topic Ironport S160 Access Policy URL Category not working in Web Security

Ironport S160 Access Policy URL Category not working

nairco_admin — Tue, 01 Jul 2014 16:15:12 GMT

I have created a custom URL category "Allowed Sites" and put some sites in there that I want the proxy not to block and ticked the "Allow" field in my Access Policy.

Those sites also match the predefined URL category "Online Storage and Backup" which is blocked.

When I try to access those websites, the proxy blocks them saying they belong to the above predefined category.

Now, how can I allow those few sites, but not the whole predefined category??? Why is my custom category not being considered? URLs in there look like .example.com, .example2.com

Any help appreciated,

Kat

Hi,Could you please provide a

kushsriva — Thu, 10 Jul 2014 12:03:45 GMT

Hi,

Could you please provide a screen shot of the WSA Access policy configuration?

Also please login to the WSA and run the command 'tail' --> 1 (access_logs). Try to access the websites in the custom category and provide the output.

Regards,

Kush

Hi Kush,find attached the

nairco_admin — Thu, 10 Jul 2014 12:45:05 GMT

Hi Kush,

find attached the screenshot of the Access Policy with only the first few lines of the Predefined URL Categories. Also the category I created with "mozy.com" and others in it.

This is the output of a policy trace for a user that is assigned to this Access Policy when testing the URL in question "mozy.com"

URL Check

WBRS Score: 6.5

URL Category: Online Storage and Backup

Policy Match

IronPort Data Security policy: None

Decryption policy: None

Routing policy: None

Identity policy: NTLM_Identity

Access policy: exHSP

Final Result

Request blocked

Details: Request blocked based on URL category

Trace session complete

I'll do the tail and later today.

Kat

Do you have any trouble with

Vance Kwan — Fri, 11 Jul 2014 05:49:32 GMT

Do you have any trouble with the other sites on the custom URL category? Do you have mozy.com and .mozy.com in the category?

What version of OS are you running?

Duh, thanks. That did it. Arg

nairco_admin — Fri, 11 Jul 2014 07:58:51 GMT

Duh, thanks. That did it. Arg. Didn't realize that (dot)mozy.com doesn't match when the URL is just http://mozy.com. Kinda obvious though, haha.

Thanks vakwan.

Kat

HiIn my ironport I can access

MD KAFINUZZAMAN — Wed, 17 Sep 2014 04:01:55 GMT

In my ironport I can access all site except Google and yahoo. I have connected Ironport inside zone from core switch and firewall redirect to ironport. I have no DNS server.

I need your suggestion..............

Thanks