Comments

• Unfortunately the contents of the DROPPED line are not especially useful. It definitely does not tell you what policy it is that causes the traffic to be dropped, despite it being obvious to pretty much anybody that that's exactly the kind of information one would hope to see there. Also, "Policy" could be any of route…

  in How do I use output of packet monitor capture to identify which rule or policy blocking the PING Comment by Arkwright 8:45AM
• Try http:// instead, see if you get a Sonicwall block page.

  in Website being blocked by TZ470 Comment by Arkwright 8:40AM
• If the issue is what I think it is then unfortunately it will not be fixed on 2600: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015

  in PB with NSA2600 Comment by Arkwright October 7
• It's random though, script kiddies doing bulk login attempts. Just because it doesn't crash immediately does not mean your device is not vulnerable. Disabling SSLVPN service on WAN and leaving it for some time is probably best way to be sure. Issue was resolved in 6.5.4.15:…

  in Immediately after running a battery of "Crypto" tests our Nsa 4650 fails Comment by Arkwright October 7
• Try disabling SSLVPN service, does the problem go away?

  in PB with NSA2600 Comment by Arkwright October 7
• Funnily enough, yours could be the fourth thread with posts in this month from different gen6 users with rebooting firewalls: My guess is this SSLVPN vuln that was patched recently.

  in Immediately after running a battery of "Crypto" tests our Nsa 4650 fails Comment by Arkwright October 7
• What is uptime on here? These log messages look like your firewall is rebooting.

  in Immediately after running a battery of "Crypto" tests our Nsa 4650 fails Comment by Arkwright October 7
• This is a total aberration from SonicWall, their customers have to pay to get the solution to a problem they created themselves.... Did you upgrade to 6.5.4.15 without support in place? In that case, your users only have you to blame for ending up in this position.

  in Get Firmware Hotfix without a Support Contract? Comment by Arkwright October 7
• If you want the traffic to be encrypted, add it to the VPN policy at both sides [Both sides of the VPN need agree on which subnets are in use, for this to work].

  in Need help/suggestions for firewall rule Comment by Arkwright October 4
• Update the firmware.

  in How to resolve Sudden Reboot Issue of NSA 5600? Comment by Arkwright October 4
• I don't think PortShield works for WAN interfaces but there are some other modes. L2 bridge mode might work, but I suggest you test it to make sure behaves in the way you're expecting. https://www.sonicwall.com/support/knowledge-base/configuring-layer-2-bridge-mode-in-sonicos-enhanced/170505396170557

  in 2 WAN interfaces with IPs on the same subnet Comment by Arkwright October 2
• No expert in gaming here but I would think they have SSL MITM countermeasures in place to prevent the use of tools for cheating, so games may not work with DPI-SSL.

  in Best Practices for Securing Network Traffic Comment by Arkwright October 2
• And we already told them that the possible root cause is due to unlicensed. This is unlikely - it's possible that Sonicwall "accidentally" a bug to encourage you to buy licenses but this would be pretty underhanded behaviour. The more likely explanation is the SSLVPN vulnerability; tWebMain is [I believe] responsible for…

  in Our SonicWall Firewall Is Restarting Automatically Comment by Arkwright October 2
• The short answer is "no". Why do you need two physical interfaces in the same network? Is this for redundancy?

  in 2 WAN interfaces with IPs on the same subnet Comment by Arkwright October 2
• Multiple subnets in VPN policies with different levels of access control is bread-and-butter stuff for SonicOS. I am guessing here, so I think a diagram might help, but did you ask the third party to create a static route so their replies go the right way?

  in VPN tunnel not working over secondary WAN IP Comment by Arkwright September 27
More Comments