Comments
-
From my own understanding, not 100% sure. Device VPN use PKI authentication(no credentials support) and run as window services. As a result, once device boot up, no matter user login or not. The CT window service will to use system store certificate to login SMA and provide limited connection to internal network. Network…
-
With device VPN only, UI should show connect button for user VPN. Yes, it looks like a bug so you can reach sonicwall to fix.
-
Do you mean API on client itself or SMA appliance? PC client , you can just check the UI. For SMA, it support REST API. Append /Console/Help to AMC and you will find.
-
Device VPN is real always-on. It is connected even window user does not login to windows after cold boot. Network logon I don't think its always-on, they are different stuffs.
-
Those websites need public A record, not cname or alias. With correct A record, CT will add the public IP to client route table and route to SMA.
-
You can uncheck these, its enabled by default.
-
Issue already fixed.
-
DNS (Name Service) is a group which include DNS (Name Service) TCP AND DNS (Name Service) UDP. In most cases, allowing DNS (Name Service) UDP would be good enough. Majority still using UDP for DNS. DNS (Name Service) UDP = UDP Port 53 DNS (Name Service) TCP = TCP Port 53 DNS (Name Service) = TCP 53+UDP53
-
Yes, it already dead for few days. All firewalls got this but no one gonna fix it. Its sonicwall backend issue and wont affect devices operation. Just ignore it and hope sonicwall backend will fix it within 1-2 months.
-
@BWC If you plugin console & boot compare 3700 & 4700. You will find different processes ran during boot up. High end products definitely have some "on top design" over SMB products.
-
It seems only available for high end models. (Start from NSa4700) The core design is a bit differences between high end & low end products. Like the previous SM9800 with multi chassis. Maybe the the high end product is running like Linux kernel > docker container > SonicOS? So you can restart docker image without restart…
-
the file should be encrypted by SonicWALL Dev. Don't think we can extract it without SonicWALL Tech.
-
@BWC Yes, you are right. SMA 12.4.2 connect tunnel works with MacOS(even M1).
-
Upgraded to 12.4.2 for testing, the new features are great. But I am not sure about the stability as I am not heavily use it.
-
NSa2700 should have secondary storage built-in. Remember to enable it. By default, logs are not store to secondary storage.