This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to debug WebFilter related issues?

I have created a webfilter for my kids and it works great but it effectively kills their games from updating.

Can anyone give an advice how to debug those issues? LogViewer seems to be ineffective and later then Reports show "Blocked Domains". How to check which domain was blocked on which rule ?

This thread was automatically locked due to age.

Parents

0 EdDe Sousa over 8 years ago

I turned on the "Invalid Traffic" and "Local ACLs" in the log settings. That helped track down my Netflix issue.
Cancel
Vote Up 0 Vote Down

Cancel
0 Slawski over 8 years ago in reply to EdDe Sousa

Ok but how? I turned those two options on and got lots of Log entries for "Policy Rule 0" without any meaningful information. I have already known that traffic is dropped or something because some services like Origin or Steam do not want to update. Even Windows 10 Update didn't want to work.

Regards,
Slawek
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Slawski over 8 years ago in reply to EdDe Sousa

Ok but how? I turned those two options on and got lots of Log entries for "Policy Rule 0" without any meaningful information. I have already known that traffic is dropped or something because some services like Origin or Steam do not want to update. Even Windows 10 Update didn't want to work.

Regards,
Slawek
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 EdDe Sousa over 8 years ago in reply to Slawski

In my case i filtered by source IP and made sure to not have anything else running at the time. For Netflix I took the blocked IP and looked up the associated registered block and added an exception in my policies for it. It was a lot of repeated attempts to get it working. Slowly I eliminated all the invalid traffic. This is not ideal but it worked.
Cancel
Vote Up 0 Vote Down

Cancel
0 Slawski over 8 years ago in reply to EdDe Sousa

How did you filter by source IP in Invalid trafic / Local ACL log entries ?

EDIT: Well strage but I was unable to scroll LogViewer Windows to reveal IP addresses in Chrome. Firefox - works fine... But still this is not a good tool.

But I still thing webfilter log is a little sparse.... BTW: when will be an update ? ;-)

Regards,
Slawek
Cancel
Vote Up 0 Vote Down

Cancel
0 EdDe Sousa over 8 years ago in reply to Slawski

scroll down and there is a scrollbar at the bottom to scroll left-right. Bit of a pain that it doesn't expand to fit.
Cancel
Vote Up 0 Vote Down

Cancel
0 Slawski over 8 years ago in reply to EdDe Sousa

Well not so obvious on a Mac ;-) When you are working with builtin trackpad only - OS X hides scrollbars and in LogViewer you have no indication of content on the right side. You must know it exists and then it will show up when you will scroll - I discovered additional columns when I was using Windows 10 machine.

Regards,
Slawek
Cancel
Vote Up 0 Vote Down

Cancel
0 EdDe Sousa over 8 years ago in reply to Slawski

I hear you. I use a MAC also. ;)
Cancel
Vote Up 0 Vote Down

Cancel
0 JasonMiles over 8 years ago in reply to Slawski

I'm still sitting on the sidelines waiting for these XG issues to be addressed before migrating from UTM 9.3 to XG. Based on all these issues, the first major XG update had better be SIGNIFICANT.
Cancel
Vote Up 0 Vote Down

Cancel