About reaper

Hi Rob this custom logo is used in the generation of pdf reports and is not available to the webserver service, so you will not be able to use it as a relative link in your code. if you have an ssl enabled internal wevbserver, you can however host the logo on that server and link to it from the block page. (hosting the logo on a non-ssl server will result in certificate errors if you are using a commercial cert orhave set a trust to the selfsigned one) kind regards Tom ... View more

Hi Markus This can sometimes be related to a misconfiguration in captive portal, are you using CP and if so: have you set source and destination zones correctly? (any-any will cause this) ... View more

Hi you can delete old software via cli by using "delete software version" however: when upgrading the new image is installed on a different partition (sysroot) than the active one, this allows you to, in case of upgrade failure, roll back to the previous software without the need to reistall and keep working during the install without the need for immediate outage. That's also the reason you are not able to delete 3.1.6 as it is still installed on the alternate (backup) sysroot partition. regards Tom ... View more

you can create a rule that allows all the allowed applications like youtube, a rule that blocks all streaming media through an application filter and a rule that allows web categories streaming media, this will allow users on the websites but should block the actual streaming applications you can also set up a url filter that blocks everything related to streaming media but contains either a custom category or a whitelist of allowed urls, this will also block users from accessing the website ... View more

hi can you do a "show system disk-space"? this should show which partition is full and can help pinpoint where to go to delete files to free up space in some cases a reboot may help free up cropped up temp files left over from installs ... View more

To do a mass replace you could export the config file from the device tab, open the file in any text editor, replace all instances you want to replace and reimport the file back onto the device . ... View more

Hi Eugene the DNS proxy is a stub resolver, this means it can receive and forward DNS queries to other (authoritative or recursive) DNS servers but can't act on its own. it enables you to reroute requests for certain zones to a DNS server of your choosing, and forward everything else to a different DNS a good example would be servers in a DMZ that need to know certain internal zones, but you don't want them accessing the internal DNS server directly. if you setup a DNS proxy that reroutes for example localzone.local to your internal DNS server, and forwards everything else to the external DNS, you make sure other zone information on your internal DNS servers is kept secret from the DMZ servers. it can also be set up to connect internal DNS servers with external ones, if you don't want them directly connecting to eachother, or if the internal DNS servers are not allowed outside of the network, as in your example regards ... View more

the proxy dns was designed as a stub resolver so it is able to bend certain dns queries to an alternative dns server of your choice and have all the other dns entries handled by an upstream DNS server (recursor) it will also not be able to handle as authoritative as we don't hold zones, we forward depending on the query regards Tom ... View more

Hi Stuart if you have that many hosts sitting on the inside of the network, it might be interesting to consider having internal DNS records pointing your LAN hosts to an internal IP's for the servers. the existing rules set up for your static nat are geared differently (no source translation for inbound connections, which is required for u-turn and different zones etc) so unfortunately there's probably no clean way to do that using NAT rules regards Tom ... View more

Hi Price could you try setting these without interface and with a second filter with 10.100.240.179 as destination. Can you try this command a couple of times during your tests: "show counter global filter delta yes filter packet-filter yes" , are there counters visible after the second time you execute this command, are there drops in there ? regards ... View more

you could experiment with adding monitoring specific groups on your AD and using these in the filters ... eg.: add group monitoringAB monitoringTR and monitoringZD, add the users in there and then filter for impressive\monitoringAB regards Tom ... View more

Hi Yes you can For this to work you would only need to create a new dns proxy, connect it to an interface and configure its primary and secondary upstream DNS servers. Then you would need to point your internal DNS server to the internal IP of the (L3) interface and make sure a security policy allows connection from the inside to the internal interface and from the external interface to the internet. Take note it will require upstream DNS servers, the proxy can't do root lookups on its own regards ... View more