Jump to content


Photo

Website blocked - "cat-lookup-failed"

blocked

  • Please log in to reply
6 replies to this topic

#1 IT Hotline

IT Hotline
  • Members
  • 28 posts

Posted 29 September 2016 - 02:55 AM

Hello,

 

in the last time we get more and more problems with blocked pages.

 

The message in the weblog is "cat-lookup-failed".

A few secounds later the same site is working already.

 

Do you have any idea why this could happen?

 

Thanks,

Thomas

 

 



#2 DaNk75

DaNk75
  • Members
  • 10 posts

Posted 30 September 2016 - 08:00 AM

We had a lot of sites coming up "uncategorized", and then they would clear up on their own. Maybe that seems normal, but a lot of these sites are ones we use every day, and we never had a problem prior. this was going on for months. we decided to turn WCS off, and that fixed our issue. The web filter seems a little slower navigating through it, but I'll take that over the amount of phone calls we were getting.



#3 Michael Greig

Michael Greig
  • Members
  • 167 posts

Posted 30 September 2016 - 10:38 AM

I've noticed the same lately.  Per a prior question, the WSG is supposed to follow the allow/block setting for uncategorized sites when it can't perform a lookup, but mine are logged as blocked while uncagegorized are allowed for my users.

 

Per 10.1 release notes, it looks like this is going to be enhanced:

 

When a domain is unknown or part of a cached categorization entry in the Barracuda Web Security Gateway, the system will use the cached categorization results if the WCS response is lost or delayed. [BNYF-10793]



#4 DaNk75

DaNk75
  • Members
  • 10 posts

Posted 30 September 2016 - 10:50 AM

I've noticed the same lately.  Per a prior question, the WSG is supposed to follow the allow/block setting for uncategorized sites when it can't perform a lookup, but mine are logged as blocked while uncagegorized are allowed for my users.

 

Per 10.1 release notes, it looks like this is going to be enhanced:

 

When a domain is unknown or part of a cached categorization entry in the Barracuda Web Security Gateway, the system will use the cached categorization results if the WCS response is lost or delayed. [BNYF-10793]

 

Great news....Sounds like exactly what i need. Thanks for the update Michael.



#5 mheller

mheller

    Nobody

  • Moderators
  • 1,299 posts
  • LocationSan Jose, CA

Posted 04 October 2016 - 12:53 PM

We're actively addressing some of these categorization issues. If you have any on the latest 10.x firmware, please contact support for a case to be made !



Matthew Willson-Heller
Support Escalation Manager, US

Barracuda Networks Inc.
Phone: +1 408.342.5300 x5346
Fax: +1 408.342.1061
Web: www.barracudanetworks.com



#6 IT Hotline

IT Hotline
  • Members
  • 28 posts

Posted 29 August 2017 - 08:40 AM

Hello,

 

we are now on v12.0.0.019 but we also have this problems.:

http://picload.org/view/rwprrcgr/cat-lookup-failed.jpg.html

 

Any ideas?



#7 Stefan Holzweber

Stefan Holzweber
  • Barracuda Team Members
  • 36 posts

Posted 30 August 2017 - 02:58 AM

hello,

 

with firmware 9.x we implemented WCS to improve our categorization system

WCS downloads just a small DB with the top 2million domains every 24h

for all other domains the barracuda checks it live against or servers

when the category lookup against our servers does not work you get a "cat-lookup-failed" message

 

prior firmware 9.x the barracuda used the "content filter definition" database ("advanced" > "energize updates")

this is a local DB on the barracuda and includes all categorized domains

 

with firmware 9.x and higher WCS is enabled by default

 

I'm not aware that there are currently issues with the servers

so it might be that the connection to our servers gets blocked but for this we would need to take a look at the logs - please open a supportticket so we can verify this

 

if you wish you can also disable WCS and use the content filter definitions again

to disable WCS you need navigate to any tab under advanced e.g. "advanced" > " proxy" and add at the end of the URL &expert=1

then you get the "expert variable" tab under "advanced" where you can disable WCS

 

please feel free to open a supportticket if you have any further questions

 

regards from vienna

stefan