Cisco Cisco Email Security Appliance C190 Guía Del Usuario
15-9
Cisco AsyncOS 8.5 for Email User Guide
Chapter 15 URL Filtering
Troubleshooting URL Filtering
•
If you are connecting via a proxy specified in Security Services > Service Updates, verify that this
is configured and working properly.
is configured and working properly.
•
Check for other network issues that might prevent connection.
•
If you see errors in the mail logs related to timed out requests to the SDS client, use the
websecuritydiagnostics
command and the
websecurityadvancedconfig
command in the
command-line interface to investigate and make changes:
–
If the diagnostics show that Response Time or DNS Lookup Time is not less than the configured
URL Lookup Timeout, increase the URL Lookup Timeout value accordingly.
URL Lookup Timeout, increase the URL Lookup Timeout value accordingly.
–
If the diagnostics show that the cache size is at or near the capacity specified in the advanced
configuration settings, increase the cache size.
configuration settings, increase the cache size.
•
Check the mail logs for non-timeout errors in communications with the URL scanner, Cisco Web
Security Services, or SDS. "SDS" in logs represents Cisco Web Security Services. If you see such
log messages, contact TAC.
Security Services, or SDS. "SDS" in logs represents Cisco Web Security Services. If you see such
log messages, contact TAC.
Using the websecurityadvancedconfig Command
Except for changes explicitly described in this document, make no other changes using the
websecurityadvancedconfig
command without guidance from TAC.
Message Tracking Search Does Not Find Messages with Specified Category
Problem
Messages that contain URLs in a particular category are not found when searching by that
category.
Solution
See
Malicious URLs and Marketing Messages Are Not Caught by Anti-Spam or
Outbreak Filters
Outbreak Filters
Problem
Malicious URLs and messages containing marketing links are not caught by the anti-spam or
outbreak filters.
Solution
•
This can occur because web site reputation and category are only two among many criteria that
anti-spam and outbreak filters use to determine their verdicts. You can increase the sensitivity of
these filters by lowering the thresholds required to take action such as rewriting or replacing URLs
with text, or quarantining or dropping messages. For details, see
anti-spam and outbreak filters use to determine their verdicts. You can increase the sensitivity of
these filters by lowering the thresholds required to take action such as rewriting or replacing URLs
with text, or quarantining or dropping messages. For details, see
and
•
This can also occur if the Email Security appliance is unable to connect to the Cisco Web Security
Services. See
Services. See
URLs in a Filtered Category Are Not Handled Correctly
Problem
The defined action in a content or message filter based on URL category is not applied.
Solution