Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
mrodriguez
Explorer

Wrong category for a URL in URL filtering blade R81.10

Hi all!

When my costumer try to access to http://www.cype.net/versiones/2023/* the gateway categorizes it as Spyware / Malicious Sites and blocks the traffic according to a rule.

 
 

log.jpg

 

However in URL Categorization | Check Point Software Technologies this URL is categorized as Bussiness / Economy. Could anyone help me with this isssue? Thanks

0 Kudos
7 Replies
the_rock
Legend
Legend

Just add custom category like below above rule blocking it as high app risk. If you have appc/urlf ORDERED layer, just add it there. If its only one layer, then just make sure rule is, as I mentioned, above one that currently blocks it.

Andy

 

 

 

Screenshot_1.png

 

 

 

Screenshot_3.png

 

0 Kudos
mrodriguez
Explorer

Thank you very much. I have implemented another workaround, but I think that the right behaviour should be GW categorization matches with "Checkpoint Cloud" categorization. Isn't it?

0 Kudos
the_rock
Legend
Legend

I agree. You should request re-categorization if proof is sufficient. I checked Fortinet web filter and it appears right category.

Andy

 

 

Screenshot_1.png

0 Kudos
mrodriguez
Explorer

Thanks Again. I have checked this URl in Checkpoint URL Categorization and It shows this:

log.jpg

 

This why I don't understand what is  happening

 

 

0 Kudos
the_rock
Legend
Legend

Different vendors would categorize certain sites differently...based on below, it still shows Information Technology

https://www.fortiguard.com/webfilter

Andy

0 Kudos
Lloyd_Braun
Collaborator

I have a ticket open for a similar issue. The Check Point URL lookup site shows the category as Computers / Internet, but the Check Point log card is showing the same URL as Spyware / Malicious, High Risk, just like yours does.  Not sure if this is to be expected that the Check Point URL lookup site is not consistent with the realtime URLF blade for the Spyware / Malicious category set.

0 Kudos
PhoneBoy
Admin
Admin

This may be coming from ThreatCloud instead of the URL Filtering database.
Recommend checking the issue with TAC: https://help.checkpoint.com

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events