SEP Mobile users receive "Unwanted Network Content" or category "-99" alerts for legitimate sites

Products

• Endpoint Protection Mobile

Issue/Introduction

• Users receive "Unwanted Network Content" popup notifications on iOS devices.
• Alerts in logs show category code -99 (e.g., skycure_web_filtering.categories. -99: www.[SITE].com).
• Notifications occur on legitimate, trusted sites such as Symantec, Microsoft, or Akamai.
• These events may not appear in the ICDm Investigation page.

Example:

Environment

Symantec Endpoint Protection (SEP) Mobile

Cause

The "-99" category alerts are not threat detections. They are local records generated when a website successfully triggers an allow-list rule. In certain app versions, these allow-list matches were incorrectly triggering user-facing notifications.

Resolution

These specific notifications can be safely ignored as they do not indicate a security risk.

To resolve the behavior and suppress these popups, upgrade the SEP Mobile iOS app to version 6.26.0 or later. This version contains a code fix that prevents allow-list events from generating user notifications.

Additional Information

Until the app can be updated, users can dismiss the notifications. There is no impact on device security or connectivity.