I am reviewing the Firewall Log's and the block ProtectLink classifications are not matching up to what I have set on the ProtectLink settings.
For example the log side says:
Oct 21 07:02:08 2011 | Kernel | The URL(facebook.com) you(10.0.5.17) are attempting to access has been identified as Dialers site and has been blocked. |
But in the ProtectLink side it does not have any hits on the Dialer classification but instead incremented the counter in the Social Networking classification as it should. I was hoping to use the logs to quickly determin which real classification to either turn off for false postivies as I get used to which ones I should turn on and off for our evironment. Anyone else seeing this same behavor and is this a known bug with a fix yet?
-Adam