- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
Troubleshooting partial or broken websites (not completely loading)
05/30/2022 
621 People found this article helpful
131,028 Views
Description
Many websites though allowed will only render partially. The text content is there and all the links work, but that is not the complete webpage. Something like this :
The first thing to do is find out if the MTU (Maximum Transition Unit) on the active WAN interface is right. The KB is available here. How can I determine the MTU size of WAN interfaces?
We can use the Event logs to understand what is getting blocked like this KB here- Troubleshooting Content Filter Drops
However, there are certain websites that would be allowed, but still not displayed properly. Unable to access certain websites, either slow or completely failing.
This KB is for such situations when logs and/or packet capture would show all the drops (even legit ones) from the computer and it will be hard to identify the URLs to allow.
Resolution
Even though the website is allowed by category or URL itself, there are scenarios where it would not render completely. It is either partial or textual.
Firstly, to identify what is getting dropped is by going to the Developer tools for the browser. In the below example, Google Chrome is used. The steps are almost similar on all browsers.
- Navigate to the browser's Settings | More Tools | Developer tool
- On the Developer tools window side-bar, Select Network
- All those in red have been dropped or it did not get a response from the server in WAN. When that name is clicked, more information on the redirection website is revealed. The main domain is what needs to be allowed. Please note: the entire URL is not needed, only the main domain as shown on the screenshot.
- Make a note of all the domains/URLs to be allowed
Resolution for SonicOS 7.X
This release includes significant user interface changes and many new features that are different from the SonicOS 6.5 and earlier firmware. The below resolution is for customers using SonicOS 7.X firmware.
1. First step is to identify which CFS policy is the IP/user falling on. In my example, it is the CFS default policy
2. Now for the corresponding CFS profile, the Allowed URL list needs to be edited. I had to create a new one and added the URL to it
3. Now on the CFS profile, use the created Allowed URL as sown below:
Click 'Save' to save the configuration. Check the website now. Repeat the process if need be.
Resolution for SonicOS 6.5
This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.
1. First step is to identify which CFS policy is the IP/user falling on. In my example, it is the CFS default policy
2. Now for the corresponding CFS profile, the Allowed URL list needs to be edited. I had to create a new one and added the URL to it
3. Now on the CFS profile, use the created Allowed URL as sown below:
Click OK to save the configuration. Check the website now. Repeat the process if need be.
Related Articles
- Firewall is not generating syslog packets
- Configuring SNMP in SonicOS
- Why is SonicWall blocking access to websites?
YES
NO