TKWITS Community Legend ✭✭✭✭✭
Reactions
Comments
-
As Larry pointed out in the other thread there isn't actually much difference between the resolved fixes between 5051 and 5052...
-
Let me search for you: https://www.sonicwall.com/support/knowledge-base/configuring-one-time-passwords/170505594681886/
-
You are approaching GRC concepts which are generally outside the topic of conversation here. Risk factors are determined by the organization, not by a standards body or government group (not even NIST CSF). So answers to these questions are up to the Security / Compliance officer of the company. Business agreements should…
-
@nandrew Are you going to have any server equipment at the colo? Whats the end goal with this setup?
-
@jasni26 Open a ticket with support. It's gonna be painful but they may have a hotfix.
-
To answer the only question I can see, you do not NEED to use L2 bridge mode. Though it all depends on what you want to accomplish. It sounds like you want to use the EPL to extend the DIA to your 'main' office firewall?
-
Is there a reason you are using both Sonicwalls? Why complicate things when you can just have your main office patched into the switch on the EPL? Really, this is basic networking and routing.
-
Do you have Capture ATP enabled and set to wait for result before allowing download?
-
Does the server pass SSL certificate checks? e.g. https://www.digicert.com/tools/
-
Whatever use-case you are in, my suggestion would be to VLAN out your IoT devices and exclude the VLAN from DPI-SSL.
-
To expand Ajishlal's input, keep your SSLVPN Client Settings \ Client Routes the same (include LAN subnet address object), but adjust the VPN Access settings per-user.
-
If you enabled SSL Control look there... Or read the logs.
-
Two weeks on a production TZ570 with no issues. Roll outs to other models this week.
-
As you said, there is no include / exclude overlap logic. All that can be said is be very specific with your groups. I must question why you'd want to exclude 'LAN Subnets'...
-
Have you considered adding an exception to IPS for the NSA2700's WAN IP address?