Use access rules to control access if it's going to be asymmetric. It is better if both sides agree on subnets at either end of tunnel because otherwise you get noise in the logs every time the VPN r… (View Post)

Logical probing is better because it covers you for a failure further upstream in your ISP's infrastructure. Having it enabled on your backup WAN is still useful because it will log the state of that… (View Post)

In the reboot menu, it warns that "any unsaved changes will be lost". Does anyone know what changes it is talking about? Because I don't know how it's possible to get to the reboot menu wit… (View Post)

I suggest you monitor the firewall remotely [eg Pingdom, F8lure] and see if it matches up with what the firewall says. I've never known F&LB monitoring to lie - when it says a target is down, it'… (View Post)

If you've got the group synced with LDAP then the quickest way to do this is delete the user from the firewall. The user gets created the first time they log in and bind their TOTP. You would lose an… (View Post)