Why we are unable to access specific web site when hosts are behind FLEX/ATP?

Zyxel_Cooldia
Zyxel_Cooldia Posts: 1,518  Zyxel Employee
Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

Question

Why some specific web sites are unable to access when hosts are behind FLEX/ATP, but those sites/URL can be access when bypass FLEX/ATP?

Answer

If web site has TTL expire issue, it leads to session drop by device.
Please disable destroy session on this device and try it again.
Router(config)# firewall icsa icmp-destroy-session disable