RV320 Content filter not working

[g.thorn01]

Hello,

We have recently upgraded to the RV320 and are having issues getting the content filter to operate correctly. We have updated to the most recent software version : 

Firmware Version:

v1.2.1.14 (2015-08-13, 14:21:24)

For example, we wish to block access to www.facebook.com and all subdomains. (see attached)

However having added the details into the forbidden domains table and enabled the feature; we are still able to access the domains.

Having done some experimentation, it would seem that the issue is related to HTTPS headers. if we access a site using only HTTP the content filter successfully blocks the access, however if we then access the same site using the HTTPS request header; the browser just walks on by the content filter, rendering it completely useless.

So any site that automatically redirects to HTTPS such as "facebook.com" doesn't get filtered.

Are we setting this up incorrectly or is this a real bug?

If its a bug, can we request that this feature is fixed so that both HTTP and HTTPS requests are filtered

Thanks for your help

[Ivan Acao]

II will take it a step forward.  We have the RV320 with web filtering.  However I am trying to block social networking at a site where it is being abused.  The web filter will not block any social networking site, however I don't seem to find that issue anywhere else online.  Does anyone have an answer.  Thank you

[tmadeshw]

Hello Ivan Acao,

Thanks for contacting Cisco support community center. I am really sorry for inconvenience caused and delayed response.

I am afraid that Cisco small business devices do not provide full fledged web filtering features. It can be used to block http sites & internal network using domains. It cannot be used to block any HTTPs sites like facebook, youtube, etc.

We can block specific IP by creating ACL rule if that IP is not keeping change. It will not block were the ip’s keep changing dynamically.

If you need any configuration or other assistance you can contact our SBSC support team by using below links

You can contact our SBSC team either via chat or call support with the help of below links:

https://supportforums.cisco.com/community/4841/online-chat-support

http://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html

[cap@nbservis.cz]

so you're basically telling us, that content filtering is absolutelly useles since most of the websites are https now. Well this feature, together with not working loopback NAT makes our RV325 absolutelly useles for our company. Our 10 year old TPLINK is capable of all this (I'm only worried about security because of old Firmware which was the only reason for "upgrade").

I need to block content for our employees. That's a must! Especially facebook and other social media. Well I hope our supplier will take that piece of junk back. I wish I could read this in specs or check other RV325's "features". I would never bought it knewing this.