Ironport S160 Access Policy URL Category not working

[nairco_admin]

I have created a custom URL category "Allowed Sites" and put some sites in there that I want the proxy not to block and ticked the "Allow" field in my Access Policy.

Those sites also match the predefined URL category "Online Storage and Backup" which is blocked.

When I try to access those websites, the proxy blocks them saying they belong to the above predefined category.

Now, how can I allow those few sites, but not the whole predefined category??? Why is my custom category not being considered? URLs in there look like .example.com, .example2.com

Any help appreciated,

Kat

[kushsriva]

Hi,

Could you please provide a screen shot of the WSA Access policy configuration?

Also please login to the WSA and run the command 'tail' --> 1 (access_logs). Try to access the websites in the custom category and provide the output.

Regards,

Kush

[nairco_admin]

Hi Kush,

find attached the screenshot of the Access Policy with only the first few lines of the Predefined URL Categories. Also the category I created with "mozy.com" and others in it.

This is the output of a policy trace for a user that is assigned to this Access Policy when testing the URL in question "mozy.com"

URL Check

WBRS Score: 6.5

URL Category: Online Storage and Backup

Policy Match

IronPort Data Security policy: None

Decryption policy: None

Routing policy: None

Identity policy: NTLM_Identity

Access policy: exHSP

Final Result

Request blocked

Details: Request blocked based on URL category

Trace session complete

I'll do the tail and later today.

Kat

[Vance Kwan · Accepted solution]

Do you have any trouble with the other sites on the custom URL category?  Do you have mozy.com and .mozy.com in the category?

What version of OS are you running?

[nairco_admin]

Duh, thanks. That did it. Arg. Didn't realize that (dot)mozy.com doesn't match when the URL is just http://mozy.com. Kinda obvious though, haha.

Thanks vakwan.

Kat

[MD KAFINUZZAMAN]

Hi

In my ironport I can access all site except Google and yahoo. I have connected Ironport inside zone from core switch and firewall redirect  to ironport. I have no DNS server.

I need your suggestion..............

Thanks