topic url-filtering in General Topics

url-filtering

sib2017 — Sun, 22 Jan 2017 09:02:55 GMT

Hi,

In url filtering adult-and-pornography blocked . But la-xxx.com can accesible
xxx.com not blocked

1)
test url la-xxx.com

la-xxx.com adult-and-pornography (Dynamic db)

2)
test url xxx.com

xxx.com adult-and-pornography (Base db)

other info
----------

show url-cloud status

This command requires the PAN-DB URL filtering database.

url filtering db

5076

Thanks

Re: url-filtering

pulukas — Sun, 22 Jan 2017 22:24:39 GMT

Check your traffic logs to confirm what rule your session to these web sites is hitting. I suspect that the rule that permits this traffic does not have the web filtering profile attached.

Re: url-filtering

sib2017 — Mon, 23 Jan 2017 05:22:30 GMT

Hi,

I Made a mistake in my previous post, what I mean xxx.com blocked at the same time la not blocked

Thanks

Re: url-filtering

BPry — Mon, 23 Jan 2017 16:45:53 GMT

The same is true as already stated. Does the same policy control traffic to la-xxx.com as xxx.com. I'm going to guess that xxx.com is blocked because it has the url-filtering policy applied while the rule allowing access to la-xxx.com does not have the same url-filtering policy. Let us know if that isn't the case but that would be the first thing to look at.

Re: url-filtering

sib2017 — Tue, 24 Jan 2017 05:12:07 GMT

Hi,

" I'm going to guess that xxx.com is blocked because it has the url-filtering policy applied while the rule allowing access to la-xxx.com does not have the same url-filtering policy."

both is going to the same rule

Thanks

Re: url-filtering

BPry — Tue, 24 Jan 2017 15:46:53 GMT

I would double check that your cache is actually displaying the proper results (test url-info-host la-xxx.com) and make sure that you are not using an old cache entry that labels it as something else. Short of that working I would try just clearing the cache all together and making it pull in new entries for everything.

Re: url-filtering

sib2017 — Thu, 26 Jan 2017 05:39:52 GMT

Hi,

I tried the below

test url-info-cloud la-xxx.xom

This command requires the PAN-DB URL filtering database.

What does it means

Thanks

Re: url-filtering

BPry — Thu, 26 Jan 2017 14:12:27 GMT

It sounds like you either are not using the PAN-DB and are using the BrightCloud database or you don't have an active license for URL-filtering anymore.

Re: url-filtering

hvcomputech — Wed, 01 Feb 2017 20:38:53 GMT

IF you are using Brightcloud try this via cli:

debug dataplane test url-resolve-path la-xxx.com

It will query locally first and, if unknown (not-resolved) it won't block it. The request will go out to the cloud for an update

URL la-xxx.com/, category is not-resolved, a request was sent successfully to the host

run it again:

debug dataplane test url-resolve-path la-xxx.com

it will come back classified correctly

URL la-xxx.com/, category adult-and-pornography

Larry