Controller Based WLANs

Why the URL Filter doesn't block the first request when the WebCC is enabled?

by ‎11-25-2015 04:05 PM - edited ‎11-25-2015 04:05 PM
Q:

Why the URL Filter doesn't block the first request and subsequent packets are blocked when the WebCC is enabled?



A:

Why the URL Filter doesn't block the first request and subsequent packets are blocked when the WebCC is enabled?

 

The datapath cache is empty to begin with and gets build based on the traffic pattern. We can verify this with "show datapath web-cc" command. Initially, this table will be empty and gets build over period of time.

 

# show web-cc stat

 

Web Content Classification Statistics

-------------------------------------

Name               Counter

----               -------

URL miss from sos              0

Database hit                   0

Cloud lookup                   0

Cloud response                 0

RTU updates                    0

DB Entries                     0

 

When the controller encounters an URL (like cnn.com), a look up is done in the datapath cache and if there's a hit, the configured policy will be applied. However, if the cache entry is not found, an URL query will be sent to control plane/cloud to learn the entry. In the mean time, the data packet will be forwarded which make the clients to get an access to the URL for the first time.

This will happen for every new URL, and the first miss populates the cache entry and the subsequent packets will get blocked.

#show web-cc stats

 

Web Content Classification Statistics

  -------------------------------------

  Name               Counter

  ----               -------

  URL miss from sos          38734

  Database hit                3226

  Cloud lookup               35508

  Cloud response             35506

  RTU updates                    0

  DB Entries               1000000

 

 

 

 

 

Search Airheads
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.