Web category differs between Talos/Brightcloud and Firesight management

[u.drechsel]

Hi all,

we have a blocked web site "tryton.org" because of "high risk". Firesight  management (Analysis -> advanced -> Lookup URL) shows the category "Society, Malware Sites". But Brightcloud and Talos show "Computer and Internet Info" and "non govermental organisations" and have a neutral reputation. Manual Update of Reputation data (System -> Integration -> Cisco CSI -> URL-Filtering) doesn't solve anything. We are using version 6.3.0-84.

Does anybody know a solution?

thanks to all,

Uwe

[u.drechsel]

Meanwhile I found an explanation of caching in the online help. Beginning with version 6.3 this configuration parameter was introduced. May be, there's a software bug, because the cache entry of an URL seems to be unchanged if the reputation by CSI changes.

[Abheesh Kumar]

Hi,
strange behaviour, contact TAC for further investigation. May be its a cosmetic bug on version 6.3.

[u.drechsel]

Hello,

thank you for your reply, I'll do so.

Greetings,

Uwe