False Malicious Website Alert

HFurnHFurn
in Technical Discussion

We keep getting Malicious Website Alerts for

Host: ocsp.digicert.com
Source: Firebox

But this is a valid company domain name.

Is there a way to have this domain re-evaluated or something?

Comments

  • james.carsonjames.carson Moderator, WatchGuard Representative

    Hi @HFurn
    What service are you getting these alerts for? (WebBlocker, DNSWatch, DNSWatchGO, or something else?)

    OCSP is the firebox checking that some digicert certificates are valid. Digicert is a CA (Certificate Authority.)

    -James Carson
    WatchGuard Customer Support

  • HFurnHFurn

    The TDR service

  • HFurnHFurn

    @james.carson it's the TDR service

  • james.carsonjames.carson Moderator, WatchGuard Representative

    Hi @HFurn
    I don't see anything for that specific IP, but there's account specific things that could be playing into this.

    If you haven't done so already, I'd suggest opening a support case -- one of our endpoint team members can help determine why this is happening and see what we can do to help.

    -James Carson
    WatchGuard Customer Support

Sign In to comment.