Comments
-
Actually, the term "firewall" itself is a typically misleading term used in technology, almost as offensive as "zero trust." (There is no such thing as zero trust, regardless of how often the term is abused.) The term "firewall" is lifted from construction, but I'm pretty sure that if you drill even one hole in a real…
-
I had to upload the intermediate certificate on a couple of Sonicwalls to get the CA certificate to be acceptable and usable even though it was marked "Yes" under the Validated column. I found that surprising; I figured that if it was validated, an acceptable intermediate certificate was already installed on the firewall.…
-
I have a bunch of workstations where we gave Capture Client a try and then let it expire because we were moving to a different solution. Fortunately, they are all on Windows 10, so it looks as though the easiest way to rid ourselves of it is to do a fresh install of Windows 11, which we'll need to do anyway.
-
We purchased a TZ80 just to get a look at an eigth-generation Sonicwall. The main difference appears to be the facility for automatic firmware updates. That's not something I find reassuring— constant updating is part of the problem, not part of the solution. Automatic updating makes it easier for the engineers to say,…
-
This is essentially what happened on a number of our Sonicwalls when we went from 7.1.1 to 7.1.2. The hard lesson is that you not only need a settings backup but screen shots of your key objects and rules so that you can piece things back together if your settings get trashed. Restoring a settings backup seemed to work,…
-
For any firewall manufacturer to have a back door into a firewall is plainly unethical and ought to be illegal, regardless of the motivation. You don't leave a key to your home with the fire department or the police department in case of an emergency and Sonicwall has no business updating firewalls on its own— for ANY…
-
I've upgraded about a dozen so far. Two had serious corruption of outbound firewall rules to the point at which users thought Internet was down. Fortunately, after we ruled out everything else, we looked closely at the outbound rules and could see that key elements had changed and were able to make corrections. In other…
-
The other problem that I'm having is that Autodiscover isn't working from behind the SMA. It works fine with a dirrect connection to the Exchange Server. I'll need to get that working before I can use the SMA exclusively. If I go to https://autodiscover.domain.com/autodiscover/autodiscover.xml in a browser, I generally get…
-
That seems to have pointed me in the right direction. I entered all our device ID's and have a separate profile for each user. It looks as though it should fly, but can you suggest a way to test this without actually enforcing it? I'd at least like to see something in a log that shows that the devices are passing the test…
-
Do you have a link to the administrator guide that contains this information? I have not been able to locate it.