Web Traffic Blocked by Default? (New Setup)

Dan,

can you share your policy rules? In order to be able to surf on internet a LAN to WAN Policy rule is needed.

If the rules exists, does the HTTP SCAN is enabled?

Provide more info in order to get help.

Thanks.

I thought my top rule would have made that possible, but maybe I am overlooking it.  Here is a snap of that.

Dan,

can you try disabling decrypt and scan on first rule? Check if it works.

Thanks.

Hi Dan,

XG follows a Top-Down approach. What happens when you try to browse any website, do you get a timeout?

I request you to add DNS services in the Firewall Rule ID:1. Please check if MASQ is configured withing the same rule. PFA screenshot:

Thanks

Hi Dan,

XG follows a Top-Down approach. What happens when you try to browse any website, do you get a timeout?

I request you to add DNS services in the Firewall Rule ID:1. Please check if MASQ is configured withing the same rule. PFA screenshot:

Thanks

This was sort of it.  I rearranged the policies and moved my phones to the top, but unchecking the HTTPS decryption was also a portion of it.  Sucks that isnt prime time yet.