USG 110 - Content Filter - Trusted Web sites

kyssling

Hello,
someone can confirm that the Content Filter settings of Trusted Web Sites always has priority over profile setting?

I do not know where I'm making a mistake, but I've added "*.*Iomega*.com" entry to Trusted Web sites,
no change, i added to Trusted Web sites under Profile and I still see a message from USG:
"Web access is restricted. Please contact the administrator (Parked Domains)"

I understand that the site "iomega" does NOT exist now, but I'm only interested in why this dialog is shown and not common "Web site does not exist ... etc ..."

Thank you

Zyxel_Emily

Hi @kyssling,

 

After you add websites in Trusted Web Sites, remember to go to the target profile > Custom Service.

Tick Enable Custom Service and Check Common Trusted/Forbidden List.

In the following example, the category “News” are blocked but cnn is not blocked because it is on the list of Trusted Web Sites.

kyssling

Thanks for answer, no change see images below pls.

Zyxel_Emily

Hi @kyssling,

 

Even if the category "Pornography/Sexually Explicit" is not selected, “iomega.com” is still blocked because of parked domain.

However, if you manually enter “ww25.iomega.com” in the browser, you can still access the website.

We will check why iomega.com is blocked with trust website is configured.

Keep you updated of the progress.

Zyxel_Emily

 Hi @kyssling,

 

In Trusted Web Sites, enter “*iomega.com”.

Then http://iomega.com is not blocked.

Besides, “Parked Domains” is in Security Threat, not Managed Categories.

kyssling

Hello, it's not important so I close it ...

However, at Trusted, I change to : * iomega.com, I uncheck Parked domains. The result of the Test is again below (but I will get the browser).

In my opinion, Trusted WebSite should override the "ParkedDomains" setting and more ...

Zyxel_Emily

Hi @kyssling,

 

The test result of "Test Against Content Filter Category Server" is for you to check which category does the website belongs to.

It is not the result of the website is blocked or forwarded.

You can connect one PC to LAN and apply the content filter profile to the corresponding security policy rule.

Then access the website http://iomega.com.

You'll find the website is forwarded because it is on the list of Trusted Web Site.