Menu

BWC

Cybersecurity Overlord ✭✭✭
Avatar

Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".

Sign In Register

BWC Cybersecurity Overlord ✭✭✭

Badges (27)

5 Year Anniversary250 Answers4 Year Anniversary3 Year Anniversary250 Likes100 Answers100 Helpfuls2 Year Anniversary1,000 Comments50 Answers1 Year Anniversary500 Comments25 Answers100 Likes25 Helpfuls100 CommentsWork Out Loud5 Answers25 LikesFirst Answer10 Comments5 HelpfulsFirst Comment5 LikesPhotogenicName DropperEarly Adopter
See More

Reactions

9 Promote 189 Helpful 416 Like 0 Spam 5 Abuse

Comments

  • I checked my old cases and I could not see any pattern for this. Did you changed your last Support Renewal from 24x7 to 8x5 or vice versa? All of my few cases with GeoIP not licensed properly were started after 3 year renewals 8x5. If I remember correctly the customers had 24x7 before that. Either way, SNWL should put the…
    in SMA - Geo-IP & Botnet Filter License Comment by BWC August 2022
  • @Chechler_2 did you tried on different Endpoints, cleared the Browser Cache or used the Incognito Mode in Google Chrome to avoid any caching issues? If it's working in Firefox I cannot see a reason why not in Chrome. --Michael@BWC
    in CFS not working with Firefox and Chrome HTTPS Comment by BWC August 2022
  • @djhurt1 is your Inbound Path using Authentication to deliver to your downstream server? I see Notifications from time to time that my ESA is not able to reach my SMTP server, could not figure out a reason for that, because all systems are up all the time. --Michael@BWC
    in Email Security Gateway cannot reach destination hosts Comment by BWC August 2022
  • @RedNet it did not happen to me again, did you blocked the USA via GeoIP by any chance? This messes things up pretty hard. --Michael@BWC
    in SMA - Geo-IP & Botnet Filter License Comment by BWC August 2022
  • @Chechler_2 did you blocked QUIC (udp/443)? Because this is used by some high-volume Sites and currently not handled by most of the Firewalls out there. Just create an Access Rule with a Priority of 1 from LAN to WAN dropping all Packets for a new manually created Service QUIC (udp/443). This only applies if you're not…
    in CFS not working with Firefox and Chrome HTTPS Comment by BWC August 2022
  • @jtuckerchug I assume you're talking about SMA 6210, which is a 1000 Series Appliance. IMHO TOTP is enabled on Authentication Server Level, therefore it cannot be limited to specific Users and Groups, can't check myself right now, but I'am somewhat certain. I don't use the built-in TOTP, I rely on external Authenticaton…
    in OTP for select users Comment by BWC August 2022
  • @Larry where did your Action Bar go to? Is this new? Sometimes I'am struggle myself to find the proper Button, because it's either at the Top or the Bottom or pops up dynamically either directly at the mouse pointer or to the right of a column. --Michael@BWC
    in How to allow Wetransfer? Comment by BWC August 2022
  • @Logon_GmbH this is in unison with the License Page on a TZ270 running 7.0.1-5080, but I cannot provide any real world experience how this will work out. --Michael@BWC
    in how many Global VPN Clients can a TZ270 handle? Comment by BWC August 2022
  • @narayanaswamy do you have a recent Config Backup or using Cloud Backup? Either way, you have to reset the Appliance to factory defaults and import the Backup Configuration, then you can set a new password (which you better store in a safe place). --Michael@BWC
    in I Forgot the Password of the sonicwall TZ270 Can you help me with this one Comment by BWC August 2022
  • LOL - I gave up on this. --Michael@BWC
    in Feature Requests per Category Comment by BWC August 2022
  • Trolling or not paying attention, only one knows :) --Michael@BWC
    in Delete firewall from NSM Comment by BWC August 2022
  • @ArminF there is an implicit Drop All Rule for everything that is not handled and no additional Rule is necessary. This differs from you might know from iptables/netfilter based Firewalls or CheckPoint etc. Like you did, I'am creating a Rule only in times where I need to do some sniffing/logging. --MIchael@BWC
    in View Access Policies in System Log Comment by BWC August 2022
  • @ArminF did you enabled the events in the Log Settings for being shown in the GUI? Device -> Log -> Settings ... check for Category Network -> TCP (and UDP) and probably the Event TCP Packets Dropped have a very high Event Count ... to avoid flooding the log, these Events are not populated to the GUI, you have to enable…
    in View Access Policies in System Log Comment by BWC August 2022
  • @ArminF I would definitly go for excluding the IPS Signature instead of using an AppRule, because the amount of AppRules you can configure is limited, and maybe more performance hungry. Even Bypassing IPS in an AppRule does not hinder the IPS to log, I checked a couple ways on a Gen6 Appliance and it always got logged.…
    in IPS use Match Object to exclude Detection Comment by BWC August 2022
  • @ArminF Match Objects are used for App Rules, there is a Policy Type of "IPS Content" where your Match Object would be selectable. --Michael@BWC
    in IPS use Match Object to exclude Detection Comment by BWC August 2022