URL blocked by Web Security Service with error 'Proxy Avoidance'

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

URL gets blocked with the error 'Proxy Avoidance'/'proxy_avoidance'.

Resolution

Following these steps will allow you to add the web site as a trusted destination in the Web Security Service (WSS) portal.

Solution 1:

1. Check the URL on Symantec Sitereview to see what it shows as the category.
2. If the category incorrectly shows as 'Proxy Avoidance' and you want to access the site, add the URL as a 'Trusted Destination' in the WSS portal by going to Solutions -> Threat Protection -> Policy.
3. Fill out the form on the Symantec Sitereview results page to have the site review team re-categorize the URL.

Solution 2 (if the URL does not show as 'Proxy Avoidance'):

1. Perform a nslookup on the fully qualified domain name (FQDN) (i.e. www.google.com) of the web site to find the IP address of the site.
2. Verify that the category of the IP address on Symantec Sitereview is showing as 'Proxy Avoidance'.
3. In the WSS portal in Solutions -> Threat Protection -> Policy, add the IP address as a 'Trusted Destination'.
4. Fill out the form on the Symantec Sitereview results page to have the site review team re-categorize the IP address.

Once you've added the site as a trusted destination within the portal, you should now be able to access the site via the URL.

Solution 3 (if the customer has CASB only tenant):

• Removing URL/Domain from the CASB Gatelet will stop WSS Agent from intercepting that domain, sending it direct.
• Fill out the form on the Symantec Sitereview results page to have the site review team re-categorize the IP address.
• You can add the URL back to the CASB Gatelet once it gets recategorized from Symantec Sitereview.