Arkwright Community Legend ✭✭✭✭✭
Reactions
Comments
-
Check WAN>WAN access rules. Enabling management services on WAN interfaces creates rules there automatically.
-
By my current understanding, X1 and X2 should both have access to X0. That is not the out-of-the-box behaviour of WAN→LAN traffic. If that's how it behaves then you've configured it like that. in routing rules, X2 is defined as the gateway for the .200.0 subnet. This way traffic from it can't access the rest of the network…
-
I assume the firewall is expecting them on 500 and dropping them on 4500, or vice-versa. Are the payload packets inside the tunnel actually being dropped?
-
Do you think the traffic should be allowed, or not?
-
You don't need to create any route policies in this scenario because all networks are directly connected to the firewall and routes to connected networks are created when the interface is configured. If X2 is a WAN interface then what you probably want is a port forward, as WAN interfaces are usually NATed. Maybe a little…
-
You could try an explicit route ping probe, explore the options in there.
-
I don't think access rules on firewall itself will make any difference to firewall sending syslogs out of its own LAN interface. So don't worry about that. You could try a packet capture with Wireshark on your target server. Have you followed this?…
-
Can you ping it?
-
The annoying thing here is the false sense of certainty that the UI gives the user. The countdown timer is at best guesswork and at worst, total fiction!
-
"grooming phase"…interesting use of language…I wouldn't admit to grooming anybody on the internet :D
-
Every new firmware version should get it's own thread in this forum, started by someone from Sonicwall.
-
IME the only supported version is the most recent one, because if you are running anything other than the latest, they will just tell you to upgrade. So no point raising a ticket if you're not on the latest.
-
I know they are technically compatible because they've been in use for 10y. This was two SFPs at once that didn't come up. How do I see what the model is from the management interface?
-
Do you have access to the Mysonicwall account this device is in? If so, you might find some cloud backups there [don't think remote backups are enabled by default though]. Otherwise, just give up now and start re-doing your configuration.
-
A simple "count" of CVEs is not a fair comparison across vendors. "CVEs per <something>" would be fair, but the problem here is defining "<something>". Even if you compare just the UTM platforms from different vendors [rather than simply the entirety of their portfolio], if they do different things then the one that does…