Cisco Cisco Email Security Appliance C170 Guía Del Usuario
15-12
AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide
Chapter 15 URL Filtering
Troubleshooting URL Filtering
•
If you are connecting via a proxy specified in Security Services > Service Updates, verify that this
is configured and working properly.
is configured and working properly.
•
Check for other network issues that might prevent connection.
•
If you see errors in the URL Filtering Logs related to timed out requests to the SDS client, use the
websecuritydiagnostics
command and the
websecurityadvancedconfig
command in the
command-line interface to investigate and make changes:
–
If the diagnostics show that Response Time or DNS Lookup Time is not less than the configured
URL Lookup Timeout, increase the URL Lookup Timeout value accordingly.
URL Lookup Timeout, increase the URL Lookup Timeout value accordingly.
–
If the diagnostics show that the cache size is at or near the capacity specified in the advanced
configuration settings, increase the cache size.
configuration settings, increase the cache size.
•
Check the URL Filtering Logs for non-timeout errors in communications with the URL scanner,
Cisco Web Security Services, or SDS. "SDS" in logs represents Cisco Web Security Services. If you
see such log messages, contact TAC.
Cisco Web Security Services, or SDS. "SDS" in logs represents Cisco Web Security Services. If you
see such log messages, contact TAC.
Using the websecurityadvancedconfig Command
Except for changes explicitly described in this document, make no other changes using the
websecurityadvancedconfig
command without guidance from TAC.
Message Tracking Search Does Not Find Messages with Specified Category
Problem
Messages that contain URLs in a particular category are not found when searching by that
category.
Solution
See
Malicious URLs and Marketing Messages Are Not Caught by Anti-Spam or
Outbreak Filters
Outbreak Filters
Problem
Malicious URLs and messages containing marketing links are not caught by the anti-spam or
outbreak filters.
Solution
•
This can occur because web site reputation and category are only two among many criteria that
anti-spam and outbreak filters use to determine their verdicts. You can increase the sensitivity of
these filters by lowering the thresholds required to take action such as rewriting or replacing URLs
with text, or quarantining or dropping messages. For details, see
anti-spam and outbreak filters use to determine their verdicts. You can increase the sensitivity of
these filters by lowering the thresholds required to take action such as rewriting or replacing URLs
with text, or quarantining or dropping messages. For details, see
and
. Alternatively, create content
or message filters based on URL reputation score.
•
This can also occur if the Email Security appliance is unable to connect to the Cisco Web Security
Services. See
Services. See
.