Cisco Cisco Email Security Appliance C170 Guia Do Utilizador
16-13
User Guide for AsyncOS 9.8 for Cisco Email Security Appliances
Chapter 16 Protecting Against Malicious or Undesirable URLs
Troubleshooting URL Filtering
•
If you have enabled URL filtering but have not yet committed the change, commit the change.
•
Check for recent alerts related to the connection with Cisco Web Security Services. See
•
If you are connecting via a proxy specified in Security Services > Service Updates, verify that this
is configured and working properly.
is configured and working properly.
•
Check for other network issues that might prevent connection.
•
If you see errors in the URL Filtering Logs related to timed out requests to the SDS client, use the
websecuritydiagnostics
command and the
websecurityadvancedconfig
command in the
command-line interface to investigate and make changes:
–
If the diagnostics show that Response Time or DNS Lookup Time is not less than the configured
URL Lookup Timeout, increase the URL Lookup Timeout value accordingly.
URL Lookup Timeout, increase the URL Lookup Timeout value accordingly.
–
If the diagnostics show that the cache size is at or near the capacity specified in the advanced
configuration settings, increase the cache size.
configuration settings, increase the cache size.
•
Check the URL Filtering Logs for non-timeout errors in communications with the URL scanner,
Cisco Web Security Services, or SDS. "SDS" in logs represents Cisco Web Security Services. If you
see such log messages, contact TAC.
Cisco Web Security Services, or SDS. "SDS" in logs represents Cisco Web Security Services. If you
see such log messages, contact TAC.
Alert: Unable to Connect to the Cisco Aggregator Server
Problem
You receive the following warning alert: Unable to Connect to the Cisco Aggregator Server.
Solution
Do the following:
1.
Check the connectivity between the appliance and the Cisco Aggregator Server by pinging the
hostname of the server from the appliance. Use the
hostname of the server from the appliance. Use the
aggregatorconfig
command in CLI to view the
hostname of the Cisco Aggregator Server.
2.
If you are connecting via a proxy specified in Security Services > Service Updates, verify that this
is configured and working properly.
is configured and working properly.
3.
Check for other network issues that might prevent connection.
4.
Check if the DNS service is running.
5.
If the problem persists, contact Cisco TAC.
Alert: Unable to Retrieve Web Interaction Tracking Information from the Cisco
Aggregator Server
Aggregator Server
Problem
You receive the following warning alert: Unable to retrieve web interaction tracking
information from the Cisco Aggregator Server.
Solution
Do the following:
1.
If you are connecting via a proxy specified in Security Services > Service Updates, verify that this
is configured and working properly.
is configured and working properly.
2.
Check for other network issues that might prevent connection.
3.
Check if the DNS service is running.
4.
If the problem persists, contact Cisco TAC.