Cisco Cisco Web Security Appliance S170 사용자 가이드
17-3
Cisco IronPort AsyncOS 7.7.5 for Web User Guide
Chapter 17 URL Filters
URL Filters Overview
All transactions resulting in unmatched categories are reported on the Reporting > URL Categories page
as “Uncategorized URLs.” A large number of uncategorized URLs are generated from requests to web
sites within the internal network. Because this type of internal transaction can falsely inflate reporting
data and misrepresent the efficacy of the URL filtering engine, Cisco recommends using custom URL
categories to group internal URLs and allow all requests to internal web sites. This decreases the number
of web transactions reported as “Uncategorized URLs” and instead reports internal transactions as part
of “URL Filtering Bypassed” statistics.
as “Uncategorized URLs.” A large number of uncategorized URLs are generated from requests to web
sites within the internal network. Because this type of internal transaction can falsely inflate reporting
data and misrepresent the efficacy of the URL filtering engine, Cisco recommends using custom URL
categories to group internal URLs and allow all requests to internal web sites. This decreases the number
of web transactions reported as “Uncategorized URLs” and instead reports internal transactions as part
of “URL Filtering Bypassed” statistics.
For more information, see
For more information about creating custom URL categories, see
.
Matching URLs to URL Categories
When the URL filtering engine matches a URL category to the URL in a client request, it first evaluates
the URL against the custom URL categories included in the policy group. If the URL in the request does
not match an included custom category, the URL filtering engine compares it to the predefined URL
categories. If the URL does not match any included custom or predefined URL categories, the request is
uncategorized.
the URL against the custom URL categories included in the policy group. If the URL in the request does
not match an included custom category, the URL filtering engine compares it to the predefined URL
categories. If the URL does not match any included custom or predefined URL categories, the request is
uncategorized.
Note
When determining policy group membership, a custom URL category is considered included only when
it is selected for policy group membership.
it is selected for policy group membership.
Tip
To see what category a particular web site is assigned to, go to the URL in
For more information about uncategorized URLs, see
.
Reporting Uncategorized and Misclassified URLs
When you use Cisco IronPort Web Usage Controls, you can report uncategorized and misclassified
URLs to Cisco. Cisco provides a URL submission tool on its website that allows you to submit multiple
URLs simultaneously:
URLs to Cisco. Cisco provides a URL submission tool on its website that allows you to submit multiple
URLs simultaneously:
https://securityhub.cisco.com/web/submit_urls
To check the status of submitted URLs, click the Status on Submitted URLs tab on this page.
You can also use the URL submission tool to look up the assigned URL category for any URL.
The URL Categories Database
The category that a URL falls into is determined by a filtering categories database. The Web Security
appliance collects information and maintains a separate database for each URL filtering engine. The
filtering categories databases periodically receive updates from the Cisco IronPort update server
(
appliance collects information and maintains a separate database for each URL filtering engine. The
filtering categories databases periodically receive updates from the Cisco IronPort update server
(
https://update-manifests.ironport.com
). Server updates are automated, and the update interval is
set by the server as opposed to the appliance. Updates to the database occur regularly, and require no
administrator intervention.
administrator intervention.