Guest

Preview Tool

Cisco Bug: CSCuq27892 - WSA Custom URL not filtering properly with decryption policy and EUN

Last Modified

Jun 29, 2018

Products (1)

  • Cisco Web Security Appliance

Known Affected Releases

7.7.0-608 7.7.0-753 7.7.5-190 7.7.5-194 8.0.5-079 8.0.6-053 8.0.6-078

Description (partial)

Symptom:
If the policy is blocking a pre-defined category and only allow one or some sites with the custom URLs, even the URL is matching the custom URL which should be allowed but the traffic was dropped by the decryption policy:

With the pre-defined category blocked and allowed with the custom category and EUN is on.

The traffic was still being scanned by the pre-defined category and the traffic was not allowed as expected

Conditions:
- The whole pre-defined category is blocked
- The site in the category is allowed by custom URL
- EUN is enabled
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.