Override the Threat Risk Score in ProxySG and ASG

Products

• ProxySG Software - SGOS
• ISG Proxy
• ASG-S200
• ASG-S400
• ASG-S500

Issue/Introduction

A URL or resource may be blocked by ProxySG policy because the Threat Risk Score returned by Intelligence Services.

However, access to the domain may be needed.

Resolution

The Threat Risk score is assigned automatically through an algorithm and cannot be changed manually.

The score can change over time, but to access the sites/domain until the Threat Risk score changes,

you can override the Threat Risk Score assigned with policy.

Add the below CPL rules to your Local Policy File in the proxySG/ASG:

<proxy>
url.domain=example.com variable.url.threat_risk.effective_level(1) 

where example.com must be replaced with the URL domain whose Threat Score you want to override.

For more information on CPL variable variable.url.threat_risk.effective_level see: url.threat_risk.effective_level

For information on how to add CPL policy see: Add CPL to a local policy file on the ProxySG