Astaro's US tech support has assured me that it is a known issue and that they are working on it.
It was suggested to me that I disable the HTTP proxy until they get this issue worked out.
I have found that as long as you do a fresh load of the 5.x box, setup your surf profiles, make your network assignments, and make NO changes, the content filtering works. Except for the downloading files thing.
So I have left my proxy/cobion protection running and force my daughters machine to use it. ( I don't want her downloading anyway ) I just made a My_Machine ANY ANY Allow rule and skip the proxy altogether.
I had hoped this version would fix that problem, but it doesn't look like it's going to.
I have two ASL boxes in our school district and had hoped to be able to test 5.0 in a busy enviroment before switching them over to the new versions.
If they can't get the http proxy working before the 24th of this month I will have to wait until August before I can test it. And if it doesn't work any better in 5 than it does in 4, I may not switch then.
Surf protection will just stop filtering anything but not notify you( teachers freak out, kids love it ) , or it will send a message that it has the surf protection has stopped responding and restart.
It's been an eye opener switching our content filter provider from N2H2 to Cobion. The N2H2 content filter database is stored locally so there is no lag time when checking the classification of a site. This database is automatically updated nightly. And we didn't have 90+ items in our blacklist to try to block pornography and game sites either.
If it didn't cost 3 times as much we would have been forced to switched back last August when school started.
The ASL firewall is great. The Cobion / ASL content filter solution needs work. Please make this a priority.