This morning a few users are triggering a web filter alert. Pages they
are visiting such as msn.com or yahoo.com shows compromised host
detected. Referring to loadm.exelator.com. I since then blocked the url
from our end to prevent access to it. Ran ...
We are on 6.4.7. All policies, web filters are already on flow mode. The
only temporary fix is to modify our deep inspection profile to allow
expired certificates.