Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 5 subscribers
  • Views 1535 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Category ID?

Louis-M

Hi, we have a block in our web filter but struggling to find category ID 9998

Anybody know where the mapping sits or what it is?

Log as below:

2020:09:14-17:15:06 gw01-1 httpproxy[6885]: id="0060" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden category detected" action="block" method="CONNECT" srcip="10.100.2.241" dstip="" user="" group="" ad_domain="" statuscode="403" cached="0" profile="REF_HttProContaInterLan16 (S01 - Server Management)" filteraction="REF_HttCffNfrs0ServePolic (S01-02 Server Policy)" size="3175" request="0xda10b100" url="">https://16.250.72.103/" referer="" error="" authtime="0" dnstime="0" aptptime="149" cattime="17303" avscantime="0" fullreqtime="469886" device="0" auth="0" ua="" exceptions="" category="9998" reputation="unverified" categoryname="Uncategorized" reason="category"



This thread was automatically locked due to age.
Parents
  • 0

    In fact, Louis, this IP has been categorized as "Uncategorized" as opposed to a website that hasn't been categorized.  In the 'Categories' list in a Filter Action, you can see the two different kinds of uncategorized:

      

    Frankly, I think the GUI should be changed to say 'Websites not categorized' instead of 'Uncategorized websites'.

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0

    In fact, Louis, this IP has been categorized as "Uncategorized" as opposed to a website that hasn't been categorized.  In the 'Categories' list in a Filter Action, you can see the two different kinds of uncategorized:

      

    Frankly, I think the GUI should be changed to say 'Websites not categorized' instead of 'Uncategorized websites'.

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • 0 in reply to BAlfson

    This particular one was for HPE's ILO's online. There was an IP alias of api.support.hpe.com and because the IP is liable to change, we can't really put an IP in. Seems it uses an IP rather than the FQDN which I assume was causing it to be uncategorized. We couldn't make an exception either due to changing IP's and we don't know the full list of those IP's neither would we want to as they are liable to change. So basically, api.support.hpe.com got chucked in proxy_exempt_group for destination and a FW rule from ILO_SOURCE>https>api.support.hpe.com got used. Would prefer to have got it sorted within the proxy though.

  • 0 in reply to Louis-M

    You're right, Louis, that's the only solution - shame on the HP coder!

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Unfiltered HTML