Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
msolo
New Contributor

Site catagorization mismatch

This morning was looking through some of the blocked traffic. Screenshot attached.

 

If I am understanding this properly, this is a blocked request to pixel.rubiconproject.com with a category of "malicious websites", but when I manually run that domain http://www.fortiguard.com/ip_rep/index.php?data=pixel.rubiconproject.com, it comes back with "Category: Information Technology".  Why would that be happening?

Thanks

3 REPLIES 3
netmin
Contributor II

Hi and welcome,

 

very likely you have enabled rating by url and ip and it is the more worse rating (of the ip) that takes precedence.

msolo
New Contributor

That looks like it is the case.  Thanks

msolo
New Contributor

Having this issue again, and this time checked both the IP and the Domain

IP=72.21.91.121 - classification "Web hosting"

Domain=www.gravatar.com - classification "Information Technology"

 

The event though is coming back with a category of "Freeware and Software Downloads"

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors