search cancel

WSS Users can access sites that should be blocked after GEO and Risk license re-applied


Article ID: 223933


Updated On:


Web Security Service - WSS


WSS configured with UPE

Customer has tested a demo version of GEO and RISK license to add risk based rules and all worked fine

Policy blocking users accessing uncategorised sites AND where risk level between 5-10 as shown below

Tested the policy successfully but when demo license was upgraded to a full license, users were no longer blocked even though rule should match



When license change occured, the risk based policies were removed from the tenant policy on the WSS proxy. In our case, the demo license was removed and a new full license added, causing the risk logic to be lost.


Re-pushed the policy from Management Center

Whenever a license change impacting policies is make, always re-push the policy from UPE or the Portal.