Get notified on risk level change of a particular website

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

How to get notified on risk level change of a particular website

Website gets risk rating change frequently. What should be done to avoid getting it blocked because of risk rating?

Environment

Cloud SWG

Cause

Information on Threat Risk Levels assigned to websites in Cloud SWG (formely WSS)

Risk rating is calculated as per multiple factor including but not limited to age of the website, category, traffic level, global presence, history of spam/spyware detected from domain or IPs.

White Paper on need-for-threat-risk-levels 

Rating change periodically based on multiple factors.

 

Resolution

There is no way to get notified for the risk rating change of a URL/Domain. Risk rating changes are very dynamic.

Suggestion : Add business-critical URLs as Trusted destinations in

Portal Policy : WSS portal -> policy -> threat protection -> Rule G2.

UPE : Add in create appropriate allows rules.   

This would avoid impact with access denied in case of dynamic URL/Domain risk rating changes.

Additional Information

View risk rating of the URLs access which has ratings more than 5 example by creating this report and wss portal -> report center -> proxy  log -> actions 'run'