topic Re: Low risk website in Firewall and Security Management

Low risk website

GigaYang — Thu, 15 Feb 2024 12:36:56 GMT

We have find URL Filtering has many low-risk websites access log. But many of them are websites that are commonly used in work, such as redhat.com...adobe.com...

How can I check to know whether Check Point has used these websites? The reason why the website is classified as a low risk website.

Thank you.

Re: Low risk website

Lesley — Thu, 15 Feb 2024 13:05:37 GMT

Copy paste from other topic:

I'm fairly certain we don't publish the specific technical parameters other than the descriptions below.

With that said you can check example apps / sites and request recategorization here: https://urlcat.checkpoint.com/urlcat/main.htm

https://appwiki.checkpoint.com

Risk Level

5 - Critical: Can bypass security or hide identities.

4 - High: Can cause data leakage or malware infection without user knowledge.

3 - Medium: Can be misused and cause data leakage or malware infection.

2 - Low: Potentially not business related, but low risk.

1 - Very Low: Usually business related with no or very low risk.

Comparatively for other Threat Prevention blades we have:

sk116254: IPS, Anti-Bot, and Anti-Virus Protections' Severity, Performance, and Confidence Levels

https://threatwiki.checkpoint.com

Re: Low risk website

the_rock — Thu, 15 Feb 2024 13:41:55 GMT

Not sure that info is available to customers, so what @Lesley mentioned is also best I know of. But, if I were you, I would certainly mention it to your local Sales person, maybe they can push it further through TAC, not sure, but worth a try.

Best,

Andy

Re: Low risk website

George_Ellis — Tue, 12 Mar 2024 12:44:42 GMT

Ditto. We have an ongoing case with RnD.

Re: Low risk website

George_Ellis — Mon, 25 Mar 2024 13:14:08 GMT

Lesley, you are missing how wide spread this problem is. I would need to add most of the business internet to remove Low Risk. This category is getting misaligned.

Re: Low risk website

the_rock — Mon, 25 Mar 2024 13:51:42 GMT

Totally agree with that.

Andy

Re: Low risk website

Lesley — Mon, 25 Mar 2024 13:59:38 GMT

That is up to the starter of the topic. Due the lack of reply I am not sure how relevant it is for the starter.

Re: Low risk website

Chris_Atkinson — Mon, 25 Mar 2024 14:03:35 GMT

If this issue persists for you please report it via TAC.

Re: Low risk website

Chris_Atkinson — Tue, 26 Mar 2024 13:20:57 GMT

@George_Ellis

Could you please share your SR number with me via private message or similar?