-09:13:58 <SANITIZED>-1 httpproxy[26419]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="<SANITIZED>" dstip="31.13.65.38" user="<SANITIZED>" group="<SANITIZED>" ad_domain="<SANITIZED>" statuscode="200" cached="0" profile="REF_HttProContaLanNetwo (Company Profile ADSSO)" filteraction="REF_HttCffActioLowRestr (<SANITIZED>)" size="5103" request="0xc44e3600" url="https://www.facebook.com/" referer="" error="" authtime="38" dnstime="2" cattime="83" avscantime="0" fullreqtime="155872" device="0" auth="2" ua="" exceptions="" category="9998" reputation="unverified" categoryname="Uncategorized" country="Ireland"

  • +1 in reply to DrewbleIT

    There are two different type of uncategorized.  One is a categorization of "uncategorized" and the other is a site that has not yet been categorized.  Fortunately, someone finally eliminated the confusion by naming the second "Categorization failed" and this is what I would block instead of the first.  The first means that the site is known and just can't be assigned to a category.

    Cheers - Bob

    Edit (a few minutes later): I spoke too soon.  I just found Barb@Sophos' thread [Sophos Notification] Advisory: Sophos UTM web filtering Category lookup is intermittently returning no category.  According to the link she provides, this glitch was found and corrected.

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • +1 in reply to BAlfson

    Thanks again Bob! We ended up actually having to toggle the web filtering services on the firewall in order to get sites to start categorizing again. I suspect maybe it was still trying to look to the stuck server? Not sure but all has been well since. 

Reply
  • +1 in reply to BAlfson

    Thanks again Bob! We ended up actually having to toggle the web filtering services on the firewall in order to get sites to start categorizing again. I suspect maybe it was still trying to look to the stuck server? Not sure but all has been well since. 

Children
No Data
Unfiltered HTML