No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Connection Status of the URL Category Server is all the time disconnected

Publication Date:  2018-01-31 Views:  231 Downloads:  0
Issue Description

Version Information: USG6300 V500R001C60SPC300

Fault Symptom: the Connection Status of the URL Category Server was all the time disconnected and that caused the firewall to not block URL sites which were defined in security policies.


Handling Process

1)     1)Confirmed if the ping to sec.huawei.com it’s working. This firewall was able to resolve this domain and this wasn’t the issue.

2)     2)Licenses were valid.

3)     3)After asking the configuration I confirmed that the firewall is allowing the HTTP and the FTP traffic from local to untrust

4)     4)Checked if the country where the server resides was configured.

 

Root Cause

In order to use the remote URL category server, the customer must specify the country where the server resides. If they do not specify the country or the specified country is incorrect, the remote URL category server cannot be queried.

Solution

Advised to use the ‘country’ command in system-view which configures the country or region where the device is deployed in the URL filtering function.

<sysname> system-view

[sysname] country CN

The function takes effect only after a license is valid and related component packages are loaded dynamically. In V100R001 the country can be configured from Object > Security Profiles > URL Filtering. 

END