Log in

Sangfor Support Center

Table of Contents
< All Topics
Print

[AF] Application control policy based on domain name does not take effect

Posted
Updated
Byadmin
Views1

Problem Description

The application control Policies PC to access some domain names, but the PC still cannot access

847825dfcca4fe0295.png (328.38 KB)

Process——

After enabling direct pass in [System] – [Troubleshooting] – [Packet Interception Log and Direct Pass], it is normal, and the default Policies packet loss is displayed.

332145dfccc2c04b60.png (36.6 KB)

Root cause

To implement application control Policies on domain names, you need to ensure that the traffic of the domain name DNS lookup by DNS passes through the AF device. Otherwise, you need to select the active resolution method Obtain the IP corresponding to the domain name.

solution

In the [Policies]-[Application Control Policies] settingsMedium check Active Parsing and it will work normally.

999125dfccacc2176e.png (158.94 KB)

Original Link

https://support.sangfor.com.cn/cases/list?product_id=13&type=1&category_id=772&isOpen=true