Rules containing domain objects bypassed in rulebase

Support Center > Search Results > SecureKnowledge Details

Solution ID	sk61823
Product	Security Gateway
Version	R75, R77, R77.10, NGX R65, R77.20, R77.30
OS	SecurePlatform, IPSO 6.2, IPSO 4.x
Platform / Model	All
Date Created	22-Mar-2011
Last Modified	22-Apr-2018

Symptoms

Rule containing domain object, as source or destination, is bypassed in the rulebase. Domain object contains domain such as ".youtube.com"

Cause

Gateway does not use alias name for DNS resolution. It uses reverse DNS resolution. E.g nslookup on www.youtube.com returns:

Server: UnKnown
Address: 67.210.167.66

Non-authoritative answer:
Name: youtube-ui.l.google.com
Addresses: 209.85.225.93
209.85.225.136
209.85.225.190
209.85.225.91
Aliases: www.youtube.com

When you do an nslookup on 209.85.225.190 it returns:

Server: UnKnown
Address: 67.210.167.66

Name: iy-in-f190.1e100.net
Address: 209.85.225.190

Solution

Note: To view this solution you need to Sign In .