Unreachable web sites erroneously showing as blocked

[Stafford Rau]

We're using a pair of S370s for transparent web content filtering via wccp. When a user tries to go to a web site that is unreachable, after a long timeout they eventually get returned our default web site blocked page. This causes them to think the problem is with our web content filtering, rather than the remote site.

Is there a way to change that behavior?

I don't even see any entries in the access log for any of the unreachable web sites when I test. When I do a policy trace from one of the S370s, the final output is  blocked with an ERR_GATEWAY message:

URL Check

WBRS Score: 0.0

URL Category: Business and Industry

Scanner "AVC" Verdict (Request): Unknown (Unknown)

Scanner "Webroot" Verdict (Request): Unknown

Policy Match

IronPort Data Security policy: None

Decryption policy: None

Routing policy: Global Routing Policy

Identity policy: CC_AD_Identity

Access policy: None

Final Result

Request blocked

Details: ERR_GATEWAY

Trace session complete

[Chris Illsley · Accepted solution]

Yes, you need to edit the pages:

FTP to WSA, locate configuration -> eun -> en (depending on language)

Open up ERR_GATEWAY_TIMEOUT and edit the html approriately and save.

SSH to box.

advancedproxyconfig

EUN

2

enter out of options

commit

Cheers

Chris

[Stafford Rau]

Sorry about the late reply, but this was exactly what I was looking for. Thanks much!