Security Gateway does not apply rules that contain Domain objects

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk61823
Technical Level
Product	Quantum Security Gateways
Version	R75 (EOL), R77 (EOL), R77.10 (EOL), NGX R65 (EOL), R77.20, R77.30 (EOL)
Platform / Model	All
Date Created	22-Mar-2011
Last Modified	07-May-2021

Symptoms

Security Gateway does not apply rules that contain Domain objects in either the Source or the Destination column
Domain object contains such domain URL as ".youtube.com"

Cause

Security Gateway does not use alias name for DNS resolution. It uses a reverse DNS resolution.

For example, the nslookup command for www.youtube.com returns:

Server: UnKnown
Address: 67.210.167.66

Non-authoritative answer:
Name: youtube-ui.l.google.com
Addresses: 209.85.225.93
209.85.225.136
209.85.225.190
209.85.225.91
Aliases: www.youtube.com

The nslookup command for one of the returned IP address 209.85.225.190 returns:

Server: UnKnown
Address: 67.210.167.66

Name: iy-in-f190.1e100.net
Address: 209.85.225.190

Solution

Note: To view this solution you need to Sign In .