HTTP scanning issue

Hi,

possible issues with your DNS in looking up the webfilter database (online).

Do your devices use the XG DNS all the time or are they forced through the web proxy when filtering is enabled, do you have any DNS filtering rules?

Ian

My devices do not use the XG for DNS everything on the internal network uses the internal DNS.  the server has the ISP DNS server setup as forwarders

The only DNS rule I have is to allow all DNS traffic from the internal DNS server

Hi,

please post your firewall rule that is used for the http access.

Ian

Attached is the rule:

Hi,

nothing jumps out at me from your rules. I think a process of elimination is the next step.

Try a different IPS rule eg LAN to WAN, though from memory they are all the same, just templates.

Then try changing your WEB policy to allow all.

Do you have two external links, if not change the gateway to your WAN interface.

Ian

Hi,

nothing jumps out at me from your rules. I think a process of elimination is the next step.

Try a different IPS rule eg LAN to WAN, though from memory they are all the same, just templates.

Then try changing your WEB policy to allow all.

Do you have two external links, if not change the gateway to your WAN interface.

Ian

I set the WAN gateway to our one connection and that seems to help, but when I turned off caching, with the scanning boxes checked, speed significantly improved.

Hi April,

some of that comes down to your link speed, which I think you specified was not an issue and how long the XG takes to load the data into its database. I find my XG takes about 5 minutes after a restart to update before a reasonable browsing speed, but my links are also very slow.

Ian