TKWITS Community Legend ✭✭✭✭✭
Reactions
Comments
-
Define 'secure' in the context of the new question... otherwise you're asking the same question.
-
Let me search for you.
-
Are you sure the idle timeout is the cause of the disconnection?
-
Did you follow the GSG? You have to interpret what the articles are saying and apply them to your specific instance...
-
Have you read this? The NxConnect.bat file is located in each users AppData\Local\SonicWall\NetExtender, not in the client installation folder.
-
Have you read either of these?
-
Did you read these articles? https://www.sonicwall.com/support/knowledge-base/how-to-create-gen-7-settings-file-by-using-the-online-migration-tool/210115150800277/ https://www.sonicwall.com/support/knowledge-base/how-to-understand-and-resolve-settings-corruption/170505412006104/
-
See the article but apply the logic to the appropriate interface.
-
@BWC I think you forgot a link. But just because a cert is self-signed doesn't mean the traffic the traffic isn't encrypted, because it is. Read up: https://en.wikipedia.org/wiki/HTTPS https://www.digicert.com/what-is-an-ssl-certificate
-
From: https://www.sonicwall.com/support/knowledge-base/configuring-one-time-passwords/170505594681886/ CAUTION: OTP cannot be configured for Global VPN Client (GVC) users. Instead, GVC users can use RSA token for two-factor authentication. Please refer to Two Factor Authentication Using RSA Radius And SecurID For SonicWall…
-
Other than some old, vague documentation, not that I am aware of. But most compliance requirements are explicitly written to be vague... As mentioned prior: restrict access to HTTP/S WAN management to only known good IPs; update your firmware; if you are using SSLVPN / GVPN get a cert from a public CA. Specific failures…
-
So you're not using DPI-SSL for clients. No need to add or enable it, it was so us folks trying to help have a complete picture. What firmware version are you running? Have you read: https://www.sonicwall.com/support/knowledge-base/how-can-i-setup-and-utilize-the-packet-monitor-feature-for-troubleshooting/170513143911627/…
-
Yes. Just because it is licensed does not mean it is enabled.
-
I will re-state 'this is basic networking and routing.' Is there a reason you wouldn't just make the Colo and Main site on the same network using only the one Sonicwall at the colo for everthing?
-
Do you have DPI-SSL enabled?