Solved

Blue Coat preventing download "Your Request was categorized by Blue Coat Web Filter as 'pending'"

Posted on 2014-07-30
3
1,758 Views
Last Modified: 2014-08-13
Hello EE,

I have a user who in the past has been able to download this software we require for business production, but after the vendor made a web site redeployment we get the following when trying to download

ICAP Error
Your request was categorized by Blue Coat Web Filter as 'pending'
If you wish to question or dispute this result, please click here.

I submitted a dispute but am wondering can I do anything in my proxy to allow this through or do I need Blue Coat to actually do something?  I am a bit uncertain of how this works exactly.
0
Comment
Question by:operationsIT
  • 2
3 Comments
 
LVL 62

Expert Comment

by:btan
ID: 40231051
I saw that there is similar post (ID: 28486759) from you also, I shared the redirect for review for unrated url. Seems like in this post there is more info and to allow this while waiting for the site review returns, you may check out the below kb

Taking example to allow download based on request to specific url
https://kb.bluecoat.com/index?page=content&id=KB5115

How to use policy to prevent/block downloading of certain file types
https://kb.bluecoat.com/index?page=content&id=FAQ1971

There is even means to allow or deny based on file size (determined by HTTP field such as Content-Length)
https://kb.bluecoat.com/index?page=content&id=KB5133

Strangely, there is a close use case as you are experiencing. For example, if the unrated URL  is not categorized in the BCWF database, it is sent to WebPulse/DRTR for categorization. And in the midst if there is the same URL but appended with path and requesting an image file, which DRTR cannot analyze. Rather than waste time trying to download and analyze the image file (even if it is nonexistent) WebPulse simply returns a category of none.
https://kb.bluecoat.com/index?page=content&id=KB3002

For info, there is policy allowing access to sites even though category blocked - note that this pertains to policy logic where the Web Application rules override any Content Policy rules.
https://kb.bluecoat.com/index?page=content&id=KB5039
0
 
LVL 61

Expert Comment

by:gheist
ID: 40231457
So click there and contact bluecoat...
0
 
LVL 62

Accepted Solution

by:
btan earned 500 total points
ID: 40231784
in its own doing, this is actually "default" doing per se but it stated for first time

https://kb.bluecoat.com/index?page=content&id=KB3816

The "Pending" category will appear in the ProxySG logs when running DRTR or WebPulse in background mode.  By running in the background, the proxy administrator is essentially telling the ProxySG that they are unwilling to wait for a response from DRTR no matter how quick the response actually is.  As a result, the logging module needs to put something in the logs and as a result "Pending" is logged and the request is sent to DRTR (or WebPulse).  At that point the ProxySG has already moved on, but it is still listening for the response from DRTR.  When the response is received it is cached and subsequent requests to that URL are categorized from the DRTR cache on the proxy.  So when DRTR is configured in background mode, it is expected to see "Pending" the first time you visit any site that is not rated in the database regardless of how good DRTR will be at categorizing the content.
It suggested below.
3.)  In the Dynamic Categorization section, make sure that "Perform dynamic categorization" is checked.  
4.)  If "In the background" is selected, change the configuration to "Immediately"

and also "Exempt a Specific Domain From Content Filter Policy Check"
https://bto.bluecoat.com/sgos/ThreatPulse/ThreatPulseSolutionsWebGuide/Content/03Solutions/ManageContentFilter/pol_allow_CFdestURL_ta.htm
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

PREFACE The purpose of this guide is to explain what the SEPC Status Utility is and how it works. I have written the utility using AutoIt and have included the source code for your review. You are welcome to modify the code to your liking, but I wi…
UPDATE - 6/15/2011 Added support for Release Update 6 Maintenance Patch 2 Point Patch 1 (RU6 MP2 PP1). Fixed a defect in the username field that was hard-coded to look for a specific domain (left over code from testing). This release will be the …
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now