How severity is assigned to suspicious activity

The Forcepoint URL Database assigns a severity level to threat-related events based on the category assigned to the request.

• Severity levels are mapped to categories in the Forcepoint URL Database, and may change when the database is updated.
• Forcepoint URL Filtering subscriptions do not include all categories with High and Critical severity levels. These categories may appear on the Threats dashboard, but cannot be managed in category filters.

Click the Severity Mapping link near the top of the Threats dashboard for a current list of the categories that have an associated severity ranking. The list indicates any categories that are not available for policy enforcement with your subscription.