An update on Symantec Intelligence Services and WebFilter Category and Application have been applied. (ALERT2658)
Upon finishing Phase 1 of the category update, some customers reported issues that end-users were blocked going to news and finance sites. All customers who are using any of the categories affected by a rename in the WebPulse Category Update could be affected by this change.
A root cause and fix has been identified by WebPulse team. Currently WebPulse team is rolling out the final Phase 1 update
Technical Guidance for Customer:
Customers who have manually updated their policy to handle the category rename have no further action. The situation has been effectively resolved for them.
Customers who have yet to update their policy to handle category renames will need to do so manually. After which, no further action will be required.
Once correct version of the content filter database is being published this alert document will be update with the build number for verification.
Potential Impact for customer while a fix is in progress:
Customers who employ a default deny policy will be most at risk for an outage. Specifically, customers who blacklist all and whitelist categories that were affected by the update. Because of the category references not being recognized in policy, they will default to block.
Any customer referencing a renamed category may have policy that does not match.
Currently all database download requests are suspended. Customer are advised not to purge the exiting database which is present on the ASG / ProxySG / SGVA.
At 20:00:00 UTC August 15th , 2019 a fixed version of content filter database has been published. Any database version number greater than 392270500 contains appropriate fix for Phase 1 changes.
Action Required for Customer:
Verify that your appliance has received a content filter database version which is higher than 392270500.
If a higher version databases is received on the appliance, manually update current policy to handle renamed URL Category, URL Application Name as per change details referred in ALERT2658
Subscribing will provide email updates when this Article is updated. Login is required.