Comments

• 10.10.10.33 is an RFC 1918 address and no one will route to it. Im assuming you are just masking the real one. AFAIK BGP configuration is only possible on the CLI, so you might have to try configuring your tunnel there.

  in Setup IPSec tunnel/site2site on BGP assigned public IP address Comment by TKWITS February 2023
• To throw my two cents in: Rely on straight DPI-SSL exclusions, not on the Common Name exclusions. Don't forget about CDNs. Read up on SSL Pinning. @BWC DPISSL on the downfall? Do tell!

  in DPI-SSL - Webpages don't finish loading Comment by TKWITS February 2023
• https://www.sonicwall.com/techdocs/pdf/sonicosx-7-command-line-interface-reference-guide.pdf I dont believe there is one but dont quote me on it.

  in how to identify network traffic on tz270 firewall using show command Comment by TKWITS February 2023
• While I appreciate Larrys reply (he's not wrong). I'll try to address some directly. Export the config, and / or enable automatic backup to MySonicwall. Either the Management port, or the serial port. See Larrys reply Unsure of what you are asking. If you need to define specific IP ports you have to use a Service Object.…

  in SonicWALL NSA 2600 Questions Comment by TKWITS February 2023
• :)

  in how to set up ip phones on a tz270w Comment by TKWITS February 2023
• Browse to Network / System / DHCP Server / Current DHCP Leases Unfortunately you have do a rough count.

  in Seeing how many IP's are left in a DHCP scope Comment by TKWITS February 2023
• Da**it Larry, my brain is not good today. Second minor thing I've overlooked. I was getting redirected to www.sonicwall.com where they had a banner saying maintenance was occurring.

  in community.sonicwall.com is still redirecting to www.sonicwall.com Comment by TKWITS February 2023
• Time to get logs from the console port.

  in TZ670 Random Reboot on 5095 Comment by TKWITS February 2023
• Did you follow the recommendations provided to you by Webex? Generally you do NOT want to use SIP Transformations unless specified by the provider, so disable that. Enable Consistent NAT on the same page if you haven't. You should also check with your ISP if they have SIP ALG enabled on your CPE. Many cable providers have…

  in Webex phone service and NSA 5600 Comment by TKWITS January 2023
• As stated earlier, SSLVPN is the way to go with Sonicwalls if you want to use TOTP.

  in Does Sonicwall firewall GVC client integrated with Microsoft MFA? Comment by TKWITS January 2023
• Quick search shows you might have a corrupted cert store in FF.

  in Suddenly cannot access Gen 7 UI from Firefox Comment by TKWITS January 2023
• "The Sonicwall Netextender I see has static routes for destination IP4Network with the same subnet as the end user." So remove the route if it is not needed. It's under SSLVPN Client Profile \ Routes I believe.

  in print locally while connected to netextender Comment by TKWITS January 2023
• What service(s) are you trying to do this for? SSLVPN?

  in User Authentication based on FQDN Comment by TKWITS January 2023
• I'm not sure NMS will allow you to do that, but you can try being as specific as possible in the your rule creation. From your screenshot you are not being very specific. The problem here is that management rules can only be manipulated so much. Either they are enabled on the interface page or not, and from there you can…

  in Block Access from specific Public IP Comment by TKWITS January 2023
• So have you created a support ticket or request for enhancement with Sonicwall?...

  in Data Leak Comment by TKWITS January 2023
More Comments