Cannot create an Access Rule policy with a Address Group

PeterM

Hello,

I've got a new TZ570 and I'm trying to create an Access Rule policy with the following parameters:

SOURCE:

Zone/Interface: WAN

Address: TrunkGroup --> This is a group of Address objects. All of them are IPv4 addresses

Port/Services: Any

DESTINATION:

Zone/Interface: LAN

Address: D01 Public --> This is also an IPv4 address

Port/Services: SIP

When I do this, I get the following error:

"Source address and destination address cannot be of different IP versions"

If I add one of the addresses in the group, it works fine.

Please help to resolve this issue.

preston

@PeterM , I've had this before on gen6 appliances, add the rule with one address in the group,
then go to objects/address object groups edit the address object group under and add the rest of the IPs in, just check if the rule is still there after a reboot as when I had this issue I had to get a hot fix from support

Saravanan

Hi @PETERM,

Thank you for visiting SonicWall Community.

We are already aware of this issue and the same is fixed on the Gen 7 firmware version 7.0.0-R464 and above. Please upgrade your firewall to this firmware version.

Hope this helps.