Capture Client management site issues
mangonacre
Newbie ✭
Why does SonicWall continually seem to have problems keeping the Capture Client Management site working??
It took several minutes for the Dashboard to load just now, and then nothing but a spinning circle when trying to access Devices. Just clicked back on Dashboard, and it's not loading again either.
I ran into a similar problem during the trial period just a few months ago, and I guess I should have taken it as a sign not to buy this thing. What good is repeatedly getting top marks in the ICSA labs evaluations, if we can't manage it? Access to the site is critical to be able to manage the installations on the computer!
Anyone from SonicWall on this forum care to address this?
Category: Capture Security Center
0
Best Answer
-
CORRECT ANSWERSuroopMC
SonicWall Employee
The issue has been resolved but we will continue to monitor0
Answers
Thanks for your reply, SUROOPMC. Even when the Devices are coming up, it's showing many of them as being unavailable or offline, when I know most of them are currently online. I can't even get a download of the device list with authorization codes right now. I'll give it some more time and check again. But this does seem to be a repetitive issue in my short experience with the platform. How are we expected to manage a threat if we can't get any information or have any control?
Thank you SUROOPMC. I did check it a little while ago and devices list seems like it is up to date again.
To me, the question still remains how often this is going to occur with the management site. As I said, I'm especially concerned that it may happen when we're hit by a threat. If malware hits our file server, and the network gets blocked, we're then dead in the water for potentially hours until the management site allows us to process and remediate the threat. Not a good prospect at all for a busy business.
It appears that for the last few days captureclient.sonicwall.com does not resolve in DNS. Does anyone realize there is an issue?
I connect to captureclient-36.sonicwall.com, and that seems to be working normally. But yeah, no resolution for captureclient.sonicwall.com.
I recommend opening a support ticket, Daveberts.
I opened a ticket and I also discovered the source of the issue. I do not have Capture Client licensed so I can't even open the tab to configure it. The issue comes from two default (not editable and not able to delete) address objects:
----
Found the source; Default Address objects that are NOT editable and can not be deleted.
Capture Client Cloud Service-10 captureclient.sonicwall.com fqdn mixed WAN Default
Capture Client Cloud Service-6 captureclient.sonicwall.com fqdn mixed WAN Default
Please cleanup the defaults in your baseline to stop querying the deprecated DNS records.
I see this on ALL of my gen 7 firewalls: NSA-3700, TZ-670, TZ-370.
----
It looks like the DNS records now are resolving again. Hopefully they will remove the appropriate default address object records before removing the DNS record in the future.
Do with the DNS record restored I will consider this solved at this time.
Thanks!
@Daveberts I had my take on DNS requests on Gen7 too, but noone gave a sh*t.
--Michael@BWC
@Daveberts I had my take on DNS requests on Gen7 too, but noone seems to care.
--Michael@BWC