TKWITS Community Legend ✭✭✭✭✭
Reactions
Comments
-
Post anywhere. Those are just guidelines.
-
Why bother exposing an internal DNS server? Doesn't this company have a web presence (public website, public registrar, etc.)?
-
From a sanity standpoint: you can say no to peoples requests.
-
You don't need two SSLVPN profiles, you just need proper DNS records to handle internal and external requests for the same FQDN.
-
For clarity sake is below the ideal traffic flow? Client SSLVPN -> Sonicwall DMZ interface -> Sonicwall WAN X2 -> ISP 2 -> INTERNET -> ISP 1 -> Sonicwall WAN X1 -> SSLVPN Internal LAN Access The less details you give the less likely you'll receive help. But this complete flow is unlikely because of the internal routing…
-
@Ena @Community Manager @TIJU
-
It's either on or off. Yes, you can adjust thresholds but you cannot specify exceptions like 'ignore host 1.1.1.1' or 'ignore between 8pm and 10pm'. Whether or not the thresholds correlate to the 'possible flood' log entry im unsure of, since 'possible flood' is a vague statement.
-
If you feel your highest risk is around wireless than by all means add services to your access rule. But you can be doing other things to reduce your wireless risk (separate networks, 802.1x, zero-trust networking). The mention of a 'guest network' was less about providing Wifi to 'guests' and more towards introducing the…
-
If you know the signature you can disable it in Policy \ Security Services \ Gateway AV \ Signatures, or add it to the Cloud AV exceptions via Policy \ Security Services \ Gateway AV \ Status/Settings \ Cloud Anti-Virus \ Cloud AV DB Exceptions. Otherwise, not sure what you mean by 'disable this'...
-
Ask Fortigates community.
-
You havent provided us any information and this isn't causing you an issue so...
-
It seems you are missing some underlying concepts. Have you considered creating a 'guest' SSID for 'untrusted' devices?
-
When you say you get this 'alert', how are you receiving it? Email? You can disable email alerting on specific log entries.
-
Open a support ticket.
-
This is called 802.1X and is not a feature available on Sonicwall firewalls. It is available on Sonicwall switches.