cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1192
Views
0
Helpful
3
Replies

Occasionally blocked images.

mariusgggg
Level 1
Level 1

Hi,

I have a problem with my WSA. Occasionally I get blocked images from different websites. For example www.onet.pl, I can see from accesslogs that url's for particular images are blocked because they are uncategorized,  here is the log:

1338371176.706 14 172.17.1.100 TCP_DENIED/403 0 GET http://m.ocdn.eu/_m/099ba62d22f9e0d4b773476131d32c8a,33,29,0-39-510-185-0.jpg - NONE/- - BLOCK_WEBCAT_11-q4TestPolicy-q4net-DefaultGroup-NONE-NONE-NONE <nc,-5.8,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,nc,-,"-","spam","Unknown","Unknown","-","-",0.00,0,-,"-","-"> - nc -

71176.705 22 172.17.1.100 TCP_DENIED/403 0 GET http://m.ocdn.eu/_m/cdca3ac43d141df7651494d1309e7843,45,29,0-0-752-441-0.jpg - NONE/- - BLOCK_WEBCAT_11-q4TestPolicy-q4net-DefaultGroup-NONE-NONE-NONE <nc,-5.8,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,nc,-,"-","spam","Unknown","Unknown","-","-",0.00,0,-,"-","-"> - nc -

1338371176.706 15 172.17.1.100 TCP_DENIED/403 0 GET http://m.ocdn.eu/_m/8deb5caed155599ba4f0d9cd346d6b46,33,29,0-98-398-224-0.jpg - NONE/- - BLOCK_WEBCAT_11-q4TestPolicy-q4net-DefaultGroup-NONE-NONE-NONE <nc,-5.8,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,nc,-,"-","spam","Unknown","Unknown","-","-",0.00,0,-,"-","-"> - nc -

I created custom url:  m.ocdn.eu  and "allow" it but that is not permanent solution.

Any help would be much appreciated.

3 Replies 3

sfiebran
Cisco Employee
Cisco Employee

From the logs, these request got blocked due Web Categorization. E.g. do you block non-categorized request or request with a score of -5.8?

-Stephan

Thanks for replay,

We block non-categorized request.

Mariusz.

Then this is the reason why. As of the accesslog entry, you can see the URl is not categorzied ("nc"), hence the request will be blocked if set to block. An custom category will always overwrite, so this is working as workaround. You may want to consider then to not block non-categorized URL's.

In case it is just about this specifiy URL, you can always as customer open a support case to let the page get categorized if feasable.

-Stephan