Trace Issues

Unanswered Question
Dec 11th, 2008

If I try a trace on a website which is allowed (say www.bbc.co.uk - News is allowed for all users/access policies) with a specific user whose group membership gets listed successfully and click trace, I get the following:

URL Check
Object Size: 243 bytes
MIME-Type: text/html
Policy Match
Decryption policy: None
Routing policy: Global Routing Policy
Access policy: Global Access Policy
Final Result
Request completed
Details: Transaction permitted
Trace session complete


However if I keep the user the same, but change the URL to something that is not permitted (say, www.sex.com - Adult is blocked for all access policies), I get this:
URL Check
Object Size: 187 bytes
MIME-Type: text/html
Policy Match
Decryption policy: None
Routing policy: Global Routing Policy
Access policy: Global Access Policy
Final Result
Request completed
Details: Transaction permitted
Trace session complete


If we change the IP to one that is in a specific access group, it is listed as blocked:

URL Check
URL Category: Adult/Sexually Explicit
WBRS Score: 3.0
Policy Match
Decryption policy: None
Routing policy: None
Access policy: Bypass_IP
Final Result
Request blocked
Details: Request blocked based on predefined URL category
Trace session complete


What's going on?! The website is actually blocked, but why doesn't the trace say so?
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
jowolfer Thu, 12/11/2008 - 21:45

Andrew,

Are you including an IP address in steps 1 and 2 above?

I recommened filing a support ticket and having technical support investigate the issue deeper.

AndrewR_ironport Fri, 12/12/2008 - 10:39

Unfortunately, yep, I am including a generic IP that's on our LAN. I'll open a ticket and see what they say!

Actions

This Discussion