Configure Error Handler for File Scanning Interruptions in Web Gateway
The Error Handler manages issues that occur during file scanning for viruses, allowing you to either rely on default settings or configure custom responses based on specific error conditions. If an error occurs, the policy execution will stop, and a new trigger will be created. The Error Handler will manage this trigger, and once it is complete, the policy may resume. By using rule sets in the Error Handler section, you gain control over how Web Gateway responds when errors occur during web traffic processing.
A separate Error Handler Policy tree is available in the user interface, in addition to the standard web policy rule set tree used for web filtering
Access the Error Handler
To access the Error Handler page:
- Go to Policy > Web Policy.
- In the rule sets panel, select the Error Handler tab.
- Expand the Default Error Handler rule set to view the nested rule sets.
- Select a nested rule set to view its rules in the right pane.
For Existing Rule Builder View Users
- Existing users will see a splash banner introducing the Error Handler feature, along with a new icon for managing related policies.
- Click Get started.
- You can Publish your changes or Discard them. You can also Review changes and publish the changes later or still discard them if needed.
- The Default Error Handler includes predefined rule sets for:
- Anti-Malware Engine Errors: This ruleset identifies failures from anti malware engine processes during file scans. It shows three custom rules.
- Archive Opener Limits Reached: This ruleset flags events where archive files exceed limits during scanning. It shows three custom rules.
- Catch All: This rule applies if no other rule is triggered
The Catch All rule set:- Cannot be deleted.
- Cannot be moved using drag-and-drop.
- Offers actions such as Continue, Block, or Use Skyhigh Error Handlers.
-
The Default Error Handler operates solely in the error cycle, not the usual request, response, or embedded cycles. As a result, no triggers are shown for these rule sets.
NOTE: The Default Error Handler:
- Is always present for new users.
- Cannot be deleted.
- Can be cloned or edited (except for the Catch All rule).
To add a New Error Handler:
- Click New Error Handler in the top-right corner.
- A new handler will be created with a default Catch All rule set.
For Existing Users
Existing web policy users will not automatically see the Default Error Handler. Instead, a Get Started banner will appear if they choose to enable the feature.
- You can manually add the default rule sets from the library.
- However, they cannot delete the Default Error Handler or the Catch All rule once added.
- Because the Default Error Handler is not automatically included in every policy, a banner notification will continue to appear until you activate and publish the handler.