User Guide

15-11
AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide
Chapter 15 URL Filtering
Troubleshooting URL Filtering
• Manually Configuring a Certificate for Communication with Cisco Web Security Services,
page 15-13
Viewing Logs
URL filtering information is posted to the following logs:
• Mail Logs (mail_logs). Information related to the result of scanning a URL (action taken of a
message depending on the URL) is posted to this log.
• URL Filtering Logs (web_client). Information related to errors, timeouts, network issues, and so
on while attempting the URL lookup are posted this log.
Most information is at Info or Debug level.
Logs do not include information about what happens when a user clicks a redirected link in a message.
"SDS" in logs refers to URL reputation services.
Alert: SDS: Error Fetching Enrollment Certificate
Problem You receive an info-level alert about an error fetching the enrollment client certificate.
Solution This certificate is required to connect to Cisco Web Security Services in the cloud in order to
obtain URL reputation and category. Try the following:
• Check for networking issues such as incorrect proxy settings or firewall issues.
• Verify that your URL Filtering feature key is valid and active.
• If the problem persists, contact Cisco TAC.
Alert: SDS: Certificate Is Invalid
Problem You receive a critical alert about an invalid SDS certificate.
Solution This certificate is required to connect to Cisco Web Security Services in the cloud in order to
obtain URL reputation and category.
To obtain and manually install a certificate, see Manually Configuring a Certificate for Communication
with Cisco Web Security Services, page 15-13.
Unable to Connect to Cisco Web Security Services
Problem The Security Services > URL Filtering page persistently indicates an issue connecting to
Cisco Web Security Services.
Solution
•
If you have enabled URL filtering but have not yet committed the change, commit the change.
• Check for recent alerts related to the connection with Cisco Web Security Services. See Viewing
Recent Alerts, page 33-38. If applicable, see Alert: SDS: Error Fetching Enrollment Certificate,
page 15-11 and Alert: SDS: Certificate Is Invalid, page 15-11.