Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 10 replies
  • Answers 1 answer
  • Subscribers 43 subscribers
  • Views 27620 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to debug WebFilter related issues?

Slawski

I have created a webfilter for my kids and it works great but it effectively kills their games from updating.

Can anyone give an advice how to debug those issues? LogViewer seems to be ineffective and later then Reports show "Blocked Domains". How to check which domain was blocked on which rule ?



This thread was automatically locked due to age.
Parents
  • 0
    I turned on the "Invalid Traffic" and "Local ACLs" in the log settings. That helped track down my Netflix issue.
  • 0 in reply to EdDe Sousa
    Ok but how? I turned those two options on and got lots of Log entries for "Policy Rule 0" without any meaningful information. I have already known that traffic is dropped or something because some services like Origin or Steam do not want to update. Even Windows 10 Update didn't want to work.

    Regards,
    Slawek

  • 0 in reply to Slawski
    In my case i filtered by source IP and made sure to not have anything else running at the time. For Netflix I took the blocked IP and looked up the associated registered block and added an exception in my policies for it. It was a lot of repeated attempts to get it working. Slowly I eliminated all the invalid traffic. This is not ideal but it worked.
  • 0 in reply to EdDe Sousa

    How did you filter by source IP in Invalid trafic / Local ACL log entries ?


    EDIT: Well strage but I was unable to scroll LogViewer Windows to reveal IP addresses in Chrome. Firefox - works fine... But still this is not a good tool.


    But I still thing webfilter log is a little sparse.... BTW: when will be an update ? ;-)

    Regards,
    Slawek

Reply
  • 0 in reply to EdDe Sousa

    How did you filter by source IP in Invalid trafic / Local ACL log entries ?


    EDIT: Well strage but I was unable to scroll LogViewer Windows to reveal IP addresses in Chrome. Firefox - works fine... But still this is not a good tool.


    But I still thing webfilter log is a little sparse.... BTW: when will be an update ? ;-)

    Regards,
    Slawek

Children
Unfiltered HTML