Skip to main content

Identify Unclassified Traffic in Linewize Filter

Updated
This article is for IT Support. 

Unclassified websites are not assigned a Category or Signature in Linewize Filter. These websites can pose a risk because new and obscure domains are often a source of malware, phishing or illegal content. In these reports, you’ll see “Uncategorised Website”. You can contact Linewize Support to suggest a Signature or Category, or use Linewize Filter to suggest a website Category.

Identify Unclassified Traffic

You can use two reports, Apps and Websites and Connections, to identify unclassified traffic in Linewize Filter.

Unclassified Traffic in the Apps and Websites Report

The Apps and Websites report shows a list of applications and websites accessed by users in your set time period. Sorting by the Category column heading will show applications and websites with no Category and are therefore Unclassified.

  1. Go to Statistics > Apps and Websites.
  2. Set your time period using the date picker in the Navigation Bar.
  3. Select the Category column title until blank results are displayed at the top of the Category column.
  4. (Optional) Select the new tab icon to the right of the website address to open the website in a new browser tab. Copy and paste any websites you are concerned about into a text file for later reference.
  5. Go to Filtering > Content Filtering and select Category Search.
  6. Enter the website.
  7. Select Search.

Unclassified Traffic in the Connections Report

  Important

This feature only works if your school uses a Linewize Filter Appliance.

The Connections report shows all active device connections. Sorting by the Application column heading will show applications and websites with no Category and are therefore Unclassified. The Realtime data allows you to investigate all connections, including unclassified "noise" (your network infrastructure, DNS, CDN, and communications services).

  1. Go to Statistics > Realtime > Connections.
  2. Select the Application column title until blank cells are displayed at the top of the list.
  3. Scroll down the list looking for unusual Destination IP addresses, but you may choose to ignore:
    • DNS servers and your network infrastructure in the Destination column.
    • Connections using the UDP protocol (communications data), because the parent app or website is usually also listed in another line with a category.
  4. (Optional) Select the right-arrow icon at the end of any row to see Connection Details, including the device identity and amount of data.
  5. (Optional) Select Export Report if you would like to investigate the activity from a spreadsheet.