Comments

• So I think the question still stands - if a malicious site has a legit CA and is doing SSL pinning, can these sophisticated firewalls do anything to prevent 'bad things' from happening?

  in Risks associated with DPI-SSL exlusion list Comment by krs May 2022
• Thanks for the input. Yes, something is better than nothing. Just weighing the administrative overhead of remaining vigilant.

  in Risks associated with DPI-SSL exlusion list Comment by krs April 2022
• Thanks for the clarification!

  in domain (common) name format for TLD exlusion in DPI-SSL exlusion list Comment by krs April 2022
• I just finished setting up two 224w devices on my TZ400. Agree that the documentation isn't clear. The only port available for connection to the TZXXX on the 224w is the 'X1' port which are the backside punch-down terminals. the RJ-45 port would only work if you were mounting on a junction box, otherwise RJ-45 connection…

  in Sonicwave 224w LAN and pass through ports Comment by krs January 2022
• I'm not a networking expert, but here is what I came up with for two 224Ws connected to my TZ400: Portshielding together the following LAN interfaces (X0, X2, X3,X4) for wired devices, and Portshielding together the X5/X6 interfaces for wireless devices. Then bridging LAN and WLAN together to have a single subnet (note…

  in Sonicwave Newbie Question - SW 224w and TZ350W Comment by krs December 2021
• I assume this problem has been solved, but for posting for posterity: Don't know if this has been clearly stated here, but your sonicwave connection to the TZ has to be from 'X1' on the sonicwave. I just went through this with a couple of 224W sonicwaves trying to connect to my TZ400. I assume my experience applies to your…

  in SonicWave on TZ350 Comment by krs December 2021