USG5300 configured disable session state-inspection function leads to URL filter inefficiency

Publication Date:  2012-09-10 Views:  221 Downloads:  0
Issue Description
User configure url filter with user-defined strategy, reference predefined template, configuration command correct, but url filter inefficiency, enable blacklist and whitelist or user-defined manner still inefficiency, review as below:
<USG5320>disp url-filter statistics
13:51:13  2011/06/15
Statistic information about URL filtering
------------------------------------------------------------
  Total HTTP requests           : 0
  Total permitted HTTP requests : 0
  Total denied HTTP requests    : 0
  Match blacklist               : 0
  Match whitelist               : 0
  Match user-defined category   : 0
  Match pre-defined category    : 0
  Default action                : 0
------------------------------------------------------------
Alarm Information
NULL
Handling Process
1、 Enable url filter again, problem still exists, review update time of predefined and it has updated to latest edition already.
2、 Review configuration again, user disabled session state-inspection function, open up “undo firewall session link-state check” again, url filter become effective, function works.
<USG5320>disp url-filter statistics
13:51:13  2011/06/15
Statistic information about URL filtering
------------------------------------------------------------
  Total HTTP requests           : 3793
  Total permitted HTTP requests : 2153
  Total denied HTTP requests    : 1640
  Match blacklist               : 13
  Match whitelist : 2
  Match user-defined category   : 0
  Match pre-defined category    : 3776
  Default action                : 0
------------------------------------------------------------
Root Cause
1、 url disabled, command line don’t display as default after enable this command.
2、 url reference predefined template hasn’t update yet.
3、 Others.
Suggestions
User can’t disable session state-inspection function when enable url, av, ips and other functions.

END