Comments
-
Hiya @BWC, We'll run up and advise. Best, S.
-
Hey @SonicAdmin80 We turned off DPI-SSL Content Filtering tick box to workaround the DPI-SSL issues with 6.5.4.5 as I recall. 6.5.4.6 seems better (we have it on all our Gen6 TZ's) but 2/3 NSa's failed and had to be rolled back. Hotfix now available (untested by us). Let me know if you want the details. Kindly, Steph.
-
Sadly there is no effective means to simply send False Positives / False Negatives for review. This really needs to be fixed as the current routine is ridiculously time consuming and inefficient for all involved. Having to disable the AV doesn't sound like a great option too me. Can we ever expect to see a better result…
-
Custom certificates are just an ongoing problem that they never fix. You will need to get support to fix it manually. If you can get anyone that knows what they are doing. Good Luck.,
-
Thanks @SonicAdmin80 , Your post is clearly and absolutely correct and is in line with what @BWC and I have also seen. I think this will help to "put to bed" the "your DNS may be broken" line of questioning. I completely agree:- ES is incapable of handling an extended response. So the response appears to be VOID. This is…
-
Hi @RuheeSafiya , I'm with @BWC , I just spent two full days for which I was not paid by anyone to explain that ES cant even manage SPF properly and all I got was an RFE which almost certainly won't get actioned. @BWC , also put in a major effort to confirm, what I was seeing. I reported the same problem three years ago…
-
Hey @sonic_dave2469 , I can only agree with @BWC , The Message Log is so important to us and accurate and verbose information in there that we can sort and filter is imperative to our MSP operations. It's the single best feature of ES and should continue to be embellished. ..One of the things we tell our customers is that…
-
Well we have already seen that this is happening elsewhere through the post from @BWC . That is the value that this forum provides.
-
Hi @Nevyaditha , Spent the afternoon on this with Gailand in (he is always awesome). Lots of traces and Wireshark diags. We both ran out of juice but we can clearly see from Wireshark that for certain DNS requests nothing is received (empty). Convinced that it was an ISP(DNS) issue the DNS server was moved to Google..…
-
And the use cases were?
-
@Larry , Man I hear you on this stuff. There is no easy way to create a "whitelist templates" for sites and apps across everyone. (although I think that may change some). I really think there needs to be a community sharing place for this. I just took a look at the costs of the switches. They are laughable.. take a look at…
-
Hey Larry, We make extensive use of the exclusions address group(s), and tick lots of boxes for CFS exclusions of DPI-SSL. Saves for a lot of grief and after all we are only looking for "unusual transmissions". (although that can increase some risk from the "good guys". ---Steph.
-
Hey @Larry , We make extensive use of the exclusions address group(s), and tick lots of boxes for CFS exclusions of DPI-SSL. Saves for a lot of grief and after all we are only looking for "unusual transmissions". (although that can increases some risk from the "good guys".
-
Hi @shiprasahu93 , My problem with a hardware appliance is a commercial one. How will I justify that with all the small customers I have? Please don't ask me to "contact sales". They are practically unresponsive in my region. Actually, we need "sales" people in here with you SWL techs ;) . Then we can promote reasonable…
-
We suffer the same frustrations. There also needs to be some metrics reported on this. How many people we pissed off and for how long and how many times. Hopefully SWL will allow us to run our own Local Capture VM so we can at least service our own customer(s) with a solution that will perform. From the look of the new…