internal only IP address categorized as suspicious by BCWF

book

Article ID: 168836

calendar_today

Updated On:

Products

ProxySG Software - SGOS Symantec WebFilter (formerly Blue Coat WebFilter - BCWF)

Issue/Introduction

Customer has a server which is only accessible from their intranet.
Access to server is blocked as it is being categorized by BCWF as suspicious.

Cause

The suspicious rating was coming from WebPulse/DRTR.
 
DRTR was flagging this site as suspicious as it was not getting a response back from the server, normal since it's internal to the customers environment.

 
 

Resolution

The use of a local database to whitelist internal sites and adding the appropriate policy is one way to work around this, alternatively having the site categorized correctly via sitereview will resolve the issue long term.