topic Accessing brightcloud.com returns block page in General Topics

Accessing brightcloud.com returns block page

cloughr — Wed, 06 Jun 2012 18:02:48 GMT

We are sometimes getting a block page when accessing brightcloud.com to report a site. The category returned is 'malware-sites'. The logs show that 'service.brightcloud.com' is correct, but 'brightcloud.com/support/lookup.php' and 'brightcloud.com/support/border-radius.htc' are URL blocked as 'malware-sites'.

Re: Accessing brightcloud.com returns block page

mikand — Wed, 06 Jun 2012 19:11:13 GMT

Sounds odd, I tried the urls myself at their (brightcloud) lookup service and got the following results:

* brightcloud.com

Business and Economy
Computer and Internet Security
Reputation: 81

* service.brightcloud.com

Business and Economy
Reputation: 96

* brightcloud.com/support/lookup.php

Business and Economy
Reputation: 81

Just as reference:

* live.paloaltonetworks.com

Business and Economy
Computer and Internet Security
Reputation: 96

* support.paloaltonetworks.com

Business and Economy
Computer and Internet Security
Reputation: 96

Data Version: 3.873
Last Updated: 06-05-2012 21:57:30 PDT

Re: Accessing brightcloud.com returns block page

dyang — Fri, 08 Jun 2012 00:59:28 GMT

Hello,

There was an issue from a few weeks ago where brightcloud.com was misclassified as malware, though it was quickly corrected. For those customers that were affected by this, please clear the DP cache to force an immediate lookup of the URL and get the right categorization. To do this, use the CLI command "clear url cache"

Thanks,

Doris

Re: Accessing brightcloud.com returns block page

nayubi — Fri, 06 Jul 2012 20:42:23 GMT

Please update your database to 3894 or higher and make sure that if you are going through the pan there is an exception to allow this traffic so it is not blocked by the URL-filtering profile.