USG Flex 500 Content Filtering does not work

Scott_Gorman

Hi,

We have been trying to configure Web Content Filtering to block social networking sites for default BPP profile but it does not seem to block. Even porn sites are being allowed access even though these have been default blocked in categories. Any suggestions on how to activate the blocking? Thanks.

PeterUK

Have you apply it to a policy control rule?

Scott_Gorman

Hi PeterUK,

Yes, we applied it to a specific policy control rule but did not block still.

PeterUK

and the PC is not using a VPN or proxy?

another reason is the FLEX can't connect out to the Category server and so BPP is set to pass

does the Test Web Site Category work in BPP check?

Scott_Gorman

The PC is not using VPN or proxy.

The Test Web Site Category seems to work well. It is able to determine the category of the web site correctly.

We noticed that some sites are being blocked on other categories like Job search but not Social Networking. Then we also noticed that it works on Edge but not on Chrome.

PeterUK

Check the whats my IP on both Edge and Chrome

testing here I can use Chrome and block facebook.com

you may need to block highest rule UDP 443

Scott_Gorman

I get the same results of WhatsmyIP on both Edge and Chrome.

I already tried blocking UDP 443 and set as the highest rule.

And still the same results.

jasailafan

Both the browser and website support HSTS. Here is a similar post.

https://community.zyxel.com/en/discussion/5374/enable-content-filter-https-domain-filter-block-warn-page

Scott_Gorman

https://community.zyxel.com/en/discussion/comment/62870#Comment_62870

If so, what can I do to block the website? There was no answer on the post on what to do.