Comments
-
Just FYI, I did a factory reset (restore factory config) on this 3700 to test whether in default state the firewall can route LAN traffic to WAN correctly; it can't (contrary to everything I've read from Sonicwall docs and KBs). Default route correct, default NATs and policies and routes in place; no success. If I build a…
-
@MarkD, yes I restored it back to factory and setup the interfaces for LAN/WAN per our needs. Moved our WAN trunks (X1, X2), enabled F&LB, and tested. Still no traffic getting off LAN to WAN. Added numerous testing NATs, rules and policies, no go. Default config had zero connectivity between devices on LAN and WAN.…
-
Just FYI: I restored a CONVERTED 2650 configuration to this (second) 3700 and it broke the LOGS | AUTOMATION feature, just like the first conversion done on a different 2650→3700. Same error, same place, same feature. But that's not what this ticket is about; just saying I've gone the conversion route despite it having…
-
Arkwright, I would have done the conversion route first if it worked. I did the conversion on a different pair of 2650/3700 units and there was a conversion issue that broke the LOG | AUTOMATION pages; it's now completely unusable on the first 3700 converted and Sonicwall tech support has stopped communicating on the issue…
-
Did some more tinkering this morning… X1 out still isn't working, but X2 (if I unplug X1) gets all traffic to WAN perfectly. Load balancing on or off, traffic pushed to X2 works perfectly fine. Can anyone suggest any tools to help me t/s this? Eyeballing routes, NATs and access rules is showing me nothing. Confirming that…
-
Thanks for the response. I don't have any probes running on any interfaces, and the usage thingy often shows a LOT of "traffic" but no hits. I don't know, the new interface with the ingress/egress bubble things don't make any sense to me with the values they're showing. Like I said, the logical access rules and routing are…
-
Additional: with the above question, is it better to have BWM enabled with limits set, or disabled on burstable circuits? Thanks!
-
Michael, thanks for responding! First, the current "SSLVPN Services" group contains the user group "All LDAP Users" already, and can't be removed, so I assume you're suggesting creating a NEW group into which the imported AD users group should be added to, and they assign that new group to the Users | Settings |…