Cisco Cisco Email Security Appliance C190 Guida Utente
15-10
Cisco AsyncOS 8.5.6 for Email User Guide
Chapter 15 URL Filtering
Troubleshooting URL Filtering
•
If the problem persists, contact Cisco TAC.
Alert: SDS: Certificate Is Invalid
Problem
You receive a critical alert about an invalid SDS certificate.
Solution
This certificate is required to connect to Cisco Web Security Services in the cloud in order to
obtain URL reputation and category.
To obtain and manually install a certificate, see
.
Alert: SDS: Connectivity To Cisco Web Security Services Is Lost
Problem
You receive a warning alert about loss of connectivity to Cisco Web Security Services.
Solution
Connection to Cisco Web Security Services is required for the URL Filtering feature to work.
Check the connection status on the URL Filtering page (Security Services > URL Filtering). If the
status indicates loss of connectivity to Cisco Web Security Services, try the following:
status indicates loss of connectivity to Cisco Web Security Services, try the following:
•
Check for networking issues such as incorrect proxy settings or firewall issues.
•
If the problem persists, contact Cisco TAC.
When the connectivity to Cisco Web Security Services is restored, the connection status on the URL
Filtering page will show Connected.
Filtering page will show Connected.
Unable to Connect to Cisco Web Security Services
Problem
The Security Services > URL Filtering page persistently indicates an issue connecting to
Cisco Web Security Services.
Solution
•
If you have enabled URL filtering but have not yet committed the change, commit the change.
•
and
.
•
If you are connecting via a proxy specified in Security Services > Service Updates, verify that this
is configured and working properly.
is configured and working properly.
•
Check for other network issues that might prevent connection.
•
If you see errors in the mail logs related to timed out requests to the SDS client, use the
websecuritydiagnostics
command and the
websecurityadvancedconfig
command in the
command-line interface to investigate and make changes:
–
If the diagnostics show that Response Time or DNS Lookup Time is not less than the configured
URL Lookup Timeout, increase the URL Lookup Timeout value accordingly.
URL Lookup Timeout, increase the URL Lookup Timeout value accordingly.
–
If the diagnostics show that the cache size is at or near the capacity specified in the advanced
configuration settings, increase the cache size.
configuration settings, increase the cache size.