Outbound Policy advise

General
,
1

I have a newly deployed site using Peplink Balance 580X.

Overall the connection is working fine using speedfusion.

However, there was an issue raised where it said that there were some specific sites that were not inaccessible - specifically -

https://www.brusselsairlines.com/ and
https://indianvisaonline.gov.in/

I did some research and found out sometimes when traffic are being passed through the SpeedFusion some sites block it as they seem to come from VPN connections.

To bypass this, I created two identical policies one for the airlines site and the other for the visa site but the airlines site is working fine now but the visa site is saying it is timed out. I have tried this from other computers from other sites where there is no speedfusion and they are working fine.

Is there any other thing that needs to be done for this?

2

Can you share the rules as you have them configured?

It could also be something a bit more subtle that the Indian visa application site is loading resources from other domains that are still being impacted when traffic is sourced from SpeedFusion.

To test that theory you could create an outbound policy that matches the source of a single host device on your LAN and send that directly out the WAN regardless of destination to see if that fixes it.

3

Thanks a lot for your response, yes attached is the config; the bottom two are through the speed fusion, the others are websites that I am trying to fix and I believe this config should route the traffic directly through the WAN paths

OutboundPolicy_Config
OutboundPolicy_Config1398×211 63.6 KB

I had this identically configured but added additional WAN paths in case the one of the WAN paths was not available when the attempts are being made. I have had no complaints regarding the airlines website though

Please let me know if you need any other information?

4

Try removing the www

2 Likes
5

As Jason mentioned remove the “www” from there so the domain is treated as a wildcard.

I’d also set the protocol to “any” for now too, just in case either of those sites are using QUIC protocol.

2 Likes
6

Thanks both! it is working now!

1 Like
7

Sorry about the follow up on this post, the main website is working for https://www.brusselsairlines.com/ but when they click on the login section the login page is getting blocked! I have added both the links as per the attached but the main site is working but not when they click login, is there something else that needs to be done as a wildcard to allow subsequent browsing

Airlines website access
Airlines website access1477×148 9.19 KB

8

Any advise on this please?

9

As before, you are possibly being too specific or the sites are loading resources from other sources that are not tied to the top level URL.

Try doing “miles-and-more.com” on its own without the specific sub domain.

A way to normally look into these loading issues is often to use developer tools in your browser and see what sources are being used to load content from and whether they need to be bypassed.

If you keep running into these kinds of issues then considering who or where SpeedFusion service is provided from for you might need some consideration.

Many of the public cloud providers (including the ones that Peplink themselves use) IP blocks will be flagged as “VPN” or some such so investigating whether there is another provider, or location you could host your own FusionHub at is a viable option.

2 Likes