Web Gateway 7.1.5 Product Guide - McAfee

Different versions of URL category sets
Web filtering
URL filtering 6
When individual URLs are assigned to categories under the Global Threat Intelligence system, a
particular set of categories is used. You can configure which set you want to be used on the appliance.
An example of how sets differ from each other is category splitting for malicious sites. Category Set 3
has a single category named Malicious Sites. This category is kept in Category Set 4, but the categories
Browser Exploits and Malicious Downloads are added to enable a more refined categorizing.
After installing version 7.1 of the McAfee Web Gateway appliance (clean install), Category Set 4 is
implemented on the appliance.
After upgrading from a 7.0.x version to version 7.1, use of the category sets can require further action.
There are two cases:
• An older version uses Category Set 3 and one or more of the rules implemented in this version use
directly a category that is affected by a change under Category Set 4.
For example, a rule includes the following criteria:
URL.Categories contains Malicious Sites
Under Category Set 4, use of the Malicious Sites category has become ambiguous because it is
unclear whether the category itself should be used or one of the two categories that were split off
from it. You can then continue to use Category Set 3 on your appliance or explicitly migrate to
Category Set 4. A function for this is provided on the user interface.
If you migrate to Category Set 4, all rule sets that are affected by the migration appear on the
user interface marked in red color. You then need to modify these rule sets manually to resolve
conflicts arising from the migration. For example, you can select one of the two categories that
were split off from Malicious Sites to replace the former category in criteria where it is used
directly.
• An older version uses Category Set 3 and none of the rules implemented in this version use directly
a category that is affected by a change under Category Set 4.
For example, a category list contains the Malicious Sites category. Then the two categories that
were split off from it are added to the list.
Migration from Category Set 3 to 4 is then performed as part of the upgrade. No further action
regarding category sets is required from your side.
For information on how to migrate from Category Set 3 to 4, see Migrate to Category Set 4.
Migrate to Category Set 4
To migrate the URL category set that is used on the appliance from version 3 to 4:
1 Go to Configuration | Appliances.
2 On the toolbar of the settings pane, click Migrate URL Filter category set from version 3 to 4.
The set of URL categories used on the appliance changes from category set 4 to category set 4.
Rule sets that use modified or abandoned categories are displayed in red within the rule sets tree.
3 Review the rules in these rule sets and modify them as needed.
4 Click Save Changes.
McAfee Web Gateway 7.1.5 Product Guide 199