Comments
-
Hello @dojjan , You're right, this is a stateful firewall and hence the reply should be also allowed. If you don't mind, could you please share a screenshot of the packet capture that you've taken for this? Thanks!
-
Hello All, The IPS team has verified that this issue should be taken care of now. Please make sure that the signature database is up to date and kindly check the logs again. Thanks!
-
Hello @Roz, You can download the TSR from the SonicWall firewall and that would show all switch configurations done. Otherwise, you can directly SSH to the switch and use the show commands. Thanks!
-
Hello @SamOkie, You can upgrade to 6.2.7.1 and then to the latest general release 6.5.4.7-83n. Thanks!
-
@samaj, Yes, ping is considered as a low priority attack. Kindly have it set to only detect and not prevent under IPS. Thanks!
-
Hello @samaj, Please check the following 1) Access rule from LAN to WAN blocking Ping service 2) If low priority attacks is enabled for prevention under MANAGE | Security Services | IPS Also, are you unable to ping both 8.8.8.8 as well as google.com or just google.com. This will tell us if the issue is with DNS. Thanks!
-
Hello @Trevor, @B3rt and @BrianN, Yes, I do see a few support cases reporting a similar behavior. We have informed our App control Signatures Team regarding the same and they are actively investigating this issue. I will update this thread once I hear back from them. Thank you all for bringing it up here! Have a good one!
-
@Warren_Mc, It looks like the internet connection is completely lost. Without having some real-time troubleshooting done on this, it is difficult to say what could be the problem. Under configuration, 1) Make sure that it is set to split tunnel 2) You haven't mentioned any default gateway on the same tab 3) The VPN access…
-
Hello @Enzino78, I think the latest additions for Gen 7 appliances is also done to the highlighted KB. The top section includes the compatible modules for Gen 7 devices. Thanks!
-
Hello @rjemmett, I would suggest checking if the issue is with no internet access at all or throughput terribly low making it look as if the internet access is lost. You can test by pinging 8.8.8.8 while connected to the VPN. We definitely need some real-time troubleshooting in this case while we have access to the…
-
Hello @ArturusDent, Welcome to SonicWall community. I would suggest performing a packet capture to understand how the packets are being processed on the firewall and if any configuration changes are required. Since, AWS usually asks for two simultaneous VPN connections, please check if the traffic is going through one and…
-
@SEBASTIAN, I do agree with that. Right now, it can only be achieved by specifically performing this on access rules.
-
Hello @SEBASTIAN, Yes, in global mode all connections to and from that country is blocked. So, if someone from LAN is trying to download from a server hosted in Russia, that would also be blocked. Thanks!
-
Unfortunately, on the Gen 6.5 hardware itself, we cannot run SonicOS 7. So, the answer is yes. But, the NSa 2650 is a Gen 6.5 device and the firmwares and updates are going to continue to be rolled out for this model as well. Thanks!
-
Hello @RagabMabrouk, NSa 2650 is a Gen 6.5 device and cannot be upgraded to Sonic OS7. We have released new hardwares like TZ 570, 670 etc and Virtual firewalls like NSv 470, 870 etc that will support SonicOS 7.0 and SonicOSX respectively. So, the Gen 6.5 firewall will run on 6.5.X firmware. Thanks!