- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
Website opens but images/content is distorted/not visible (red x)
03/26/2020 
34 People found this article helpful
47,741 Views
Description
CFS: Website opens but images/content is distorted/not visible (red x)
Resolution
Condition/Scenario 1: The site www.abc.com is visited. This site falls under the category 33, News and Media, which is one of the allowed categories. The site opens, but pictures/images/banners are replaced by a red X symbol.
Condition/Scenario 2: The site www.abc.com is visited. This site falls under the category 33, News and Media, which is one of the allowed categories. The site opens partially with the message in the SonicWall log that “This site is being blocked by SonicWall CFS Category xx” (something other than 33).
Resolution:
- Go to www.abc.com.
- In Internet explorer go to View -> Source. In Mozilla Firefox go to View -> Page Source
- In the resulting Notepad file, do a “Find” for “.com”.
- Note the sites that you find. Mostly 2 or 3 websites are repetitively found.
- Go to http://cfssupport.sonicwall.com/eng/index.jsp. In the Page that opens, you will find “Enter the URL you wish to view the rating for:” Enter the URL in the text box. Click on Submit. For e.g.: If you find www.def.com in Step 4, enter it in the text box and click on Submit. Repeat this step for each website found in Step 4.
- Note the Category that is returned.
- In SonicOS Standard firmware, go to Security Services-> Content Filter. Click on Configure. Go to “URL List” tab on the new page and cross-check if the Category found in Step 6 is enabled. If enabled then go to “Custom List” tab, add the url in the allowed domains. Make sure that Enable Allowed/Forbidden Domains is checked on the Custom List tab
- In SonicOS Enhanced firmware, go to Security Services-> Content Filter. Click on Configure. Go to “Policy” tab on the new page and click on Configure for the policy in question. Cross-check if the Category found in Step 6 is enabled in the “URL List”. If enabled then go to “Custom List” tab, add the url in the allowed domains. Make sure that Disable Allowed Domains is not checked on the Settings Tab.
For e.g.: Add def.com(from Step 5) to the Allowed domains list
- Go to Internet Explorer, clear the cache. Visit www.abc.com. All the images/content will be visible without any distortion.
Real time Scenario
- Enable CFS on the LAN Zone
- Configure CFS default policy
- Enable Category 48 – MP3/Streaming.Click Ok.
- Note that Category 33 is not checked.
- Log Out of the Firewall
- Visit www.kfvs12.com which is a site falling under the category 33
- It can be seen that some of the content is displayed, while many images are not displayed/distorted.
- The Logs below (Fig 4) indicate that CFS is blocking this website based on Category 48 whereas www.kfvs12.com comes under category 33.Obviously some of the Images are being hosted from another website which comes under the category 48(In this case its www.worldnow.com).
- Using the source code of the html page, we can find out the websites from which these images are being hosted. We can add these websites in the Allowed Domains. In the e.g.: Add worldnow.com in the Allowed Domains.
- In SonicOS Standard firmware, make sure that Enable Allowed/Forbidden Domains is checked on the Custom List tab.
- In SonicOS Enhanced firmware, make sure that Disable Allowed Domains is not checked on the Settings Tab
- Now visit www.kfvs12.com after logging out of the Firewall.
- All images are visible without any distortion
Related Articles
- How to force an update of the Security Services Signatures from the Firewall GUI
- How to upload security services signatures manually on Closed Environments?
- How to Create Gen 7 Settings File by Using the Online Migration Tool
Categories
- Firewalls > TZ Series
- Firewalls > SonicWall SuperMassive E10000 Series
- Firewalls > SonicWall SuperMassive 9000 Series
- Firewalls > SonicWall NSA Series
YES
NO