Руководство Пользователя для Cisco Cisco Email Security Appliance C170

If you are connecting via a proxy specified in Security Services > Service Updates, verify that this 
is configured and working properly. 

Check for other network issues that might prevent connection. 

If you see errors in the mail logs related to timed out requests to the SDS client, use the 

websecuritydiagnostics

 command and the 

websecurityadvancedconfig

 command in the 

command-line interface to investigate and make changes: 

If the diagnostics show that Response Time or DNS Lookup Time is not less than the configured 
URL Lookup Timeout, increase the URL Lookup Timeout value accordingly. 

If the diagnostics show that the cache size is at or near the capacity specified in the advanced 
configuration settings, increase the cache size. 

Check the mail logs for non-timeout errors in communications with the URL scanner, Cisco Web 
Security Services, or SDS. "SDS" in logs represents Cisco Web Security Services. If you see such 
log messages, contact TAC. 

Except for changes explicitly described in this document, make no other changes using the 

websecurityadvancedconfig

 command without guidance from TAC. 

Messages that contain URLs in a particular category are not found when searching by that 

category. 

See 

Malicious URLs and messages containing marketing links are not caught by the anti-spam or 

outbreak filters. 

This can occur because web site reputation and category are only two among many criteria that 
anti-spam and outbreak filters use to determine their verdicts. You can increase the sensitivity of 
these filters by lowering the thresholds required to take action such as rewriting or replacing URLs 
with text, or quarantining or dropping messages. For details, see 

 and 

This can also occur if the Email Security appliance is unable to connect to the Cisco Web Security 
Services. See 

The defined action in a content or message filter based on URL category is not applied.