Version Information: USG6300 V500R001C60SPC300
Fault Symptom: the Connection Status of the URL Category Server was all the time disconnected and that caused the firewall to not block URL sites which were defined in security policies.
1) 1)Confirmed if the ping to sec.huawei.com it’s working. This firewall was able to resolve this domain and this wasn’t the issue.
2) 2)Licenses were valid.
3) 3)After asking the configuration I confirmed that the firewall is allowing the HTTP and the FTP traffic from local to untrust
4) 4)Checked if the country where the server resides was configured.
In order to use the remote URL category server, the customer must specify the country where the server resides. If they do not specify the country or the specified country is incorrect, the remote URL category server cannot be queried.
Advised to use the ‘country’ command in system-view which configures the country or region where the device is deployed in the URL filtering function.
[sysname] country CN
The function takes effect only after a license is valid and related component packages are loaded dynamically. In V100R001 the country can be configured from Object > Security Profiles > URL Filtering.