Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".

How do I re-connect to our Virtual office/Portal Settings when new IP addresses have changed?

We have a TZ570 firewall in place. We were issues new public IP address last week. Since then we are no longer able to connect the Sonic Wall Virtual Office. The error generated is "Connection has timed out". I went though the "SSL VPN" menus starting with Status, Server settings, Client Settings, Portal settings, and Virtual Office. I didn't see anything indicating what I should do when your public IP addresses have changed. Is there a DNS entry, I have changed? Do I have to change any entries in any of the following: Object or Policy?

Category: Mid Range Firewalls


  • MustafaAMustafaA SonicWall Employee
    edited September 14

    First and foremost, please ensure that your SSLVPN traffic coming from the public source (initiator) is reaching the firewall. You can utilize Packet Monitor for this purpose and filter traffic based on the configured SSLVPN port.

    edited September 14

    You will want to confirm the WAN IP address. (default X1) Or

    The interface should have SSL users check box checked. Interfaces > X1

    check that SSLVPN is enabled on WAN

    Network > SSLVPN > Server Settings > make sure WAN is enabled. 

    If you have a proper cert in place, you will be able to select it on this page. 

    Network > SSLVPN > Server Settings > Certificate Selection. 

    I assume you have already checked these pages. So, the other question I have to ask is how are you establishing your connection on the client? Can you see the Virtual Office when you go to the IP address directly? (

    Also, are you Outside of the network? the client won't work if you are behind the firewall.

    are you using an IP address? - if yes, then you should use the WAN IP. 

    are you using a FQDN/NAME? ( - If yes, then you may want to check with your domain name provider and update your "A Record." 

    Sometimes the ISP can provide you a static IP address to use, but still allow you to use DHCP until you make that change. In this case you may need to modify the interface to assign the static IP address to your WAN interface. Checking the current WAN IP should help Identify if this is the issue.

    - I hope this is helpful

  • Thanks, I will double check everything you mention.

  • This is for Mustaffa,

    Checking if the SSLVPN traffic coming from the public source is reaching the firewall, is then on the client side on the firewall?

  • MustafaAMustafaA SonicWall Employee

    Hi @BOSullivan

    You can use Packet Monitor tool which can capture packets coming in (ingress) and going out (egress) of the firewall. Let's assume the SSLVPN Server port on the firewall is configured as 4433 and you can set the Destination Port and observe if there is any ingress traffic coming to the firewall.

    How can I setup and utilize the Packet Monitor feature for troubleshooting?

Sign In or Register to comment.