Comments

• Is there really a need to create or 'bind' VLANs for the mentioned 192.168.10.x subnet? If the device works as it's supposed to but occasionally throws some packets out that are getting ID'd as a spoof is it a big deal?

  in How to allow firewall access to device with fixed IP on different subnet. Comment by TKWITS October 2022
• in How to allow firewall access to device with fixed IP on different subnet. Comment by TKWITS October 2022
• i can try to test a NAT policy over a tunnel interface, but have you considered using the Sonicwall AWS integration to create the VPN?

  in Route Base VPN Comment by TKWITS October 2022
• It doesn't seem likely. Pertinent sections (page 16-18) of the admin guide makes no mention of the ability to change the management VLAN.

  in SWS14-24FPOE Switch--Can you change the default mgmt vlan to something other than 1?? Comment by TKWITS October 2022
• Older versions did not support route-based VPNs to 3rd party devices but that text has since been removed from modern KB articles. It is safe to assume it is supported. You are correct, it does not say it is not supported. It simple states 'when advanced routing is not needed'. Which in my opinion means it's not…

  in Route Base VPN Comment by TKWITS October 2022
• It's either on or off, you cannot force login uniqueness for specific groups or users.

  in To allow some specific groups or users to access connection more than one device Comment by TKWITS October 2022
• You still havent shown us the problem NAT policy...

  in VOIP SETUP (Ring Central) on TZ500 Comment by TKWITS October 2022
• So your saying you lose Access Rules allowing firewall management upon reboot? But these rules are specific to a Site to Site VPN tunnel with NAT. Provide more description on which side is performing the NAT, sanitized screenshots, etc. If it were me I'd just re-subnet one of the subnets and get rid of the overlap.

  in IPSEC + NAT + X0 Management = No Go Comment by TKWITS October 2022
• You haven't shown us anything or provided enough information for us to help.

  in VOIP SETUP (Ring Central) on TZ500 Comment by TKWITS October 2022
• What do you mean you "enter passive ftp"? Are you hosting the FTP service behind the firewall or just trying to access one? You haven't given much info. Have you read any KB articles? or

  in Dynamic Port Assignment with an NSA2650 Comment by TKWITS October 2022
• Open a support ticket as you may have discovered a bug.

  in TZ 370 - UDP Inactivity Timeout reverts to 30 seconds Comment by TKWITS October 2022
• You can change the global timeouts in the Flood Protection settings.

  in TZ 370 - UDP Inactivity Timeout reverts to 30 seconds Comment by TKWITS October 2022
• If I am reading correctly you want to NAT over a tunnel interface. Im not sure thats supported. Also according to the below article, using Advanced Routing over a tunnel interface is not supported. You might want to consider utilizing a different method for tunneling to AWS.

  in Route Base VPN Comment by TKWITS October 2022
• Are you passing the AD domain DNS server to the netextender connection and using the FQDNs of the servers? If not have fun.

  in Domain joined laptops using Netextender connect but mapped drives are not connected Comment by TKWITS October 2022
• There's a reason it's either Tunnel All or Split, not a mix of both. However yourself and others have managed to get some functionality working would be unsupported by Sonicwall... You need to Split and add the needed routes.

  in Configure SSL using both Split Tunnelling and Tunnel All Comment by TKWITS October 2022
More Comments