BrightCloud missing the Plot!
cancel
Showing results for 
Search instead for 
Did you mean: 

BrightCloud missing the Plot!

Not applicable

Hi Guys and Gals

I see there is already multiple threads about mis-classification on URL categories! I am now pleading with Palo Alto to address this issue with BrightCloud!

To reduce the none business related websites we started blocking the "society" category.....  Now we are being flooded with incidents where busines related sites are being blocked.....  Sites like BMW.co.za is classified as society but bmw.com is correctly classified!!! Same goes for all other motor vehicle related sites!!! How can they mis this? It seems that if Brightcloud uses the society category as default??

We have been getting arount the problem by adding sites to the allow list and creating custom categories, but this is becoming an administrative hell. We have also reported each URL with Brightcloud, but with amount of url's that we sending we are at the point where Brightcloud will need to put us on their payroll!! - hehehe

Please advise if someone has the same problem and if Brightcloud will address the problem?

17 REPLIES 17

L5 Sessionator

Hello,

Thanks for your patience and feedback regarding mis-categorized URLs.  In terms of submitting bulk requests to BrightCloud for re-classification, you can always use the email alias dbchange@brightcloud.com for submission.  Alternatively, you can also open a support case with Palo Alto Networks, and we can push BrightCloud to re-evaluate the URLs in question.  I definitely agree that bmw.com should have the same categorization as bmw.co.za!

Again, thanks for your patience and your assistance in maintaining the quality of the URL filtering database!

Cheers,

Doris

L1 Bithead

Hello,


we have the same problem.

Our users need many Laser related sites. Most of them are mis-categorized.

I agree with you Brightcloud uses the “society” category as default.

In the past we used McAfee Web Gateway formerly Webwasher. The Webwasher URL filter database was much better.

Maybe PaloAlto should think about to change the database vendor…

Regards,

Rainer

This is a big issue for us as well. Their url categories are very unreliable and we have had many issues. When we talked with Brightcloud they indicated that the categorisation  is automated and sites do get miss categorized. (even double  categorized) Often when we request to recategorise a url, it's often changed back by the automated system.


Also we've had issues where users are going to their site and changing URL categories to bypass our restrictions and gain access.   This has been possible with Brightcloud because of the self serve public Portal to re-categorize URLs. 

Hi everyone,

BrightCloud uses both automated and manual processes to categorize URLs, and is always making improvements in their process to reduce the number of mis-categorized URLs.  Though BrightCloud allows anyone to request a re-categorization via their website, there are checks in place to prevent abuse of this service, such as intentionally submitting an incorrect category.  If you have any examples of this happening, please open a ticket with Palo Alto Networks Support so that we can address this with BrightCloud.

As always, we welcome any feedback regarding our products!

Thanks,

Doris

Hi Doris

Thank you for your replies.... We understand the processes Brightcloud uses, but still we cannot afford the time\manpower to build their database for them. I Think it would have been valid if all Categorization engines was having the same major issues then yes... we have no other choice, but there are better engines out there and if Brightcloud is going to continue to be a sub-standard engine then it will most definitely have a negative impact on Palo Alto sales.  At this we have halted all Palo Alto Sales as we simply cannot handle the extra work created by the Bright Cloud engine....  Don't get me wrong here... Palo Alto is a GREAT product, It simply need to focus on fixing the URL categorization engine. Enjoy!

We've also seen more and more of this - 'society' is essentially a worthless category.  Every new proxy site seems to fall there, and is allowed until the app detection catches up.

We need to have 'society' open because we are an educational institution.

BrightCloud was touted as an improvement over SurfControl, and it was at the beginning.  Now I constantly have to answer questions on why certain sites are blocked and certain sites are allowed.

We bought this product specifically because we wanted to stop playing whack-a-mole :smileyangry:

I agree, Brightcloud must improve their system, I send a minimum of 4 URLs per week and I noticed some URLs are back to their old/wrong category after some time.

L1 Bithead

I'm planning on rolling out some url filtering for security purposes.

My goal is to give users a continue page when they navigate to a URL that falls into one of the following categories; bot-nets, confirmed-spam-sources, spam-urls, malware-sites, spyware-and-adware, unconfirmed-spam-sources, or fishing-and-other-fraud.

I'm from the edu space, so I can't block everything, but I was wondering if anyone has had success in filtering out the bad url's? I see posts like this and I start second guessing myself.

I can say that this part works very well on our PAN devices.  We do a hard block on malicious URLs and  custom continue pages on categories that are against our policies.  We haven't ran into many issues with this feature.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!