Руководство Пользователя для Cisco Cisco Email Security Appliance C190

Скачать
Страница из 1185
 
15-10
Cisco AsyncOS 8.5.6 for Email User Guide
 
Chapter 15      URL Filtering
  Troubleshooting URL Filtering
If the problem persists, contact Cisco TAC. 
Alert: SDS: Certificate Is Invalid 
Problem
You receive a critical alert about an invalid SDS certificate. 
Solution
This certificate is required to connect to Cisco Web Security Services in the cloud in order to 
obtain URL reputation and category. 
To obtain and manually install a certificate, see 
Alert: SDS: Connectivity To Cisco Web Security Services Is Lost
Problem
You receive a warning alert about loss of connectivity to Cisco Web Security Services.
Solution
Connection to Cisco Web Security Services is required for the URL Filtering feature to work. 
Check the connection status on the URL Filtering page (Security Services > URL Filtering). If the 
status indicates loss of connectivity to Cisco Web Security Services, try the following:
Check for networking issues such as incorrect proxy settings or firewall issues. 
If the problem persists, contact Cisco TAC.
When the connectivity to Cisco Web Security Services is restored, the connection status on the URL 
Filtering page will show Connected.
Unable to Connect to Cisco Web Security Services
Problem
The Security Services > URL Filtering page persistently indicates an issue connecting to 
Cisco Web Security Services. 
Solution
If you have enabled URL filtering but have not yet committed the change, commit the change. 
Check for recent alerts related to the connection with Cisco Web Security Services. See 
 and 
If you are connecting via a proxy specified in Security Services > Service Updates, verify that this 
is configured and working properly. 
Check for other network issues that might prevent connection. 
If you see errors in the mail logs related to timed out requests to the SDS client, use the 
websecuritydiagnostics
 command and the 
websecurityadvancedconfig
 command in the 
command-line interface to investigate and make changes: 
If the diagnostics show that Response Time or DNS Lookup Time is not less than the configured 
URL Lookup Timeout, increase the URL Lookup Timeout value accordingly. 
If the diagnostics show that the cache size is at or near the capacity specified in the advanced 
configuration settings, increase the cache size.