Comments
-
Hello @Rob_R, It depends on which device is in active state. Any changes made on the standby unit will not take effect. So, if they are still in HA, you can hit synchronize settings on the active unit and that will send all settings to the standby unit irrespective of whether it is primary or secondary. If the HA is…
-
@smallonee, In that case, I think one of things that could be missing is the static route that explains how to reach the 10.10.10.x network from the firewall. Once that is present 10.10.10.x network and 192.168.168.50 should be able to communicate. I also feel that the zones should be specified correctly in the access…
-
@Asi, These packets have 'RST' flag set which means they are used to Reset the TCP connection, so the firewall will certainly drop them if the TCP connection is already closed and we then receive these packets. That explains the 'Drop Code: 23(Invalid TCP Flag)' on these packets. On what zone are these APs connected to? Is…
-
@smallonee, So, how are you testing this? Is the private network directly connected to the SonicWall? When you are trying to access the server with IP: 192.168.168.50, what IP address do you use and what is the source from where this test is made? Is it on WAN? The reason for me to ask is that, if the client that you are…
-
@Asi, The packet drop reason is 'Invalid TCP Flag'. Since, SonicWall is a stateful firewall, it keeps a TCP state table and if it violated the packets are dropped. So, I think it is a legitimate drop. If you have issues pinging the AP and the firewall IP itself, the issues is certainly internal. What device is…
-
@smallonee, Welcome to SonicWall Community. How exactly are the internal and external resources mapped? Is the external resource on zone WAN or public zone? Also, how exactly are you testing and doing the packet captures? If you do not want to put the actual IPs in the post, could you please give a dummy example so that we…
-
So, have you connected a SonicPoint/SonicWAVE to the TZ 205 or is it some other access point? If it is a SonicPoint/SonicWAVE, could you try pinging the WLAN interface and see if you are getting similar drops? It would be best to do a packet capture on the firewall, to see what is the status of those ping packets that are…
-
Hello @Asi Welcome to SonicWall community. When you test it directly with Comcast, do you test with a single computer or with the entire LAN? Do you see any drops for the firewall internal IP as well if you run continuous pings? Is the WAN interface set to static, DHCP or PPPoE on the firewall? Have you done any packet…
-
@VickyBoy, No problem, I am here to help! Usually when you would like to assign the static IP on the SonicWall's X1 interface directly, we put the modem on something called as pass through mode. So, please consult with your ISP as it is clearly set on NAT mode at the moment. Every ISP has it's own naming scheme so I am not…
-
@VickyBoy, If you ISP allows that, yes you can assign the public IP directly on the SonicWall's X1 interface. If not, just leave the port forwarding on your upstream router from 217.x.x.x to 192.168.100.3 and use the 217.x.x.x IP on the client side to connect using VPN. The upstream modem should forward that connection to…
-
@Halon5, 😁 I would be glad, to be there helping you with this entire process. All I can say for now is, this is just a starting point for Capture ATP. We have honestly come a long way from Cloud based sandboxing till here, and will slowly get there too. I always appreciate valuable feedback that helps come up with these…
-
@djhurt1, That sounds right. The primary and secondary WAN interfaces should end up in separate VLANs on the upstream or WAN switch. Both device's X1 interfaces and the X1 gateway should be in one group and both device's X2 interfaces and the X2 gateway should be in another group. Basically it should be logically divided…
-
@Halon5, That is coming pretty soon. Although not a VM, but a hardware to perform Capture ATP at customer's site. I will keep you posted! Thanks!
-
Hello @Larry, I completely understand the feeling with BUV. First of all, is this taking place for multiple PDF files or just some specific ones? I would suggest to get in touch with SonicWall support so that they can verify if there are delays w.r.t. getting verdicts due to re-transmission errors etc and will help you fix…
-
Sure, keep us posted!