Solved

Blue Coat preventing download "Your Request was categorized by Blue Coat Web Filter as 'pending'"

Posted on 2014-07-30
3
1,665 Views
Last Modified: 2014-08-13
Hello EE,

I have a user who in the past has been able to download this software we require for business production, but after the vendor made a web site redeployment we get the following when trying to download

ICAP Error
Your request was categorized by Blue Coat Web Filter as 'pending'
If you wish to question or dispute this result, please click here.

I submitted a dispute but am wondering can I do anything in my proxy to allow this through or do I need Blue Coat to actually do something?  I am a bit uncertain of how this works exactly.
0
Comment
Question by:operationsIT
  • 2
3 Comments
 
LVL 61

Expert Comment

by:btan
ID: 40231051
I saw that there is similar post (ID: 28486759) from you also, I shared the redirect for review for unrated url. Seems like in this post there is more info and to allow this while waiting for the site review returns, you may check out the below kb

Taking example to allow download based on request to specific url
https://kb.bluecoat.com/index?page=content&id=KB5115

How to use policy to prevent/block downloading of certain file types
https://kb.bluecoat.com/index?page=content&id=FAQ1971

There is even means to allow or deny based on file size (determined by HTTP field such as Content-Length)
https://kb.bluecoat.com/index?page=content&id=KB5133

Strangely, there is a close use case as you are experiencing. For example, if the unrated URL  is not categorized in the BCWF database, it is sent to WebPulse/DRTR for categorization. And in the midst if there is the same URL but appended with path and requesting an image file, which DRTR cannot analyze. Rather than waste time trying to download and analyze the image file (even if it is nonexistent) WebPulse simply returns a category of none.
https://kb.bluecoat.com/index?page=content&id=KB3002

For info, there is policy allowing access to sites even though category blocked - note that this pertains to policy logic where the Web Application rules override any Content Policy rules.
https://kb.bluecoat.com/index?page=content&id=KB5039
0
 
LVL 61

Expert Comment

by:gheist
ID: 40231457
So click there and contact bluecoat...
0
 
LVL 61

Accepted Solution

by:
btan earned 500 total points
ID: 40231784
in its own doing, this is actually "default" doing per se but it stated for first time

https://kb.bluecoat.com/index?page=content&id=KB3816

The "Pending" category will appear in the ProxySG logs when running DRTR or WebPulse in background mode.  By running in the background, the proxy administrator is essentially telling the ProxySG that they are unwilling to wait for a response from DRTR no matter how quick the response actually is.  As a result, the logging module needs to put something in the logs and as a result "Pending" is logged and the request is sent to DRTR (or WebPulse).  At that point the ProxySG has already moved on, but it is still listening for the response from DRTR.  When the response is received it is cached and subsequent requests to that URL are categorized from the DRTR cache on the proxy.  So when DRTR is configured in background mode, it is expected to see "Pending" the first time you visit any site that is not rated in the database regardless of how good DRTR will be at categorizing the content.
It suggested below.
3.)  In the Dynamic Categorization section, make sure that "Perform dynamic categorization" is checked.  
4.)  If "In the background" is selected, change the configuration to "Immediately"

and also "Exempt a Specific Domain From Content Filter Policy Check"
https://bto.bluecoat.com/sgos/ThreatPulse/ThreatPulseSolutionsWebGuide/Content/03Solutions/ManageContentFilter/pol_allow_CFdestURL_ta.htm
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

So you got the Conficker. You could go to each machine and run the eye chart test (http://www.confickerworkinggroup.org/infection_test/cfeyechart.html), but in a bigger environment, or if you prefer to work smarter and not harder, you need some …
Ransomware continues to be a growing problem for both personal and business users alike and Antivirus companies are still struggling to find a reliable way to protect you from this dangerous threat.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now