cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted

Unverified reputation get Blocked with "High risk" policy

Jump to solution

Hello, 

 

I have noticed that certain URLs with "Unverified" reputation gets blocked with "High risk" blockage/policy. Is this a normal behaviour?

Affected url exampel: http://www.jphyronline.com/

According "https://trustedsource.org/en/feedback/url" the above url is "Unverifed". Why is it returning "High risk" reputation for the users? (see attached). 

Usually 2019-01-21 11_54_34.pngreputations should be the same even on "trusted source" as MWG represents. 

 

Regards. 

Labels (1)
1 Solution

Accepted Solutions
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: Unverified reputation get Blocked with "High risk" policy

Jump to solution

Hi ,

Hope you are doing well.

URL www.jphyronline.com  is showing as Uncategorized URL  and Unverified reputation in trustedsource.org.

 

URL www.jphyronline.com  resolves to IP Addresses 194.9.94.86/194.9.94.85.

 

Categorization for 194.9.94.86  is falling under below Categories and Reputation as High Risk.

-Business 
- Malicious Sites
- PUPs (potentially unwanted programs)

 

Categorization for 194.9.94.85  is falling under below Categories and Reputation as High Risk.

 

- Malicious Sites
- Internet Services

 

 

In your URL filter profile by default an option named  Do a forward DNS lookup to rate URLs is enabled due to which you are seeing that high Risk Categorization.

 

Policy > Settings > Engines > URL Filter

    • Do a forward DNS lookup to rate URLs:
      • This setting will check the IP of an uncategorized URL and return category/rating information based on what it finds, in the local and cloud database.

 

Please refer below link for information on this:-

 

https://community.mcafee.com/t5/Documents/Web-Gateway-URL-Categorization-Submissions-to-TrustedSourc...

 

 

I have reached to the concered team to get the URL www.jphyronline.com   Categorized accordingly.

 

 

Regards

Alok Sarda

View solution in original post

2 Replies
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: Unverified reputation get Blocked with "High risk" policy

Jump to solution

Hi ,

Hope you are doing well.

URL www.jphyronline.com  is showing as Uncategorized URL  and Unverified reputation in trustedsource.org.

 

URL www.jphyronline.com  resolves to IP Addresses 194.9.94.86/194.9.94.85.

 

Categorization for 194.9.94.86  is falling under below Categories and Reputation as High Risk.

-Business 
- Malicious Sites
- PUPs (potentially unwanted programs)

 

Categorization for 194.9.94.85  is falling under below Categories and Reputation as High Risk.

 

- Malicious Sites
- Internet Services

 

 

In your URL filter profile by default an option named  Do a forward DNS lookup to rate URLs is enabled due to which you are seeing that high Risk Categorization.

 

Policy > Settings > Engines > URL Filter

    • Do a forward DNS lookup to rate URLs:
      • This setting will check the IP of an uncategorized URL and return category/rating information based on what it finds, in the local and cloud database.

 

Please refer below link for information on this:-

 

https://community.mcafee.com/t5/Documents/Web-Gateway-URL-Categorization-Submissions-to-TrustedSourc...

 

 

I have reached to the concered team to get the URL www.jphyronline.com   Categorized accordingly.

 

 

Regards

Alok Sarda

View solution in original post

McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 3

Re: Unverified reputation get Blocked with "High risk" policy

Jump to solution

Hi,

Hope you are doing well.

Below is the response from concerned team:-

 

We have reviewed the URL, and based on the review, it will be categorized as 'Business' in the next GTI Database.

The GTI Database with this change will be available for download from our public download servers in a few hours.

 

 

Regards

Alok Sarda

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community