RV110W Internet Access Policy Website Blocking

[wood.mark.d]

I have an RV110W running firmware version 1.0.1.6 and I am trying to figure out how to enable website blocking in the Internet Access Policy screen.

The Add Row button is grayed out in that section, as are the associated checkboxes.

Is there something else one needs to do to enable this feature?

If I set a name etc. at the top, and click save, it tells me "You must at least set a website blocking or PCs rule," so it is not the case that one has to save some information before continuing!

Thanks in advance.

-Mark

[mpyhala]

Hi Mark,

Thank you for posting. The Add Row button should be available. What browser are you using? If IE 8 or 9, have you tried compatibility mode? If possible, try Firefox or Chrome and see if the button is available. You might also reboot the router.

Please let us know if you continue to have problems or if you are able to configure the rule.

[wood.mark.d]

I am using IE 8; I tried it with an old version of Mozilla Firefox and also IE 8 with compatibility mode enabled, but got the same experience.  I also tried rebooting the router, and even reinstalling the firmware (1.0.1.6), but they did not solve the problem either.  Verified that the binary checksum was okay too.

It will allow me to add a row in the section "Apply Access Policy to the Following PCs" but not in the "Website Blocking" section.

[mpyhala]

Mark,

I did some testing and found that if I changed the rule to "Always Allow" the router would block whatever site or keyword that I entered. I tried to change it to "Always Block" and it did not work. I had a customer with the same issue and the case was escalated so hopefully a firmware release will fix this unusual behavior. If I find any new information I will post it here.

[wood.mark.d]

Interesting.   There are 4 choices in the drop-down menu, and I see now that if I pick one of the two that includes the word "Allow" ("Always Allow", "Allow by schedule, otherwise block"), the Add Row button is no longer grayed out.  But if the selected Action involves blocking, the Add Row is grayed out.

Thanks for looking into this.

[wood.mark.d]

A couple of additions on this.  Even under "Always Allow" it does not block the website, unlike what your posting indicates it does for you.

I see that the firmware checksum displayed in the System Summary page does not match the checksum on the Cisco website for version 1.0.1.6, even though that is the version it reports that I have.  The version I downloaded on to my PC does however have the correct checksum; I double-checked that.   Should the checksum reported here match?  If so, any ideas why it might not?  I have tried uploading the firmware several times but to no avail.

[wood.mark.d]

Hello -- I see this problem is still not fixed in the new firmware release (1.1.0.9).

Under Firewall -> Internet Access Policy, in order to even get the Website blocking UI enabled one has to (as you pointed out before) switch the sense of the terms block and allow:  if I select "Always Allow" it will at least let me enter in URLs or keywords. 

However, under no circumstances can I get it to actually block access to the site by URL or by keyword.

Has anyone gotten an internet access policy to work?

[chchapma]

Hello Mr. Wood,

Do you have the access policy set to block the URL or keywords by a schedule?  If so, ensure that your NTP client is recieving the correct time from the default ntp server to the RV110W.

Chris

[wood.mark.d]

I have tried it either way (with a schedule or without), but to no avail.

And of course, even w/ the new firmware version I continue to have the problem where in order to even be able to enter in a URL or keyword, one must select Always allow or Allow by schedule.  (It appears from the posting by mpyhala above that the sense of allow and block are somehow reversed?)

I have yet to figure any way to get this feature to actually work.

[wood.mark.d]

After talking to Cisco support, the problem is this:   although the manual states that it is optional to apply the policy to specific PCs, it is NOT optional; a PC (or PCs, specified by IP or MAC address) must be specified.   And the sense of the word "allow" and "block" is reversed from what one would expect.  To block traffic to example.com, the action that you specify is "Allow".

[esagastume002]

I was trying to block Facebook, when I block the URL and specify the IP address of the client to block it work mediocre, becouse it only block http://www.facebook.com,  but if the client type https://www.facebook.com it allow him to see the page.

It only work por webpage in port 80, not other like 443