XG blocking Synology

Hi,

what are the web and application settings in your nas allow all rule?
ian

Hi, thanks

Source LAN,NAS device

Destination WAN, Any network, Any service

Web policy set to Build in 'Allow All'

Hi,

your web policy is the issue, do you have proxy or DPI  elected? If you remove the web policy and use application and IPS then your NAS should connectionless you want to scan specific downloads of your NAS.

Ian

Thanks again

Not quiet sure how to do this. If setting web policy to none equivalent to 'remove web policy'?

 Correct. If the web policy is causing failed connections then you need to either change the policy or setup a new firewall rule specifically for nas updates that have the nas as source and the update site as destination and apply application and ips rules. This will avoid the scanning fail or build a rule that does involve https scanning.

ian

 Correct. If the web policy is causing failed connections then you need to either change the policy or setup a new firewall rule specifically for nas updates that have the nas as source and the update site as destination and apply application and ips rules. This will avoid the scanning fail or build a rule that does involve https scanning.

ian

I did try that actually. I created a rule at the very top. Allowing all traffic to WAN from All NAS IP's - No web rules etc..  But still no go :/

Please post a copy of the rule in expanded form.

ian

Here you go. Very basic rule 

Thank you for the Prompt response.

now if you check logvierwer with filtering in this rule what transactions do you see?
ian

I only see DNS and NTP 

So, where the nas update requests going? Please do logviewer based on the nas ip.

ian

Thanks. That's the question ... I don't know - this is log based on IP. Exactly the same

Do you have an mute mismatch which the dsl router ignores?

? don't know ? 

How to check for that?

Hi,

have a look at logviewer system.

mtu size of the nas interface should be set in the nas networking GUI.

ian