Andre, Dan is correct regarding DNS records internally being resolved
and being authoritative for the domains. Another key issue, I need to
point out is SSL inspection. Google and possibly other search engines
have gone the route of encrypting the br...
Hi Stefan, Have you done a debug flow of the packets arriving back to
the firewall? My guess is that the returning traffic is still IPv4 not
IPv6 thus not hitting your IPv6 policies. Do you also have ant NAT6to4
configuration? Regards, Karim
Andre, Enabling the safe search option within the URL filtering profile
causes all web searches either Google, BING, Yahoo or others to only
allow non-explicit results to to be provided to the user. If the user
were to search for explicit material. T...
No worries, here to help. So the sniffer sees the SYN packet arrive on
the WAN1 interface and leave the LAN interface? Lets do a DIAG DEBUG
FLOW and see if you are hitting the correct policy and see if the
firewall is doing something with it. If you ...
Kenneth, Can you provide the actual policy configuration that contains
the VIP reference in question also the VIP configuration. I find it odd
that you are not able to access the VIP 20 percent of the time. Are
these time specific or random? Have you...