My USG Flex 50 slow navigation

Options
zullo_giuseppe
zullo_giuseppe Posts: 5
First Comment
in Security

Hi,

when I use a policy to restrict acces to some websites, browsing is very slow. However, the same sites open as quickly where the rule is "TO ANY".

The firmware is on the last and Content Filtering is deactived

Thanks

All Replies

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,306  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Hi @zullo_giuseppe,

    Could you share the screen shot of the setting of the policy "to restrict access to some websites" with us? Thanks!

  • zullo_giuseppe
    zullo_giuseppe Posts: 5
    First Comment
    Options


    I created a group with the PCs and a group with the FQDNs of the external sites

    foto3.jpeg
    foto1.jpeg
    foto2.jpeg

  • PeterUK
    PeterUK Posts: 2,848  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited December 2023
    Options

    I do the same thing on USG60 but by wildcard FQDN so

    *aboutamazon.co.uk

    the problem when you don't add all the address the web page tries to load like ads can hang to browsing

  • zullo_giuseppe
    zullo_giuseppe Posts: 5
    First Comment
    Options

    Thanks PeterUK,

    workarounds? suggestions?

  • smb_corp_user
    smb_corp_user Posts: 161  Master Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Looking back at PeterUK's reply, with the risk of misunderstanding it, I will attempt to explain what I think he meant:

    Use a wildcard together with the domain name (for example: *domainname.com ) to make sure that everything within that domain is filtered out directly without looking for some elements to allow.

    (in case I did misunderstand, I hope PeterUK can clarify the issue for you)

  • zullo_giuseppe
    zullo_giuseppe Posts: 5
    First Comment
    Options

    Thanks smb_corp_user,

    i have used wildcard ( *domainname.com instead of domainname.com) but navigation is very slow for PCs that access only a few sites. Everything is normal for PCs accessing "any"

     
    

     
     
    

    

    

    • 

  • 

    

    
PeterUK 
     
    

PeterUK 

Posts: 2,848   Guru Member
    

First Anniversary


10 Comments


Friend Collector


First Answer

         

    

    

 
 edited December 2023  
    

     
    
Options
       
     
    

    

    

    

    

    Its because of 3rd party domains that the site try to load that cause the web page to hang as like *yahoo.com has many 3rd party domains that you need to include.
    The why I did it was ipconfig/flushDNS with Wireshark port 53 go to the site then look at all the sites DNS goes and looks up not sure if their is a better way. 
    and even if you add all domains the web page may hang for a bit as the USG add the IP to the mapped FQDN as you get the DNS reply so fast that the browser make the connection but the USG is still processing the IP to the allow rule 
     
    

     
     
    

    

    

    • 



 
















 
 










 


Categories












Security Highlight







Read more









Security Help Center























EnglishTiếng ViệtРусскийไทย中文（台灣）