Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Web Reputation Services (WRS) Lookup process in Officescan (OSCE)

    • Updated:
    • 17 Oct 2016
    • Product/Version:
    • OfficeScan 10.6
    • OfficeScan 11.0
    • OfficeScan XG.All
    • Platform:
    • Windows 2003 Compute Cluster Server
    • Windows 2003 Datacenter Server
    • Windows 2003 Datacenter Server Edition 64-bit
    • Windows 2003 Enterprise Server
    • Windows 2003 Standard Server Edition
    • Windows 2003 Standard Server Edition 64-bit
    • Windows 2003 Storage Server
    • Windows 2003 Web Server Edition
    • Windows 2008 Datacenter Server
    • Windows 2008 Datacenter Server Edition 64-bit
    • Windows 2008 Enterprise Server
    • Windows 2008 Enterprise Server Edition 64-bit
    • Windows 2008 Standard Server Edition
    • Windows 2008 Standard Server Edition 64-bit
    • Windows 2008 Storage Server
    • Windows 2008 Web Server Edition
    • Windows 2008 Web Server Edition 64-bit
    • Windows 7 32-bit
    • Windows 7 64-bit
    • Windows Vista 32-bit
    • Windows Vista 64-bit
    • Windows XP Professional
    • Windows XP Professional 64-bit
Summary

This article provides the following information:

  • Reason why WRS have different responses when surfing internet sites using URLs or IP addresses
  • Detailed description on how WRS works
  • WRS score ranges
  • Protocol that WRS uses
  • Process to submit requests to reclassify specific sites
Details
Public

If a requested URL cannot be rated by a local database and memory cache search, then the Trend Micro URL Filtering Engine (TMUFE) will request a rating from the Trend Micro Rating Server via an HTTP request with an encrypted message.

TMUFE caches the response from the server to enhance the performance of the in-the-cloud query. Afterwards, TMUFE parses the results and fills then in the returning rating data structure. If the requested URL does not exist in the database, then WRS will return a score of "71" or "Unrated/Unknown" rating (61 before 3/26).

After receiving the rated score from TMUFE, the product will now take the following actions:

  • Blocked: SCORE < Threshold
  • Allowed: SCORE > Threshold

Trend Micro URL Filtering Engine Workflow

Click image to enlarge

Web Reputation Scores
Web Reputation ScoreSafe RatingThreat Details
81~100SafeNo known or potential threats
66~80SuspiciousAssociated with spam or has a history of being compromised
51~65Highly SuspiciousPossibly a phishing page or a potential source of malware or spyware
0~50Highly SuspiciousPossibly a phishing page or a potential source of malware or spyware
71UnratedUnrated page
Security SettingDescription
High

Blocks pages that are:

  • Verified to be fraudulent or known sources of threats
  • Suspected to be fraudulent or possible sources of threats
  • Associated with spam or possibly compromised
  • Unrated pages
Medium

Blocks pages that are:

  • Verified to be fraudulent or known sources of threats
  • Suspected to be fraudulent or possible sources of threats
Low

Verified to be fraudulent or known sources of threats

Considering that there are more than 35 million URLs in the WRS database, which are rated from machine analysis and human manipulation by different teams, it may be possible that there is a few URL rating errors.

 
If the IP address is not found in the WRS database or has incorrect rating, then please submit the IP to
Premium
Internal
Rating:
Category:
Configure
Solution Id:
1056324
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.