SSL VPN destination not allowed by access control

DVAaron

I am currently supporting 20-25 users on both GVC and SSL VPN. I am noticing in the event logs that I am frequently receiving

ID: 1079

Category: SSL VPN

Priority: Inform

Message: "destination for 255.255.255.255 is not allowed by access control"

I am not experiencing any major issues that I am aware of.

I have checked in the Manage-->Connectivity--> SSL VPN --> Client Settings -->Default Device Profile--> Configure --> Client Settings and there are no entries for 255.255.255.255

Where could this be coming from? Is this from an individual client computer requesting 255.255.255.255?

I am on a NSa2600 on SonicOS Enhanced 6.5.4.5-53n

Any info would be greatly appreciated.

shiprasahu93

Hello @DVAaron,

Welcome to SonicWall community.

Usually that destination IP is used for NetBIOS traffic. You can probably set up a packet capture and check if there are drops for TCP/UDP 137 and 138.

https://www.sonicwall.com/support/knowledge-base/how-can-i-setup-and-utilize-the-packet-monitor-feature-for-troubleshooting/170513143911627/

Thanks!

fburton

Hello,

This is netbios traffic. default behavior is to drop this traffic. If it is not causing issues you can do nothing or you can following this kb which shows you how to enabled it.

https://www.sonicwall.com/support/knowledge-base/how-can-i-allow-netbios-traffic-via-sslvpn/170505417512291/