USG 110 - Content Filter - Trusted Web sites

kyssling
kyssling Posts: 102  Ally Member
First Anniversary 10 Comments Friend Collector First Answer
edited April 2021 in Security
Hello,
someone can confirm that the Content Filter settings of Trusted Web Sites always has priority over profile setting?

I do not know where I'm making a mistake, but I've added "*.*Iomega*.com" entry to Trusted Web sites,
no change, i added to Trusted Web sites under Profile and I still see a message from USG:
"Web access is restricted. Please contact the administrator (Parked Domains)"

I understand that the site "iomega" does NOT exist now, but I'm only interested in why this dialog is shown and not common "Web site does not exist ... etc ..."

Thank you

All Replies

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,278  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer

    Hi @kyssling,

     

    After you add websites in Trusted Web Sites, remember to go to the target profile > Custom Service.

    Tick Enable Custom Service and Check Common Trusted/Forbidden List.



    In the following example, the category “News” are blocked but cnn is not blocked because it is on the list of Trusted Web Sites.


  • kyssling
    kyssling Posts: 102  Ally Member
    First Anniversary 10 Comments Friend Collector First Answer
    Thanks for answer, no change see images below pls.

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,278  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer

    Hi @kyssling,

     

    Even if the category "Pornography/Sexually Explicit" is not selected, “iomega.com” is still blocked because of parked domain.

    However, if you manually enter “ww25.iomega.com” in the browser, you can still access the website.

    We will check why iomega.com is blocked with trust website is configured.

    Keep you updated of the progress.


  • Zyxel_Emily
    Zyxel_Emily Posts: 1,278  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer

     Hi @kyssling,

     

    In Trusted Web Sites, enter “*iomega.com”.

    Then http://iomega.com is not blocked.




    Besides, “Parked Domains” is in Security Threat, not Managed Categories.


  • kyssling
    kyssling Posts: 102  Ally Member
    First Anniversary 10 Comments Friend Collector First Answer
    Hello, it's not important so I close it ...

    However, at Trusted, I change to : * iomega.com, I uncheck Parked domains. The result of the Test is again below (but I will get the browser).

    In my opinion, Trusted WebSite should override the "ParkedDomains" setting and more ...



  • Zyxel_Emily
    Zyxel_Emily Posts: 1,278  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer

    Hi @kyssling,

     

    The test result of "Test Against Content Filter Category Server" is for you to check which category does the website belongs to.

    It is not the result of the website is blocked or forwarded.


    You can connect one PC to LAN and apply the content filter profile to the corresponding security policy rule.

    Then access the website http://iomega.com.

    You'll find the website is forwarded because it is on the list of Trusted Web Site.



Security Highlight