Comments

• Found the IPS exclude. Trying it.

  in Network monitor through VPN causing high log entries. Comment by ASIRWA February 27
• The 608 ID is an ALERT level event. Which is generally appropriate for Intrusion Protection System. Can you point me to the documentation on how to "exclude the ip of your network monitor for the signatures ICMP PING and ICMP Echo Reply"? That sounds much more like what I want to do. Just exclude the known legitimate…

  in Network monitor through VPN causing high log entries. Comment by ASIRWA February 27
• X1 and X2 are WAN Zone X0 is LAN Zone (per default Sonicwall) as you caught. FW1 can connect using its X1 to FW2 @ 10.1.#.# and @ 201.1.#.# but not @ 200.1.#.# FW1 can connect using its X2 to FW2 @ 200.1.#.# and @ 201.1.#.# but not @ 10.1.#.#

  in Site to Site VPN with more than 2 internet connections. Comment by ASIRWA January 7