topic Re: Base url category is different from sub url category the traffic was under allow need to know why it was not blocked in Advanced Threat Prevention Discussions

Base url category is different from sub url category the traffic was under allow need to know why it was not blocked

Vijaygvasan — Tue, 27 Apr 2021 09:13:25 GMT

Hi Team,

Below screenshot states that the base url firebasestorage.googleapis.com comes under content delivery network and the sub Url comes under phishing where customer wants to know why they were not blocking by the firewall.

Also while im checking with the Virsutotal the below urls have been mentioned as phishing. I just wanted to know how to take forward with this. By creating a deny rule on url category or kindly need you assistance here.

thanks in advance

Re: Base url category is different from sub url category the traffic was under allow need to know why it was not blocked

Vijaygvasan — Wed, 28 Apr 2021 12:42:07 GMT

Hi Team,

I just want to know whether this specific urls are phishing or not and how to take it forward. Like blocking the url using url category with decryption enabled?

could that be a solution for all type of email phishing as well?

Regards

Re: Base url category is different from sub url category the traffic was under allow need to know why it was not blocked

hisingh — Wed, 28 Apr 2021 19:29:49 GMT

Hello @Vijaygvasan

A Top-level Domain ( TLD) can have a different priority than a URL. The reason is a TLD can host many URLs, and sub-domains that may or may not be phishing, malware category. The site may be multi-hosting, where different users are using TLD.

As a next step, you can make a "request change " on this URL by using test-a-site, and our team will check and give you response back.

Best

Himani

Re: Base url category is different from sub url category the traffic was under allow need to know why it was not blocked

Vijaygvasan — Thu, 29 Apr 2021 04:23:26 GMT

Hi Team,

Today i just checked with the same site under test-a-site where the risk level as well as the category has been changed.

Thanks guys for assisting.

Regards.

I hope now the