- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
-
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
-
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
Content Filter Server Not Responding
11/09/2021 
132 People found this article helpful
101,092 Views
Description
The SonicWall checks CFS server status by probing the following CFS servers on UDP Port 2257:
webcfs0x.global.SonicWall.com : x has to be replaced with the CFS server.
The CFS Server used on your SonicWall may vary based on firmware and appliance. To find out which CFS Servers your SonicWall is using, please download the Tech Support Report (TSR) and search for "--SonicWALL CFS Configuration--" or "CFS Filter". The CFS Server will be listed next to "Server Address" and "Secondary Server Address".
At any given instance the IP addresses of two of the above servers can be checked in the following section of the Tech Support Report (TSR):
The error Server Not Responding occurs when the SonicWall is unable to contact any of the above SonicWall CFS Servers.
This article lists the troubleshooting steps to address this issue.
Resolution
- CFS is license based. If a CFS license has been obtained, make sure CFS is being shown as licensed under System | Licenses. If not, synchronize licenses with SonicWall License Manager in the System | Licenses page.
- Make sure also to apply the following steps: Licenses not synchronized with MySonicWall - Resetting the Trust
If the issue persists:
- Navigate to System | Diagnostics | Select Check Network Settings under Diagnostic Tool.
- Click all the Test buttons.
- If Default Gateway is not responding you have to troubleshoot your Internet Connection.
- If DNS Server is not responding, please use another one.
- If the security management tests fail, check that DNS can resolve the names.
- Navigate to System | Diagnostics | DNS Name Lookup. Try to resolve webcfs00.global.SonicWall.com, webcfs01.global.SonicWall.com, webcfs02.global.SonicWall.com, and webcfs03.global.SonicWall.com.
If unable to resolve the CFS server names, change DNS servers under Network | DNS.
- Navigate to Security Services | Content Filter and enable the CFS Server Failover option
WebCFS Server Failover Provides the ability to enable WebCFS server failover, allowing a SonicWall security appliance to contact another server for URL rating information if the local server is unavailable. This ensures performance continuity for Web navigation and Web content filtering functionality.
NOTE: This option is not available on newer firmware (CFS4.0) as it's enabled by default.
If the troubleshooting steps above didn't help, please follow the steps below:
- Make sure UDP Port 2257 is not being blocked either in the SonicWall (WAN to WAN access rules) or by an upstream router (ISP). A Packet Capture under System | Packet Monitor for Ether type: IP, IP type: UDP, and Destination Port: 2257 will show if these packets are being sent, and if a response is being received.
NOTE: You will need to check the option "Monitor Firewall Generated Packets" in the "Advanced Monitor Filter" tab.
- Make sure the Load Balancing is enabled under Network | Failover & LB, even if you are using only a WAN interface.
- Make sure the IP addresses of webcfs0x.global.SonicWall.com is not being blocked either in the SonicWall or by an upstream router.
- Under Network | Interfaces | WAN (X1) | Advanced tab, lower the MTU size: How to change the MTU size.
If the issue persists after following all the troubleshooting steps, please contact our technical support.
Related Articles
- ‘Error sending one-time password’ encountered when connecting to NetExtender
- Supported SonicWall and 3rd party SFP and SFP+ modules that can be used with SonicWall NSsp series
- Supported SonicWall and 3rd party SFP and SFP+ modules that can be used with SonicWall NSA series
Categories
- Firewalls > TZ Series
- Firewalls > SonicWall SuperMassive E10000 Series
- Firewalls > SonicWall SuperMassive 9000 Series
- Firewalls > SonicWall NSA Series
YES
NO