Why request applying the content filter profile to ZyWall when applying to LAN_outgoing?

Zyxel_James

Scenario: When I apply a content filter profile to LAN_outgoing rule, a message pops out and requests applying it to Zywall as well. What does it mean?

Answer:

It's more like a reminder note instead of a warning error.
For DNS content filter profile, you need to apply it to two security policies to make it work, that is,
LAN_outgoing: block the DNS query toward to external DNS server. (192.168.1.33 -> 8.8.8.8)
LAN_to_Device: block the DNS query from host to firewall. If this is not blocked, the host still is able to query the firewall, then the firewall will ask the external DNS server (192.168.1.33 -> 192.168.1.1)