Content Filter - fw: V4.60

pm24
pm24 Posts: 4
First Comment
edited April 2021 in Security
I have a problem with the content filter after updating the firmware from version V4.55 to version V4.60. The content filter is ignored, it does not block any categories and forbidden addresses. I also tried a predefined profile. I don't have any record about content filter in log. I have the same zeros in the statistic.
This bug only occurred in version V4.60.
When I started the router with the old firmware version V4.55, the content filter worked properly.
I have two routers, they both have this same problem.
Can anyone confirm the functionality of the contents filter in the new version of fw ?

Sorry for my English.

Peter
«1

Comments

  • Zyxel_Stanley
    Zyxel_Stanley Posts: 1,379  Zyxel Employee
    100 Answers 1000 Comments Friend Collector Seventh Anniversary

    Hi @pm24

    You can make sure “Log all web pages” function is enabled in Content Filter profile.


    And also make sure “Enable HTTPS Domain Filter for HTTPS traffic” function is on.

    After applied Content Filter profile to policy control rule.


    It should able to show block log if Content Filter function is blocked page.


    And it will count in statistic if page is blocked.


  • pm24
    pm24 Posts: 4
    First Comment
    I have same configuration,
    I enable debug log for conten filter.
    log:
    21 2020-12-23 14:14:08 debug Content Filter Profile is NULL. WEB DEBUG


  • Zyxel_Stanley
    Zyxel_Stanley Posts: 1,379  Zyxel Employee
    100 Answers 1000 Comments Friend Collector Seventh Anniversary

    Hi @pm24

    You may try to remove old CF profile and readd new one.

    If still doesn’t help, we may have to check the symptom via remote access session.

  • tonivareta
    tonivareta Posts: 4
    First Comment
    Same problem, with versión V4.60(ABUI.1) on my USG FLEX 200 Content Filter not work. I try to delete and create a new profile and asign to all the police control but don't work in version 4.60.
    Please solve the problem asap. Thank's
  • tonivareta
    tonivareta Posts: 4
    First Comment
    pm24 said:
    I have a problem with the content filter after updating the firmware from version V4.55 to version V4.60. The content filter is ignored, it does not block any categories and forbidden addresses. I also tried a predefined profile. I don't have any record about content filter in log. I have the same zeros in the statistic.
    This bug only occurred in version V4.60.
    When I started the router with the old firmware version V4.55, the content filter worked properly.
    I have two routers, they both have this same problem.
    Can anyone confirm the functionality of the contents filter in the new version of fw ?

    Sorry for my English.

    Peter
    Peter I have the same problem with firmware <4.60 the content filter works ok and with 4.60 the filter content don't work.
  • Zyxel_Stanley
    Zyxel_Stanley Posts: 1,379  Zyxel Employee
    100 Answers 1000 Comments Friend Collector Seventh Anniversary

    Hi @tonivareta  

    Can you use CLI command to check if content filter service still alive?

    Router> debug system ps | match "contfltd"

    If there is no reply, then it mean content filter service stop work.

    You can upgrade to 4.60WK48 firmware which fixed content filter service stability issue.


  • tonivareta
    tonivareta Posts: 4
    First Comment


    This is the message :
    Router# debug system ps | match "contfltd"
     9274     1 contfltd        root     ?         19   0  0.9  5.2 Ssl  193072 98136 176728 48268   Dec 27 1-20:07:20 00:24:18 /usr/sbin/contfltd
    Router:-1:

    Now i try to upgrade firmware.
    Thank's for your reply
  • tonivareta
    tonivareta Posts: 4
    First Comment
    I have instaled firmware V4.60(ABUI.0)ITS-WK48-r97191 but content filter don't work, I test diferent url in the BPP and detect the correct category buy when i try to navigate to a block content the firewall not show block page.

    1
    Standby
    USG FLEX 200
    V4.60(ABUI.1)
    2020-12-01 02:41:44
    2
    Running
    USG FLEX 200
    V4.60(ABUI.0)ITS-WK48-r97191
    2020-12-02 23:32:55

    debug system ps | match "contfltd"
    Router# debug system ps | match "contfltd"
     9884     1 contfltd        root     ?         19   0  1.1  0.3 Ssl  101936  7116 85592 25484 10:37:36       08:51 00:00:06 /usr/sbin/contfltd
  • Zyxel_Stanley
    Zyxel_Stanley Posts: 1,379  Zyxel Employee
    100 Answers 1000 Comments Friend Collector Seventh Anniversary

    Hi @tonivareta

    Can you send me your configuration by private message for further check?

  • iSpeed
    iSpeed Posts: 110  Ally Member
    First Comment Fifth Anniversary
    Same problem here with ATP200 / ATP100. Need better quality control on these firmware updates.

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）