Connectwise Control Client cannot connect out to Connectwise Control server ?
Denning
Newbie ✭
We send laptops to banks to perform security assessment and audits. The have Connectwise Control running on the laptops that automatically connect to our Connectwise server. it has worked hundreds of times consistently.
Two client facilities with Sonicwall firewalls setup by the same contractor (now gone) prevent the heartbeat from Connectwise Control client from connecting out on tcp port 443. The new contractor (experience mostly Cisco firewalls) cannot figure out the problem. 443 is a custom port for Screen Connect we selected because all bank firewalls allow, or proxy for outbound traffic on port 443.
The capture on the Sonic firewall shows communication to and from the Connectwise server,. Do you seen any issues with this capture, which I don't know how to read ?
The current contractor has set up a rule to permit port 443 from our laptop 10.54.7.54 outbound to ANY public IP.
Answers
One suggestion to try.
Create an Address Object for your CW Control server. Then create a new Address Group, call it "GAV Exclusions Group" and add the new CW Address Object.
Go to Security Services and select Gateway Anti-Virus, click Configure Gateway AV Settings. Under the Gateway AV Exclusion List label, clic Enable Gateway AV Exclusion List, and in the Use Address Object, select the GAV Exclusion Group. Click OK, then Accept.
That should let the traffic through.
I contacted the client. Does your setup recommendation apply to a TZ400W ?
Thank You
@Denning it should apply to any device that's using a CGSS or AGSS subscription.
Please keep us posted as to the result.