Web category differs between Talos/Brightcloud and Firesight management
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-17-2019 12:52 AM - edited 03-12-2019 07:13 AM
Hi all,
we have a blocked web site "tryton.org" because of "high risk". Firesight management (Analysis -> advanced -> Lookup URL) shows the category "Society, Malware Sites". But Brightcloud and Talos show "Computer and Internet Info" and "non govermental organisations" and have a neutral reputation. Manual Update of Reputation data (System -> Integration -> Cisco CSI -> URL-Filtering) doesn't solve anything. We are using version 6.3.0-84.
Does anybody know a solution?
thanks to all,
Uwe
- Labels:
-
NGIPS
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-17-2019 06:27 AM
Meanwhile I found an explanation of caching in the online help. Beginning with version 6.3 this configuration parameter was introduced. May be, there's a software bug, because the cache entry of an URL seems to be unchanged if the reputation by CSI changes.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-17-2019 07:08 AM
strange behaviour, contact TAC for further investigation. May be its a cosmetic bug on version 6.3.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-17-2019 07:28 AM
Hello,
thank you for your reply, I'll do so.
Greetings,
Uwe