Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Updated the wording and changed some of the formatting

Any false positives will need to be reported to IT-EntSec queue.

The Enterprise Security Team turned on blocking specific team enabled the Internet firewall to block specific known categories of dangerous websites at the firewall level beginning September 2017. If a user anyone is asking wondering why a website is being blocked have them look at the “Category” field on the page they have an issue with, then read them the following definition for the type of content being blocked.If a user is certain that they need to access a site that has been improperly categorized and needs to be un-blocked submit a ticket to the Enterprise Security Team noting the address and what the website is used for. This happens most often when a website is new or recently changed. The request for change of category takes up to 24 hours once we submit it.block page to find out how the website is classified.

Category definitions for blocked content

Command and Control:

...

 URLs and domains used by malware or compromised systems to surreptitiously communicate with an attacker’s remote server to receive malicious commands or exfiltrate data.

Malware:

...

 Sites containing malicious content, executables, scripts, viruses, trojans, and code.

Not Resolved:

...

 Indicates that the website was not found in the local URL filtering database and the firewall was unable to connect to the cloud database to check the category.

Parked:

...

 URLs which host limited content or click-through ads which may generate revenue for the host entity but generally do not contain content that is useful to the end user and has the potential to contain malicious content.

Phishing:

...

 Seemingly reputable sites that harvest personal information from its users via phishing or pharming

If you are certain that a site that has been improperly categorized or the issue that caused it to be placed in one of these categories has been resolved a ticket will need to be created and assigned to the Enterprise Security team. Please include all of the information on the block page, the website function/purpose, and why it should be reclassified. This happens most often when a website is new or recently changed. The request to change the category of a website can take up to 1 business day to get a response back from the vendor once we submit it.

For additional information see Web Page Blocked in Accordance with University Policy

...