database reputation ironport

[AndreaAcampa1993]

Hi Guys,

I have an issue with my CISCO Ironport.

Most of domains are categorized like Uknown.
The default behaviour for uknown domains is the drop all messages.

Now I have changed this behaviour for unknown domains, but can you help me to understand how the ironport can correctly categorize the domains?

thanks in advance

Best regards

Andrea

[Jernej Vodopivec]

Strange - does you WSA have access to internet to get fresh information about page categorization?

Can you copy-paste some example URL without category assigned to it?

If Cisco indeed has wrong category assigned to the web page or you want to submit new page category classification, you can do it on this URL: https://securityhub.cisco.com/

[Mathew Huynh]

Could you please share some mail_logs or message tracking details to show this 'unknown' that you're seeing so we can assist with direction.

Feel free to mask your IPs and anything else if needed.