Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

Category inheritance issue where the parent domain and a specific path within the domain were categorised differently.

  1. Last updated
  2. Save as PDF

Product: SWG (On-Prem) | SWG (Cloud)

Summary:

The TrustedSource database uses categories to organize similar types of URLs into groups based on the content of the webpage. For example, www.skyhighsecurity.com, www.mcafee.com and www.webwasher.com are grouped into the Business category. Sometimes, one URL is in more than one category because of overlapping content.

Problem: 

Site category is assigned to an full URL path but not to the host domain. 

Example:

demo.acme.com - un-categorised
demo.acme.com/auth/login - categorised as “Information Security”

Cause:

Trellix can categorise at both a host and at full URL level.  This allows for sites with mixed content that may vary from the main host.  If a re-categorisation request for a URL is made, this may be checked and a specific URL category applied.  The host may then go for a fuller review and re-categorised separately.

Solution:

If you are expecting an entire host to be reclassified, it would be better to only reference the host in the classification request