Nxfilter cluster

[rezafathi]

Hi,

I have created cluster with 2 nxfilter installed on ubuntu. one of them is master and another one is slave. I have 2 questions:

1- In the screenshots, on both servers it shows ip address of slave node. why?

2- I disconnected the master node network card to check the cluster, I could access internet and filtering without any problem. But when I did nslookup, the windows showed the primary dns ip (master node) and could not resolve either local or outside queries to ip and vice versa. what is the problem?

[support200]

The list is for slave node.

If you can access the internet then it's only about nslookup. Maybe it doesn't switch to secondary DNS by its own.

[rezafathi]

yes i can access internet but can not access to local network by local dns name

[support200]

You mean that you can resolve your AD domain with master node but can't without master node? Then try to set slave node IP for nslookup.

nslookup your-ad-domain slave-node-ip

[rezafathi]

yeah that is ok now thank you. I have long list of domains to whitelist because I filtered everything. should i add them one by one on whitelist->domain or paste it in "common bypass" section and check "bypass filtering" box?

[support200]

If I were you I would create a custom category and put thosse domains into it and allow in on policy level.

[rezafathi]

I created a custom category and inserted all 270 domains on to it but in policy there is an option to block from category. where can I allow this category in policy?

** I should mention that these domains are for windows update, antivirus update end etc.

[support200]

Try blocking by categoreis and block other categories and leave it unchecked.

[rezafathi]

can I use screen time category section instead?

[support200]

Why? It's not about blocking. You want to restrict their internet usage time?