topic Unreachable web sites erroneously showing as blocked in Web Security

Unreachable web sites erroneously showing as blocked

Stafford Rau — Thu, 23 Feb 2012 19:27:29 GMT

We're using a pair of S370s for transparent web content filtering via wccp. When a user tries to go to a web site that is unreachable, after a long timeout they eventually get returned our default web site blocked page. This causes them to think the problem is with our web content filtering, rather than the remote site.

Is there a way to change that behavior?

I don't even see any entries in the access log for any of the unreachable web sites when I test. When I do a policy trace from one of the S370s, the final output is blocked with an ERR_GATEWAY message:

URL Check

WBRS Score: 0.0

URL Category: Business and Industry

Scanner "AVC" Verdict (Request): Unknown (Unknown)

Scanner "Webroot" Verdict (Request): Unknown

Policy Match

IronPort Data Security policy: None

Decryption policy: None

Routing policy: Global Routing Policy

Identity policy: CC_AD_Identity

Access policy: None

Final Result

Request blocked

Details: ERR_GATEWAY

Trace session complete

Unreachable web sites erroneously showing as blocked

Chris Illsley — Mon, 27 Feb 2012 10:23:14 GMT

Yes, you need to edit the pages:

FTP to WSA, locate configuration -> eun -> en (depending on language)

Open up ERR_GATEWAY_TIMEOUT and edit the html approriately and save.

SSH to box.

advancedproxyconfig

EUN

enter out of options

commit

Cheers

Chris

Unreachable web sites erroneously showing as blocked

Stafford Rau — Tue, 06 Mar 2012 18:38:05 GMT

Sorry about the late reply, but this was exactly what I was looking for. Thanks much!