[NEBULA] Spotify Connect blocked by Content Filtering

blechkiste
blechkiste Posts: 14
First Comment Friend Collector Third Anniversary
 Freshman Member
edited April 2021 in Nebula

Hi

Even without any category being selected, NSG is preventing me from successfully select any Spotify enabled loudspeaker from the Spotify app in order to listen music on it. Disabling Content Filtering immediately resolves the problem.

There's no information in the Event logs on the NSG. I have captured the traffic on NSG for LAN1 and WAN1, merged them in Wireshark and started with the troubleshooting. I've pulled the following HTTP hosts from the conversations and added them to the white filter on NSG which did not help:

*.edgesuite.net

*.akamaitechnologies.com

*.spotify.com

*.googleusercontent.com

Is there any possibility to debug the content filtering mechanism on the NSG? Clearly, the issue is related to that functionality. Appreciate any help.

Regards

Walter

Accepted Solution

  • Zyxel_Chris
    Zyxel_Chris Posts: 605
    Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 50 Answers 500 Comments
     Zyxel Employee
    Answer ✓

    To All,

    The root cause is because Spotify use SSLv3 communicate with each clients, which considered is vulnerable and block by CF, if anyone who experience this issue please just leave the message here, I will help you.?


    /Chris

    Chris

All Replies

  • Zyxel_Chris
    Zyxel_Chris Posts: 605
    Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 50 Answers 500 Comments
     Zyxel Employee

    Hello @blechkiste

    Welcome back to the community.

    May I know is there any content filtering entry in Gateway>NSS Analysis?

    Since I cannot reproduce the issue, therefore I'd like to private message you about the Org. information please be aware of your Inbox message.?


    /Chris

    Chris
  • blechkiste
    blechkiste Posts: 14
    First Comment Friend Collector Third Anniversary
     Freshman Member

    Thanks, Chris. I’ve opened a support case.

    wrt NSS: no further information visible either.

    Regards

    Walter

  • Dave_M
    Dave_M Posts: 1
    First Comment
    Still no solution? Having the same problem. Denon Spotify player is visible but the connection from my phone is never established.
  • blechkiste
    blechkiste Posts: 14
    First Comment Friend Collector Third Anniversary
     Freshman Member

    Hi Dave

    Zyxel fixed it directly on my NSG. Reach out to Nebula_Chris. You'll probably need to open a support ticket too.

    Regards

    Walter

  • Zyxel_Chris
    Zyxel_Chris Posts: 605
    Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 50 Answers 500 Comments
     Zyxel Employee

    @Dave_M

    Have replied you via private message please check your inbox message.?

    Chris
  • Juan_SUS
    Juan_SUS Posts: 1
    Having the Same issue googleusercontent.com is blocked with the MSG:

    Websites prove their identity via certificates. Firefox does not trust this site because it uses a certificate that is not valid for doc-0o-6k-apps-viewer.googleusercontent.com. The certificate is only valid for the following names: dnsft.cloud.zyxel.com, *.dnsft.cloud.zyxel.com


  • ivers
    ivers Posts: 45
    First Comment First Answer Friend Collector Fifth Anniversary
     Freshman Member
    edited May 2022
    @Juan_SUS
    Did you try to put this domain in white list on content filtering?
    *.googleusercontent.com 

Categories

Nebula Tips & Tricks


    Read more

    Nebula Help Center

  • FAQ
  • New & Release
  • Nebula Status & Incidents
  • Video Tutorials
    • EnglishTiếng ViệtРусскийไทย中文（台灣）