BWC Cybersecurity Overlord ✭✭✭
Reactions
Comments
-
Funny update, after updating my Mac from Big Sur (11.7) to Ventura (13.1) the junk reports are not getting rendered anymore in Mail for most of the time, the same what happened on iOS, except the crashes. It seems that some changes from Apple in WebKit etc. do not play well with the Reports. After some back and forth is…
-
@Marco_Lazzarotto AFAIK the relevant OIDs are not in the SNMP tree returned by the SMA. The disk usage is pretty limited anyways because of the architecture, I experienced disk space related issues a while back but not much you can do about it. Geo-IP/Botnet filled up the space for me. --Michael@BWC
-
@A_Elliott as so often in life, there is no definitive answer. I'am running plenty of VOIPs via VPN as well, because not struggling with NAT etc. is a big benefit of this. Whenever possible this is my first approach. It probably depends on multiple factors like available bandwidth, latency etc. If anyone encounters the…
-
@Jeong I believe only a SNWL engineer can answer the question, but my best guess is, that wdTask is the Hardware-Watchdog. If you downloaded the Trace Logs they might give you a hint what caused the hang. In the past (way way back) serial console was the last resort to figure out what caused a crash, but this might not…
-
@NTI afaik there is no easy way to gather this information, Windows eventlog holds some information in the SentinelOne/Operational section which might be helpful. S1 has some tools internally for working with the logs, but they keep them secret. The "best" way would be probably to gather this information via API call, but…
-
You're right, they are referring to 22.3 EA, but there is no 22.3 at this moment, I checked with S1. My customers confusing version numbers all the time, it might be the case here. Maybe there is an internal beta, but no public EA. S1 says that the fix will be automatically enabled in the upcoming versions, which might be…
-
I don't see any reason why a reboot could cause more harm. If your Firmware is not at 6.5.4.11 I would take the opportunity to combine the reboot with a firmware upgrade if you don't have special needs to keep your firmware at current level. --Michael@BWC
-
@shukerra I'am a SentinelOne Partner and can assure you that they did not communicated it properly. There is a Security Notice available from S1 which is not clear at all, but my that's due to my limited understanding of the english language. I cannot quote the whole Security Notice but it stated that there is a workaround…
-
@kylakonen did you ran a Packet-Monitor to make sure the Probe was really initiated? Did you tried the Option Probe responder.global.sonicwall.com on all interfaces in this group? Do you have any custom Network Routes which may cause this? --Michael@BWC
-
Despite the many information you provided, are you using SSO by any chance? Logging into the Appliance as admin will terminate the SSO session, because one IP cannot be logged in more than once, TSA is the exception on that. --Michael@BWC
-
@1rd4fCH SNMP isn't the strong suit and IMHO the mentioned trap values cannot be gathered by snmpget etc ... they are supposed to be send via trap but I'am not sure if this is even working. The OID will be in the range of .1.3.6.1.4.1.8741.1.1.1.1.5 if I'am not mistaken. But trap is key here, there is no way go poll the…
-
@Trican you should have bought yourself a HA-unit which does exactly you wanna accomplish. SKU: 02-SSC-6447. IMHO that's one of the outstanding features of SonicWall appliances to get this done without the need of buying additional licenses, one more piece of hardware and you're good to go. Except you want Statefule HA,…
-
@fre the request from the original source IP is answered by NGiNX. All requests are then initiated by NGiNX in the name of the inquirer with it's own (proxy) IP, the classic definition of "by-proxy" :) There is nothing you can change, but NGiNX (or proxies in general) are able to forward the original IP in a HTTP-Header…
-
@fre great to hear that at the end you got it resolved and as mentioned, NGiNX is a great choice for that kind of stuff. --Michael@BWC
-
@jtpryan nope, that would be to easy, depending on the TZ model there is space for an internal storage module. Side-Note: Even on larger systems logging is far from perfect. --Michael@BWC