User Guide

15-13

AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide

Chapter 15 URL Filtering

About URL Categories

URLs in a Filtered Category Are Not Handled Correctly

Problem The defined action in a content or message filter based on URL category is not applied.

Solution

•

Use the Trace feature (described in the Troubleshooting chapter) to follow the message processing

path.

• This can occur if the Email Security appliance is unable to connect to the Cisco Web Security

Services. See Unable to Connect to Cisco Web Security Services, page 15-11.

• If there are no connection issues, the URLs may not yet be categorized, or may be miscategorized.

See Reporting Uncategorized and Misclassified URLs, page 15-21. You can use this site to

determine the category of a URL.

End User Reaches Malicious Site via Rewritten URL

Problem A malicious URL was redirected to the Cisco Web Security Proxy, but the end user was able to

access the site anyway.

Solution This can occur if:

• The site was not yet identified as a malicious site.

• The connection to the Cisco Web Security Proxy timed out, which should be a rare occurrence.

Ensure that network issues are not interfering with the connection.

Manually Configuring a Certificate for Communication with Cisco Web

Security Services

Use this procedure if the appliance is unable to automatically obtain a certificate for communication with

Cisco Web Security Services.

Procedure

Step 1 Obtain the required certificate.

Step 2 Upload the certificate using Network > Certificates, or use the certconfig command in the

command-line interface.

Step 3 In the command-line interface, enter the websecurityconfig command.

Step 4 Follow the prompts to set the client certificate for Cisco Web Security Services Authentication.

Step 5 After completing the certificate installation process, enter the webcacheflush command.

About URL Categories