url-filtering

[sib2017]

Hi,

In url filtering adult-and-pornography blocked . But la-xxx.com can accesible
xxx.com not blocked

1)
test url la-xxx.com

la-xxx.com adult-and-pornography (Dynamic db)

2)
test url xxx.com

xxx.com adult-and-pornography (Base db)

other info
----------

show url-cloud status

This command requires the PAN-DB URL filtering database.

url filtering db

5076

Thanks

[pulukas]

Check your traffic logs to confirm what rule your session to these web sites is hitting.  I suspect that the rule that permits this traffic does not have the web filtering profile attached. 

[sib2017]

Hi,

I Made a mistake in my previous post, what  I mean xxx.com blocked at the same time la not blocked

Thanks

[BPry]

The same is true as already stated. Does the same policy control traffic to la-xxx.com as xxx.com. I'm going to guess that xxx.com is blocked because it has the url-filtering policy applied while the rule allowing access to la-xxx.com does not have the same url-filtering policy. Let us know if that isn't the case but that would be the first thing to look at. 

[sib2017]

Hi,

" I'm going to guess that xxx.com is blocked because it has the url-filtering policy applied while the rule allowing access to la-xxx.com does not have the same url-filtering policy."

both is  going to the same rule 

Thanks

[BPry]

I would double check that your cache is actually displaying the proper results (test url-info-host la-xxx.com) and make sure that you are not using an old cache entry that labels it as something else. Short of that working I would try just clearing the cache all together and making it pull in new entries for everything. 

[sib2017]

Hi,

I  tried the below 

test url-info-cloud la-xxx.xom

This command requires the PAN-DB URL filtering database.

What does it means 

Thanks

[BPry]

It sounds like you either are not using the PAN-DB and are using the BrightCloud database or you don't have an active license for URL-filtering anymore. 

[hvcomputech]

IF you are using Brightcloud try this via cli:

debug dataplane test url-resolve-path la-xxx.com

It will query locally first and, if unknown (not-resolved) it won't block it. The request will go out to the cloud for an update

URL la-xxx.com/, category is not-resolved, a request was sent successfully to the host

run it again:

debug dataplane test url-resolve-path la-xxx.com

it will come back classified correctly

URL la-xxx.com/, category adult-and-pornography

Larry