alert for ocsp.digicert.com by URL Threat Filter

Options
Mario
Mario Posts: 104  Ally Member
First Anniversary 10 Comments Friend Collector Zyxel Certified Network Engineer Level 1 - Security
edited April 2021 in Security
Hi

I just noticed some alerts about ocsp.digcert.com from the URL Threat filter


When I manual check the url, ther is no threat found

Why do I have this alert, when the URL looks OK?

Greetings
Mario


All Replies

  • Jeremylin
    Jeremylin Posts: 166  Master Member
    First Anniversary First Answer First Comment
    Options
    I checked on my ATP200, and the URL did not hit URL Threat filter.
    If you add the URL in the white list does the issue still occur?
    My signature version 1.0.0.20201126.0.
  • Mario
    Mario Posts: 104  Ally Member
    First Anniversary 10 Comments Friend Collector Zyxel Certified Network Engineer Level 1 - Security
    Options
    Hi Jeremylin
    Thanks for you feedback. Today it looks OK, no alerts about it in the logs.
    But it's still strage, that I get an alert for an URL that is no in the filter :# 

    Mario
  • RichP
    RichP Posts: 6
    First Anniversary Nebula Gratitude First Comment Zyxel Certified Network Administrator - Nebula
    Options
    Yes -- I started getting this last week as well.  The A/V software is not flagging it as a problem.  I am assuming that is is a false positve.  Is anyone at Zyxel looking at why it is being flagged?

Security Highlight