Technical Tip: How to allow access to specific trusted website when adding a web filter to security profile on the original firewall policy results in Err_Connection_Reset

Example of problem:

To troubleshoot this:

1. Make a copy of the original firewall policy, change the destination to specific trusted website. In addition, ensure that no security profile is selected in the copy of the original firewall policy.

config firewall policy 

    edit 1
        set srcintf "lan"
        set dstintf "wan"
        set srcaddr "all"
        set dstaddr "trusted website"
        set action accept
        set schedule "always"   
        set service "ALL"   
        set nat enable       
    next
end

2. Ensure that the copy of the original firewall policy is ordered above the original firewall policy.

3. Visit specific trusted website and verify that the visual of the specific trusted website is shown.