Content Filter not working USG Flex 500 issue

andreive
andreive Posts: 3
First Comment
in Security

Hi,

When i enable Content Filter and(or) DNS Content Filter in Policy Control, http and https connection become very slow. I think that because Content Filter not resolving url(domain name).

in cli:

Router(URL)# https://community.zyxel.com
% ret err = -4
result: Error
The query takes: 1.000000 seconds

in web:

zw2.png
zw1.png

Help me solve the problem, thanks.

Accepted Solution

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,230  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fourth Anniversary
    Answer ✓

    Hi @andreive

    Currently, the Content Filter doesn't provide the Belarus area, we apologize for any inconvenience caused. Thank you for your understanding.


    241015_Speak-up,-Win-WiFi-7_Community-CSO-signature_1920x200.jpg

    Share your feedback through our survey, make your voice heard, and win a WiFi 7 AP! https://bit.ly/2024_Survey_Community

All Replies

  • PeterUK
    PeterUK Posts: 3,389  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    Do you have a DNS set for the Flex to use?

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,230  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fourth Anniversary

    Hi @andreive

    Not sure if it is related to your DNS settings. Please navigate to Configuration > System > DNS > Domain Zone Forwarder and add a setting as shown below:

    DNS settings_1.png
    DNS settings.png

    This will enable DNS queries by the Google DNS server 8.8.8.8. Thanks.


    241015_Speak-up,-Win-WiFi-7_Community-CSO-signature_1920x200.jpg

    Share your feedback through our survey, make your voice heard, and win a WiFi 7 AP! https://bit.ly/2024_Survey_Community

  • andreive
    andreive Posts: 3
    First Comment
    edited October 2023

    this is my DNS settings:

    zw3.png

    and when i change DNS to only 8.8.8.8 auto i have the same issue

  • PeterUK
    PeterUK Posts: 3,389  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited October 2023

    If you go to Diagnostics > Network Tool with NSLOOKUP IPv4 and put in grc.com does it resolve?

    If you get tracetcp

    https://simulatedsimian.github.io/tracetcp_download.html

    run

    tracetcp d.myzyxel.com:443

    does it complete?

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,230  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fourth Anniversary

    Dear @andreive

    Could you provide a remote Web-GUI link to us for further checking purposes? I will send a private to you later, please check your inbox. Thanks.


    241015_Speak-up,-Win-WiFi-7_Community-CSO-signature_1920x200.jpg

    Share your feedback through our survey, make your voice heard, and win a WiFi 7 AP! https://bit.ly/2024_Survey_Community

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,230  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fourth Anniversary
    Answer ✓

    Hi @andreive

    Currently, the Content Filter doesn't provide the Belarus area, we apologize for any inconvenience caused. Thank you for your understanding.


    241015_Speak-up,-Win-WiFi-7_Community-CSO-signature_1920x200.jpg

    Share your feedback through our survey, make your voice heard, and win a WiFi 7 AP! https://bit.ly/2024_Survey_Community

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）