Old USG20 and Content filter (Facebook)

Options
Cava
Cava Posts: 7 image  Freshman Member
First Comment Second Anniversary
edited April 2021 in Security
Hi. We have a customer with an old USG20 (not USG20-VPN) with the latest firmware (3.30 25-11-2016). They have the content filter and they want to block facebook. I heard that this model cannot check the SSL connection so it's really difficult (or impossible) block HTTPS sites. Is it correct ? They asked me an "official answer"... I was thinking to replace it with a new USG40 or 60 with latest firmware. Could it be a good choise?

All Replies

  • zyman2008
    zyman2008 Posts: 247 image  Master Member
    50 Answers First Comment Friend Collector Eighth Anniversary
    Options
    Well, replace to USG40 or USG60 could be a solution.
    Content filter on USG with firmware 4.20 or above version support HTTPs Domain Filter.
    Which can block "*.facebook.com" without decrypt the packets.
     
  • ChrisGer
    ChrisGer Posts: 206 image  Ally Member
    Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Nebula
    Options
    Ok,
    it could be a solution to change the old USG20 (EOL/EOS) device to a new 40/60 device.
    but the content filter is a seperate license that must be paied on top (1yr or 2yr subscription).

    Regards
    Christian

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）