Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Occasionally blocked images.

Hi,

I have a problem with my WSA. Occasionally I get blocked images from different websites. For example www.onet.pl, I can see from accesslogs that url's for particular images are blocked because they are uncategorized,  here is the log:

1338371176.706 14 172.17.1.100 TCP_DENIED/403 0 GET http://m.ocdn.eu/_m/099ba62d22f9e0d4b773476131d32c8a,33,29,0-39-510-185-0.jpg - NONE/- - BLOCK_WEBCAT_11-q4TestPolicy-q4net-DefaultGroup-NONE-NONE-NONE <nc,-5.8,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,nc,-,"-","spam","Unknown","Unknown","-","-",0.00,0,-,"-","-"> - nc -

71176.705 22 172.17.1.100 TCP_DENIED/403 0 GET http://m.ocdn.eu/_m/cdca3ac43d141df7651494d1309e7843,45,29,0-0-752-441-0.jpg - NONE/- - BLOCK_WEBCAT_11-q4TestPolicy-q4net-DefaultGroup-NONE-NONE-NONE <nc,-5.8,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,nc,-,"-","spam","Unknown","Unknown","-","-",0.00,0,-,"-","-"> - nc -

1338371176.706 15 172.17.1.100 TCP_DENIED/403 0 GET http://m.ocdn.eu/_m/8deb5caed155599ba4f0d9cd346d6b46,33,29,0-98-398-224-0.jpg - NONE/- - BLOCK_WEBCAT_11-q4TestPolicy-q4net-DefaultGroup-NONE-NONE-NONE <nc,-5.8,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,nc,-,"-","spam","Unknown","Unknown","-","-",0.00,0,-,"-","-"> - nc -

I created custom url:  m.ocdn.eu  and "allow" it but that is not permanent solution.

Any help would be much appreciated.

Everyone's tags (2)
3 REPLIES
Cisco Employee

Occasionally blocked images.

From the logs, these request got blocked due Web Categorization. E.g. do you block non-categorized request or request with a score of -5.8?

-Stephan

New Member

Occasionally blocked images.

Thanks for replay,

We block non-categorized request.

Mariusz.

Cisco Employee

Occasionally blocked images.

Then this is the reason why. As of the accesslog entry, you can see the URl is not categorzied ("nc"), hence the request will be blocked if set to block. An custom category will always overwrite, so this is working as workaround. You may want to consider then to not block non-categorized URL's.

In case it is just about this specifiy URL, you can always as customer open a support case to let the page get categorized if feasable.

-Stephan

603
Views
0
Helpful
3
Replies