Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 28 subscribers
  • Views 11251 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG Firewall v17 Recategorization not working

Alex Yao

I believe there is a bug with the custom url categories. I have a custom category created with both domains and keywords. I then have this category added to a user activity and blocked using a policy. It seems that Sophos shows the url categorized as that custom category for about an hour or so. Then something switches (without my interaction) and it disappears from the custom category. Diagnosis Url Categorization no longer shows the custom category listed, only the original category. I can temporary fix it by removing the category, removing the web policy, rebooting, adding the category and web policy. Then it will work for another couple hours before it occurs again.

This bug is extremely frustrating. Is this a common problem?



This thread was automatically locked due to age.
Parents
  • 0

    Hi,

    Yes, I also observed similar issue in which automatically custom category url blocked by default rule and during this issue url is not showing in custom category list when I check this website in check category through check category option.

    Even when I faced this issue i shared my screen with Sophos engineer to find out why this is happening. but they are not able to understand why this is happening. I wait for solution for 1 days and after that I restart firewall after that it works normally.

  • 0 in reply to Dilip Patel

    The workaround for me has been to just place the domains in keywords. This works, but it is not ideal.

  • 0 in reply to Alex Yao

    I'd like to look into this, if anyone has reproduction steps or more info please let me know in this thread or in PM.  Ideally, if you had a box in this bad state that you would allow us to look at.

Reply Children
  • 0 in reply to Michael Dunn

    I don't know exactly what the reproduction steps are. I will explain what I did that lead up to this issue.

    I created a freshly installed VM on VMware ESXi. Next, create a category and either import or type some domains into the category. Add the category to a new user activity and block this user activity using a web policy. Eventually (not sure exactly how long), the firewall will no longer categorize some domains in the category. In my case, mobfox.com was one of those domains that was no longer categorized. Some domains will remain categorized, but some will not. I'm not sure how it decides what will remain categorized and what will not. Looking up the domain in Diagnostics->URL Category Lookup will no longer show the category for that particular domain.