Troubleshooting Incorrectly Categorized URLs

Products

• Web Isolation Cloud

Issue/Introduction

Troubleshooting Incorrectly Categorized URLs

Resolution

For the issue reported, please share the evidence of what you believe to be incorrectly categorized URLs. Complete the troubleshooting steps below and send us the snippet of the URL categorization, for validation. 

1. Reproduce the issue by browsing the same website(s).
2. In the activity log, filter traffic based on tab_id field. (tab_id is same as Ticket ID observed in block page)

3. Under Categories, find the rule responsible for blocking the webpage.
4. Follow the URL to GIN (https://sitereview.bluecoat.com/#/), the URL categorization vendor that Symantec

Threat Isolation uses and types the URL of the misclassified website.

Please, collect the following diagnostics and upload them to the case, for investigation.

• <URL>/fgdiag for a test URL.
• Activity log
• HAR file  - https://knowledge.broadcom.com/external/article/170836/obtain-a-har-file.html
• Console logs from the dev. tool
• output for sudo fgcli service status -v from the fireglass Proxy and the TIE
• /var/log/fireglass_monit.log from the management, fireglass proxy, and the TIE

Note: Threat Isolation utilizes the same URL categorization principles, and WebPulse, as the Symantec ProxySG.