Content Filter not working USG Flex 500 issue

Hi,

When i enable Content Filter and(or) DNS Content Filter in Policy Control, http and https connection become very slow. I think that because Content Filter not resolving url(domain name).

in cli:

Router(URL)# https://community.zyxel.com
% ret err = -4
result: Error
The query takes: 1.000000 seconds

in web:

Help me solve the problem, thanks.

Accepted Solution

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,230  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fourth Anniversary
    Answer ✓

    Hi @andreive

    Currently, the Content Filter doesn't provide the Belarus area, we apologize for any inconvenience caused. Thank you for your understanding.


    Share your feedback through our survey, make your voice heard, and win a WiFi 7 AP! https://bit.ly/2024_Survey_Community

All Replies

  • PeterUK
    PeterUK Posts: 3,389  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    Do you have a DNS set for the Flex to use?

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,230  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fourth Anniversary

    Hi @andreive

    Not sure if it is related to your DNS settings. Please navigate to Configuration > System > DNS > Domain Zone Forwarder and add a setting as shown below:

    This will enable DNS queries by the Google DNS server 8.8.8.8. Thanks.


    Share your feedback through our survey, make your voice heard, and win a WiFi 7 AP! https://bit.ly/2024_Survey_Community

  • andreive
    andreive Posts: 3
    First Comment
    edited October 2023

    this is my DNS settings:

    and when i change DNS to only 8.8.8.8 auto i have the same issue

  • PeterUK
    PeterUK Posts: 3,389  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited October 2023

    If you go to Diagnostics > Network Tool with NSLOOKUP IPv4 and put in grc.com does it resolve?

    If you get tracetcp

    https://simulatedsimian.github.io/tracetcp_download.html

    run

    tracetcp d.myzyxel.com:443

    does it complete?

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,230  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fourth Anniversary

    Dear @andreive

    Could you provide a remote Web-GUI link to us for further checking purposes? I will send a private to you later, please check your inbox. Thanks.


    Share your feedback through our survey, make your voice heard, and win a WiFi 7 AP! https://bit.ly/2024_Survey_Community

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,230  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fourth Anniversary
    Answer ✓

    Hi @andreive

    Currently, the Content Filter doesn't provide the Belarus area, we apologize for any inconvenience caused. Thank you for your understanding.


    Share your feedback through our survey, make your voice heard, and win a WiFi 7 AP! https://bit.ly/2024_Survey_Community

Security Highlight