Function Testing of Malicious URL Detection in IAG

How to test the functionality of Malicious URL Detection in IAG (e.g. with example harmless malicious site)?

Thanks but we want to have the concret steps, not the plan.

HiHi,

Since I couldn't find the info you need, I asked DeepSeek for help. Check out the testing concepts below for reference. Be cautious and prepared before starting your testing.

To Testing the Malicious URL Detection:

(Please Ensure the Sangfor IAG is properly configured with malicious URL detection enabled & Verify that the URL filtering database is up-to-date.)

1. Obtain a known malicious URL

(e.g., from threat intelligence feeds like:

  - [PhishTank](https://www.phishtank.com/)

  - [URLhaus](https://urlhaus.abuse.ch/)

  - [Open Threat Exchange (OTX)](https://otx.alienvault.com/)

2. Try accessing the URL from a client behind Sangfor IAG.

3. Check if Sangfor IAG blocks the request and logs the event.

- Expected Result:

- The malicious URL should be blocked (e.g., with a warning page).

- The IAG logs should show the blocked attempt under security logs.

- Log the event in security logs.