Content-filter Service Is Unavailable

itxnc
itxnc Posts: 93
First Comment Friend Collector Sixth Anniversary
 Ally Member
edited April 2021 in Security
We're seeing a lot of alerts on our client's USGs and ATPs where the content filter service becomes unreachable for a period of time. Then it comes back. Have been seeing this on and off for a few weeks. Anyone else seeing this behavior?

All Replies

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,174
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
     Zyxel Employee
    Hi @itxnc,

    We need more information to check the root cause of this issue.
    I will contact you in private message for further information.
    image.png

    Click this link to start: https://bit.ly/3R2Wx52
    Emily

  • LiborK
    LiborK Posts: 1
    First Comment Third Anniversary
     Freshman Member
    Hello, after upgrade zld from 4.33 to 4.35 I've noticed that my Security Policy wasn't working because the rule #2 collided with rule #1 while both rules were working on zld 4.33.
    Rule #1: lan1 to wan any any ... allow Schedule-Application patrol (for You tube)
    Rule #2: lan1 to wan any any ... allow Content filtering
    On zld 4.35 only rule#1 was working.
    Now on zld 4.35 I had to combine both rules together to have them working both...is that some bug of zld4.35 ?
  • Zyxel_Emily
    Zyxel_Emily Posts: 1,174
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
     Zyxel Employee
    Hi @LiborK,
    It works on both firmware 4.33 and 4.35.

    If you'd like to block a specific category of website always and block YouTube (App Patrol) for just a period of time, create the rules as follows.

    Rule #1: From lan1 to wan any any -> apply YouTube profile with schedule (14:15-14:45) & apply CF profile

    Rule #2: From lan1 to wan any any -> apply CF profile

    If the time you access YouTube hits the schedule (ex: 14:20), the traffic hits Rule#1 and never goes to Rule#2, so both YouTube and CF are blocked.

    If the time you access YouTube doesn't hit the schedule (ex: 14:50), the traffic hits Rule#2. YouTube is allowed but CF is blocked.

    Feel free to let me know if you has questions about applying App Patrol and CF profiles. If you still has questions, please share the configuration file with me via private message.


    image.png

    Click this link to start: https://bit.ly/3R2Wx52
    Emily

  • IT_Field_Support
    IT_Field_Support Posts: 97
    First Comment Friend Collector Third Anniversary
     Ally Member
    Hi,

    I would like to know how you solve the problem of Content Filter becoming unavailable. We have this problem on one of our router since a few days.
    USG40w
    4.35

    Our user are blocked and in the CF log we can see that the service is unavailable.

    Thanks,

    Davy
  • itxnc
    itxnc Posts: 93
    First Comment Friend Collector Sixth Anniversary
     Ally Member
    Yes we still have the issue intermittently - seems to last for a couple minutes then the service comes back
  • Jeremylin
    Jeremylin Posts: 166
    First Comment First Answer Third Anniversary
     Master Member
    As my setting on this part, since the database could not include and category all websites.
    configure Warn as these two parts, and check again

Categories

Security Highlight


Read more

Security Help Center

  • FAQ
  • New & Release
  • Monthly Express
  • Threat Intelligence
  • Video Tutorials
    • EnglishTiếng ViệtРусскийไทย中文（台灣）