TKWITS Community Legend ✭✭✭✭✭
Reactions
Comments
-
What is providing MFA the Sonicwall? What firmware version are you running? I havent seen this with MFA provided by Sonicwall specifically, but ran into an issue where an old password change policy was set when users were first imported, then the password policy was disabled, but would still be enforced on users that were…
-
Maybe you can shed more light on how broken it is to cause a HUGE security hole...
-
Disabling MFA for any administrative accounts anywhere is not recommended. Occasionally I will have problems with it but IMO it's poor web programming rather than the implementation of MFA. Failed logins will redirect you to a login page, then a successful login on said page doesn't have a correct redirection, so the login…
-
The address object for the syslog server on the branch firewall is in what zone? Have you run a packet capture while NOT excluding syslog traffic?
-
Buen dia, Póngase en contacto con su representante regional de Sonicwall. Utilice el menú desplegable para seleccionar su país.
-
I will also point out that DSCP tagging gets lost when encapsulated by a VPN tunnel until it is de-encapsulated on the other side. The VPN traffic traverses the internet with no prioritization over other protocols. Now whether or not your ISP adheres to customer DSCP tagging is another thing. Like @BWC said, there is no…
-
"what is the relationship between the To/From Zones and the Source/Destination addresses in the Access Rules, and why do the zones not always match the destination addresses?" Your thoughts are mostly accurate. Generally they match, but when a translation is applied (NAT), like you said, you must use the zone the…
-
Can you provide a more thorough description or a diagram?
-
The short version: VoIP is sensitive to loss, bandwidth, packet fragmentation, and packet re-ordering since it is based around UDP. UDP just sends packets without handshake or confirmation. The biggest culprit of packet manipulation are VPN tunnels. VPN tunnels are great for connection-based protocols (TCP) as they are…
-
Have you searched?
-
You have failed to mention anything about the Sonicwall device used, firmware, or software version of your SSLVPN client. Searching the forum might help: Your testing methodology is less than ideal. Do you know what protocol(s) 'BeyondCompare' uses? Is the underlying protocol the most efficient one? Windows (is that what…
-
As long as the Allworx is performing routing I would agree. How can we be sure? A packet capture never lies. Could the static routes set on the Allworx also provide us clues?
-
I'll throw my hat in the ring and say make sure you're running a recent firmware! Gen 7's early code was terrible! If you have extra resources on a VM host, run a Debian syslog server and dump your firewall logs to that. The 'Treacherous Three' strike again!
-
Don't you love it! Thanks for following up with the hotfix info.
-
Have you searched?