Updating the URL Reputation Hotspot Database and Local Reputation

Updating the URL reputation hotspot database and local reputation improves the detection capability and efficiency of URL reputation and malicious URLs.

Updating URL Reputation Hotspot Update

URL reputations reflect whether the URLs that users access are reliable. The access to the URLs with poor reputation will be blocked. One source of URL reputation is the URL reputation hotspot database.

The URL reputation hotspot database is launched by the sec.huawei.com. It is used to quickly obtain the latest URL reputation data from the cloud to the local predefined URL category cache, so that the device can block the access to untrusted URLs in a timely manner. The following part describes how to update the URL reputation hotspot database.

Configuration on the web UI
1. Choose Object > Security Profiles > URL Filtering.
2. Click Configure. On the page that is displayed, enable URL Reputation Hotspot Upgrade.
3. Optional: Set the frequency for updating the URL reputation hotspot database.
  By default, the URL reputation hotspot database is updated every 5 minutes.
4. Click OK.
Configuration on the CLI
- Scheduled Update
  1. Enable the URL reputation hotspot upgrade function.
    
    url-filter reputation update enable
    
    By default, the function is disabled.
  2. Optional: Configure an update interval for the URL reputation hotspot database.
    url-filter reputation update interval interval-time
    
    The default interval is 5 minutes.
- Immediate Update
  
  In some case, a signature database needs to be updated to the latest version immediately. If the scheduled update period does not expire, you can run the following command to immediately perform an update:
  
  update online hot-url-reputation

Updating Local Reputation

A malicious URL is a URL that contains malicious information. The URL filtering function blocks subsequent traffic based on the malicious URL information. One source of malicious URLs is the local reputation obtained from the HiSec Insight. The local reputation contains malicious URLs. The local reputation supports scheduled update to periodically update malicious URL information.

Configuration on the web UI
For configuration details, see Updating Local Reputation Using the Web UI.
Configuration on the CLI
For configuration details, see Updating Local Reputation Using the CLI.