cloud dns filter keeps blocking a site, doenst matter what i do on the PC or Firewall

Options
AMI
AMI image  Freshman Member
First Comment Friend Collector Third Anniversary
in USG FLEX H Series

Dieser Server konnte nicht nachweisen, dass es sich bei ihm um ast-systec.com handelt. Das Sicherheitszertifikat stammt von dnsft.cloud.zyxel.com. Dies kann auf eine Fehlkonfiguration zurückzuführen sein oder auf einen Angreifer, der Ihre Verbindung abfängt.

Accepted Solution

  • AMI
    AMI image  Freshman Member
    First Comment Friend Collector Third Anniversary
    Answer ✓
    Options

    ok, update. apparently the site adds www in front of it after i typed it without it,(that was not really visible in the firewall logs) so add a * before the URL now did the trick. So i guess the firmware did resolve it.

All Replies

  • AMI
    AMI image  Freshman Member
    First Comment Friend Collector Third Anniversary
    edited September 7
    Options
     
    V1.38(ABZI.0)
    
Lastest Firmware

    Disabled Rep, DNS and URL - makes no difference.
    Added to allow list - no difference
    flushed DNS on PC, tried different PC - no difference
    flushed cache on FW/CMD - no difference
    IP exception - no difference
    With all them disabled - the block wont even show up in the Rep Filter Stats

  • Zyxel_Melen
    Zyxel_Melen image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Options

    Hi @AMI

    Did you flush DNS after change firewall setting? PC might cache the DNS resolution, which is direct to the firewall. Windows please use "ipconfig /flushdns"

    Zyxel Melen


  • AMI
    AMI image  Freshman Member
    First Comment Friend Collector Third Anniversary
    edited September 7
    Options
    https://community.zyxel.com/en/discussion/comment/87155#Comment_87155

    All and everything, even a new pc that never accessed the site. ALSO i just noticed, on the FW itself, it shows 1.38 as latest firmware, but that is obviously not correct as its 1.39. So i try manual update now (Check now button does not show that there is a newer firmware)
    noting that it actually sits on autoupdate but it did not do it!

  • Zyxel_Judy
    Zyxel_Judy image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Options
    https://community.zyxel.com/en/discussion/comment/87157#Comment_87157

    It looks like the Firmware Type is set to "Stable" under Nebula > Site-Wide > Firmware Management. This means the firmware won't update automatically if the current firmware version is stable version (1.38 currently), and it's also why manually clicking "Upgrade Now" isn't returning any available update.

    We'd recommend changing the Firmware Type to "Latest" and running "Upgrade Now" again, so the firewall can update to the latest firmware version.

    Zyxel_Judy

  • Zyxel_Judy
    Zyxel_Judy image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Options

    It appears that the URL ast-systec.com being flagged as High Risk and listed as a malicious site is expected behavior.

    image.png

    If you believe this categorization is incorrect, please click this link to submit a request for it to be reviewed.

    image.png

    Zyxel_Judy

  • Zyxel_Judy
    Zyxel_Judy image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Options

    If you've already added the URL to the Allow List (Security Services > Reputation Filter > DNS Threat Filter) but are still unable to access the site, please download and share the diagnostic file so we can take a closer look.

    Zyxel_Judy

  • AMI
    AMI image  Freshman Member
    First Comment Friend Collector Third Anniversary
    edited September 7
    Options

    see update

  • AMI
    AMI image  Freshman Member
    First Comment Friend Collector Third Anniversary
    Answer ✓
    Options

    ok, update. apparently the site adds www in front of it after i typed it without it,(that was not really visible in the firewall logs) so add a * before the URL now did the trick. So i guess the firmware did resolve it.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）