Symptoms
In some ocassions Panda Cloud Internet Protection policies do not work as expected.
For example, a user sends web mail file attachments in spite of existing a specific rule to prevent attachments.
Explanation
- Check if the end user’s web mail application uses encryption. If PCIP is not configured to inspect SSL content,web mail and file attachments sent via https://mail.google.com, for example, it will pass straight through PCIP with no enforcement of policy.
- Compare the end user’s Group membership in LDAP and PCIP. It is possible that an individual’s group membership changed in LDAP but it was not synched with PCIP. Go to Administration - User Authentication - Synch Now to import the latest user and group information.
- Ensure that Authentication is enabled (Administration ? Internet Gateways). If Authentication is disabled, PCIP only enforces policies applied globally to Locations.
- In the case of URL filtering rules, check if the blocked (or allowed) URL is classified into more than one category. It is possible that a rule to block one category may be in conflict with another rule to allow a second category under which the URL falls. Go to Analyse and drill down to the affected end user; observe the categories listed in the URL Category column.
