SMG 10.7.5 Webpulse categories missing

[Rudolf Torvenyi]

Hello, 
I have made the upgrade from 10.7.4 to 10.7.5. Everything is working but in the SPAM->customer-specific URL category settings I see this error 
"The file webpulse_categories.xml does not exist." and there are no categories..
SMG has access to the new Webpulse URLs that are listed in release notes :(

I have opened a support case... will see 

has anybody the same issue ?

thank you

Rudolf

[atb86]

Hi,

We are experiencing the same issue and has a case opened with support. I have provided them with a link to this discussion. Do you have a case number i can reference to? Ours is 32905040 for your reference.

[Rudolf Torvenyi]

Hi, 
my case nr is 32909314

Rudolf

[Yaser]

Hi

I have same problem after upgrade to 10.7.5. Do you find any solution?

[Rudolf Torvenyi]

Hi, 

I have a opened case but still didn't get any solution from them. I have only verified that my SMG is able to access the new webpulse URL's via telnet and curl and sent diag log from the SMG to support. 
Still waiting for a solution.

Rudolf

[Lincon Ruam]

Good morning Rudolf,

I would like to know if you have any feedback from the support team about this failure after the upgrade.

We use SMG in the company and are using version 10.7.4-13 currently.

I don't know if this is your case, but in the documentation I identified three improvements for our environment, they are:

1) This release also introduces WebPulse integration for URL category filtering. Administrators can now create content filtering policies to detect and manage spam and other unwanted content based on the URLs contained in mail headers and body content, leveraging Broadcom's best-of-breed URL categorization service.

2) 10.7.5 also includes changes to the Modify Clickable URLs action in Content Filtering policies. These changes allow users to modify only the URLs that match certain criteria, such as Spam URLs, Malicious URLs, or Unknown URLs.

3) A change in inbound mail processing that causes SMG to reject messages if the sender presents a client certificate that cannot be validated.

This webpulse integration feature was already configured in your SMG, wasn't it a new feature after the upgrade?

Are other SMG features working correctly?

Thanks.
Lincon Ruam

[Art_P]

This issue will be resolved in a future patch or version release, at which point the following article will be updated:
https://knowledge.broadcom.com/external/article?articleId=228646

------------------------------
---------------------------------------------
Strategic Support Engineer
* Integrated Cyber Defense Exchange
* Messaging
Symantec Enterprise Division
Broadcom Inc.
------------------------------

[Rudolf Torvenyi]

Hi Art_P, 
do you know the ETA of the patch ?

thanks

Rudolf

[alexander-smg]

Don't use webpulse just yet.  There, that's your patch.  J

[Rudolf Torvenyi]

you know, I would like to use it because its the only new feature in SMG after a year :D

[alexander-smg]

It’s a new feature that don’t work and you want it. ???

[Rudolf Torvenyi]

Alexander, 
don't you think the feature could help SMG to better detect unwanted emails ?
It works when you have the CC and Scanner on the same box.. I have two other SMGs where its working..

[alexander-smg]

No. Bifurcation helps with that.

[atb86]

This issue is now resolved with patch 10.7.5-290.

https://knowledge.broadcom.com/external/article?articleId=228646

[alexander-smg]

What else is fixed with this patch?

[Rudolf Torvenyi]

SMS appliance 10.7.5, patch #290
This patch addresses the following issues:

1. Messages with a blank subject are not processed when the policy
action Modify Clickable URLs is enabled.

2. When a URL is referenced at the end of the line in an email subject,
the policy action Modify Clickable URLs for Threat Isolation produces
an unresolvable URL.

3. Administrators are able to create a policy using an empty customer-
specific URL category list.

4. Administrators are able to delete all entries in a customer-specific
URL category list, even if the list is in use by an active policy.

5. The "update download" activity fails on systems running under Hyper-V.

6. Administrators are unable to edit the customer-specific URL Category
Settings on a system configured only as a Control Center.

[Farkas Attila]

Hello,

I applied the 10.7.5-290 patch, but the categories still missing.

The device accesses the required URLs.

https://techdocs.broadcom.com/us/en/symantec-security-software/email-security/messaging-gateway/10-7-4/webpulse-integration.html

• sp.cwfservice.net - tcp 80, 443 OK
• list.bluecoat.com - tcp 80, 443 OK
• webpulse.es.bluecoat.com - tcp 443 ok, tcp 80 not reachable
• subscription.es.bluecoat.comURLs - tcp 443 ok, tcp 80 not reachable

[alexander-smg]

Not good.  Check your firewall logs just to confirm pls.

[Rudolf Torvenyi]

Hello Lincon,

I have received a reply from Symantec support that this affects only BCC (blind carbon copy) deployments. It means when you have a separate Control Center and separate scanners. 
If you have CC and Scaner as all-in-one , the Webpulse categories will be there. 
So we have to wait for a patch as Art_P mentioned :((