[ALERT] 2021 Symantec Intelligence Services and WebFilter Category and Application Update

Products

• Security Analytics
• SSL Visibility Appliance Software
• Cloud Secure Web Gateway - Cloud SWG
• Reporter
• PacketShaper S-Series
• Intelligence Services
• ProxySG Software - SGOS
• Web Isolation
• WebPulse

Issue/Introduction

Severity

Warning

Description

On October 12, 2021, category enhancements will be delivered to Intelligence Services (formerly Blue Coat Intelligence Services or "BCIS") and WebFilter (formerly Blue Coat WebFilter or "BCWF") URL Categories and Application Classifications.

Why are we doing this?

On October 12, 2021, we will perform updates to our WebFilter URL categories. These updates are performed in order to ensure modern threats are correctly categorized to assist with policy creation and incident response. This notification contains information to help you assess the potential impact of these changes in your environment. Please review the attached document for the category changes details and the product-specific considerations below in order to learn how to leverage the new categories across the Symantec product portfolio.

What is the risk?

Any changes to the categories or applications could potentially affect customer policy. Please review the changes carefully and adjust your policy accordingly so your policies are aligned with the available categories and applications.

Who is affected?

Any product that uses Symantec Intelligence Services or Symantec WebFilter could be affected, specifically:

• Analytics & Reporting
• Advanced Secure Gateway
• CacheFlow
• Hybrid Edge SWG (ProxySG) and Cloud SWG (WSS)
• Mach5
• Malware Analysis
• Management Center
• PacketShaper
• Edge SWG (ProxySG)
• Reporter
• Security Analytics
• SSL Visibility
• Symantec WebFilter Automation Tool
• Threat Explorer
• Web Isolation
• Cloud SWG (Web Security Service)

Resolution

Change Details

Please review the details of the changes in the attached document carefully and adjust your policy accordingly so your policies are aligned with the available categories and applications.

Note: Please carefully evaluate your policy, as sites may move from an existing security category to “Compromised Sites.”.

Websites which are added to the new Compromised Sites category will also remain in the Suspicious category until February 21, 2022.

February 21, 2022 onward, compromised URLS will only be categorized as "Compromised Sites"