WSS Users can access sites that should be blocked after GEO and Risk license re-applied

Products

• Web Security Service - WSS

Issue/Introduction

WSS configured with UPE

Customer has tested a demo version of GEO and RISK license to add risk based rules and all worked fine

Policy blocking users accessing uncategorised sites AND where risk level between 5-10 as shown below

Tested the policy successfully but when demo license was upgraded to a full license, users were no longer blocked even though rule should match

 

Cause

When license change occured, the risk based policies were removed from the tenant policy on the WSS proxy. In our case, the demo license was removed and a new full license added, causing the risk logic to be lost.

Resolution

Re-pushed the policy from Management Center

Whenever a license change impacting policies is make, always re-push the policy from UPE or the Portal.