Should I have Dynamic Content Analysis turned on or off?
Environment: Cisco Web Security appliance running AsyncOS versions 7.1 and above running CIWUC
We recommend to have Dynamic Content Analysis (DCA) feature enabled on Cisco Web Security appliance (WSA) for best results.
DCA will help categorize traffic to more of the newer, and therefore not yet categorized, sites on the Internet until they get added to the URL categorization database. DCA is tuned to increase categorization of objectionable content such as Adult, Porn, Filter Avoidance, Gambling and others.
The risk of Dynamic Content Analysis mis-categorizations are low and can be further reduced by adding internal sites to a custom category. If you find a page that is mis-categorized by DCA, please use the Cisco Web Usage Control URL submission tool (CIWUC) on our support portal to report such sites for categorization.
Attached excerpt from the User Guide, provides more information and background on Dynamic Content Analysis (DCA) engine.