Accessing brightcloud.com returns block page

[cloughr]

We are sometimes getting a block page when accessing brightcloud.com to report a site. The category returned is 'malware-sites'. The logs show that 'service.brightcloud.com' is correct, but 'brightcloud.com/support/lookup.php' and 'brightcloud.com/support/border-radius.htc' are URL blocked as 'malware-sites'.

[mikand]

Sounds odd, I tried the urls myself at their (brightcloud) lookup service and got the following results:

* brightcloud.com

Business and Economy
Computer and Internet Security
Reputation: 81

* service.brightcloud.com

Business and Economy
Reputation: 96

* brightcloud.com/support/lookup.php

Business and Economy
Reputation: 81

Just as reference:

* live.paloaltonetworks.com

Business and Economy
Computer and Internet Security
Reputation: 96

* support.paloaltonetworks.com

Business and Economy
Computer and Internet Security
Reputation: 96

Data Version: 3.873
Last Updated: 06-05-2012 21:57:30 PDT

[dyang]

Hello,

There was an issue from a few weeks ago where brightcloud.com was misclassified as malware, though it was quickly corrected.  For those customers that were affected by this, please clear the DP cache to force an immediate lookup of the URL and get the right categorization.  To do this, use the CLI command "clear url cache"

Thanks,

Doris

[nayubi]

Please update your database to 3894 or higher and make sure that if you are going through the pan there is an exception to allow this traffic so it is not blocked by the URL-filtering profile.