Override the Threat Risk Score in ProxySG and ASG

book

Article ID: 223792

calendar_today

Updated On:

Products

ProxySG Software - SGOS ISG Proxy ASG-S200 ASG-S400 ASG-S500

Issue/Introduction

A URL or resource may be blocked by ProxySG policy because the Threat Risk Score returned by Intelligence Services.

However, access to the domain may be needed.

Resolution

The Threat Risk score is assigned automatically through an algorithm and cannot be changed manually.

The score can change over time, but to access the sites/domain until the Threat Risk score changes,

you can override the Threat Risk Score assigned with policy.

Add the below CPL rules to your Local Policy File in the proxySG/ASG:

<proxy>
url.domain=example.com variable.url.threat_risk.effective_level(1) ALLOW

where example.com must be replaced with the URL domain whose Threat Score you want to override.

For information on how to add CPL policy see: Add CPL to a local policy file on the ProxySG