Log in

Sangfor Support Center

Table of Contents
< All Topics
Print

[IAG] DNS proxy selection custom category does not take effect

Posted
Updated
Byadmin
Views5

Problem Description

DNS proxy selection custom category does not take effect

Effective troubleshooting steps

  1. Configure the DNS proxy discard test to confirm that the custom URL category is not effective (it can still be resolved)

  2. Directly configure the custom domain name as a proxy to take effect normally (unable to resolve successfully)

Root cause

There is a problem in the underlying implementation of the query_usr_url_type interface of the DNS proxy driver to check domain names and match custom URL groups. The wrong matching node is taken, resulting in a failure to match.
The same phenomenon also occurs when the SSL decryption policy references a custom URL group and the link load references a custom URL group;

solution

Install optimization package KB-AC-20230824-701-*Fix the underlying implementation of query_usr_url_type interface to use custom library node matching;

Operation Impact Scope

Restart the device. It is recommended to do so when business permits

Is this a temporary solution?

No

Original Link

https://support.sangfor.com.cn/cases/list?product_id=22&type=1&category_id=23781&isOpen=true