Diferent URL categorization betwen Cisco IronPort and TALOS

[SupportAC]

Hi All,

Recently i have updated trought internet the Cisco Web Controls, webreputation,web root.

if i make a query of this url www.anaconda.com in talos the category is correct "Computers and Internet",but if a make the query in ironport WSA the category is pornographic.

I have connected through ssh to the S170 WSA and I execute the command updatenow but it seems that not work to try to fix the problem but don´t work.

I have installed version AsyncOS 10.1.1-230 how can i fixed the category problem?

Thanks.

[Handy Putra]

Hi,

In CLI, when you do 'version' command do you see the versions for categorisation and reputation showing latest date?, you will be focusing on the Cisco Web Usage Controls and Reputation section in that output.

When you do updatenow, you can track the updates using grep or tail command in CLI and select 'updater_logs' to see the updates progress and to see if there is issue in updating the scanner.

Best Regards,

Handy Putra

[SupportAC]

hI Handry,

Thanks for the response,

I have the equipment S170 looking the the link of eos I saw that the eos of this model was November 8, 2017

https://www.cisco.com/c/en/us/products/collateral/security/web-security-appliance/eos-eol-notice-c51-737103.html

End of New Service Attachment Date:  HW

For equipment and software that is not covered by a service-and-support contract, this is the last date to order a new service-and-support contract or add the equipment and/or software to an existing service-and-support contract.

I have installed the Version:AsyncOS 10.1.1-230 and it is not possible to upgrade this version reading the document at the link because the last version is 10.1:

The last SW image release that would be supported for these platforms are as below:

●   x170 Appliances:

◦     Web Security Appliances: 10.1.x

◦     Email Security Appliances: 11.0.x

◦     Security Management Appliances: 11.x.x

I connect to the equipment througnt ssh and I execute the command "upgradenow" in the equipment to try to fix and refresh the local bbdd categroy and the equipment do not anything ,

Do you know if there is some bug with this version AsyncOS 10.1.1-230 that causes that if you update the categories through internet do not update the categories of the local bbdd in the equipment s170 WSA.

If not what can I do to make that the categories in TALOS bbdd be the same in the equipment S170WSA

[Handy Putra]

Hi,

I believe the command should be 'updatenow' instead of 'upgradenow'

After you run that command, you 'tail' the logs so you can see what is the appliance doing when processing that process.

do tail -> select the number for 'updater_logs' 

Would also recommend to open a TAC case for the engineer to assist you with this and to check it from the backend of the appliance.

Regards

Handy Putra