Comments
-
Sorry for the delay, I forgot to post back. I found the issue, it was my anti-virus. As soon as I started pushing traffic over the tunnel, the ESET service cause immense latency but the CPU usage was not affected, only the VPN traffic. Not sure what caused it but it was something in the system updates. I wish ESET would…
-
The recent change has not fixed the issue, I still get traffic from blocked countries. Here's two examples: 35.240.121.17 & 35.187.98.121 Geo-IP have them as being in Belgium which I have blocked. My server's software based IDS blocks traffic from it but it should have been blocked at the gateway by Geo-IP. Mostly traffic…
-
Hello, The host was on a separate zone. I enabled Gateway AV, Anti-Malware and IDS/IPS for the zone thinking maybe the security services have to be enabled on the zone for Geo-IP to work. I'll post back in a day or two to report, hopefully that change helps.
-
Hello again Mustafa, TZ-270, latest firmware SonicOS 7.0.1-5145. I have Geo-IP blocking set, block all connections radio button, no custom list enabled and block all unknown countries set. Yet traffic from some blocked countries reaching some NAT'ted hosts because the software based IDS/IPS on those hosts shows IP blocking…
-
Hello Mustafa, I don't have a support case and all my devices are running current versions. Since I posted a while back, I can't remember the specifics. I will see when it happens again and record the exact model, firmware version and more details.
-
Thanks Simon, I you hear back from them about what it could be please post back. -Miguel
-
Ok, if anybody's interested I found the answer out by creating a user with 'system administrators' privileges and logging in as that user. The Log Settings menu is not visible and I was able to disconnect stuck VPN sessions as well as create new VPN users .
-
There has to be some way to fine-tune permissions. It seems like the rights of a limited administrator are not very useful. I need to be able to have staff manage common tasks such as closing stuck VPN sessions, adding VPN users, etc. without allowing them into the auditing sections of the device There are groups called…
-
I had the same issue, here's the fix... https://www.falconitservices.com/sonicwall-update-failed-firmware-is-not-compatible/
-
Thanks Larry.
-
Hello shiprasahu93. Please elaborate. Where do you see this?
-
Hello, How is this done in Gen7? I only see an option to export locally, not to a file. I need to export log settings from one firewall and import to another. Also note that the configuration for log settings are a bit cumbersome. Each configuration change closes the window and brings you to the main configuration menu…