Content Filter not working USG Flex 500 issue

andreive
andreive Posts: 3
First Comment
in Security

Hi,

When i enable Content Filter and(or) DNS Content Filter in Policy Control, http and https connection become very slow. I think that because Content Filter not resolving url(domain name).

in cli:

Router(URL)# https://community.zyxel.com
% ret err = -4
result: Error
The query takes: 1.000000 seconds

in web:

zw2.png
zw1.png

Help me solve the problem, thanks.

Accepted Solution

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,206  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fourth Anniversary
    Answer ✓

    Hi @andreive

    Currently, the Content Filter doesn't provide the Belarus area, we apologize for any inconvenience caused. Thank you for your understanding.


    Untitled Image

    Don't miss this great chance to upgrade your Nebula org. for free! https://bit.ly/4g2pS9L

All Replies

  • PeterUK
    PeterUK Posts: 3,331  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    Do you have a DNS set for the Flex to use?

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,206  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fourth Anniversary

    Hi @andreive

    Not sure if it is related to your DNS settings. Please navigate to Configuration > System > DNS > Domain Zone Forwarder and add a setting as shown below:

    DNS settings_1.png
    DNS settings.png

    This will enable DNS queries by the Google DNS server 8.8.8.8. Thanks.


    Untitled Image

    Don't miss this great chance to upgrade your Nebula org. for free! https://bit.ly/4g2pS9L

  • andreive
    andreive Posts: 3
    First Comment
    edited October 2023

    this is my DNS settings:

    zw3.png

    and when i change DNS to only 8.8.8.8 auto i have the same issue

  • PeterUK
    PeterUK Posts: 3,331  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited October 2023

    If you go to Diagnostics > Network Tool with NSLOOKUP IPv4 and put in grc.com does it resolve?

    If you get tracetcp

    https://simulatedsimian.github.io/tracetcp_download.html

    run

    tracetcp d.myzyxel.com:443

    does it complete?

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,206  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fourth Anniversary

    Dear @andreive

    Could you provide a remote Web-GUI link to us for further checking purposes? I will send a private to you later, please check your inbox. Thanks.


    Untitled Image

    Don't miss this great chance to upgrade your Nebula org. for free! https://bit.ly/4g2pS9L

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,206  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fourth Anniversary
    Answer ✓

    Hi @andreive

    Currently, the Content Filter doesn't provide the Belarus area, we apologize for any inconvenience caused. Thank you for your understanding.


    Untitled Image

    Don't miss this great chance to upgrade your Nebula org. for free! https://bit.ly/4g2pS9L

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）