I have noticed that certain URLs with "Unverified" reputation gets blocked with "High risk" blockage/policy. Is this a normal behaviour?
Affected url exampel: http://www.jphyronline.com/
According "https://trustedsource.org/en/feedback/url" the above url is "Unverifed". Why is it returning "High risk" reputation for the users? (see attached). Usually reputations should be the same even on "trusted source" as MWG represents.
Go to Solution.
Hope you are doing well.
URL www.jphyronline.com is showing as Uncategorized URL and Unverified reputation in trustedsource.org.
URL www.jphyronline.com resolves to IP Addresses 22.214.171.124/126.96.36.199.
Categorization for 188.8.131.52 is falling under below Categories and Reputation as High Risk.
-Business - Malicious Sites- PUPs (potentially unwanted programs)
Categorization for 184.108.40.206 is falling under below Categories and Reputation as High Risk.
- Malicious Sites- Internet Services
In your URL filter profile by default an option named Do a forward DNS lookup to rate URLs is enabled due to which you are seeing that high Risk Categorization.
Policy > Settings > Engines > URL Filter
Please refer below link for information on this:-
I have reached to the concered team to get the URL www.jphyronline.com Categorized accordingly.
View solution in original post
Below is the response from concerned team:-
We have reviewed the URL, and based on the review, it will be categorized as 'Business' in the next GTI Database.The GTI Database with this change will be available for download from our public download servers in a few hours.
Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center
2821 Mission College Blvd.
Santa Clara, CA 95054 USA
Consumer Support | Enterprise Support | McAfee.com
Legal | Privacy | Copyright © 2019 McAfee, LLC