Simon

Moderator
Avatar

Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".

Simon Moderator

Badges (11)

2 Year Anniversary1 Year Anniversary5 AnswersPhotogenic5 HelpfulsFirst Answer5 Likes10 CommentsName DropperFirst CommentEarly Adopter

Comments

  • Hi @BWC , Engineering recommending an RFE on a Jira ticket that might otherwise look like a bug is that, the issue is seen as not a failure of the product so much as in this case a failure to accommodate how Firefox did this differently than the standard. We work correctly in the other browsers, not Firefox. Firefox75…
  • Hi @BWC The SMA 500v must access the back end license manager every 5 days or its license expires. Here is the KB article that describes this issue: If you are seeing many instances of the error log then you need to investigate why the SMA can not talk the either lm.sonicwall.com or lm2.sonicwall.com or…
  • Hi @Ashish Yes, it is an example for how to fill out the field. There is no suggestion that 5 is the correct number for any particular environment. I will recommend the documentation people look into modernizing the numbers in the example. If you are having issues configuring EPC device profiles for iOS I recommend you…
  • Hi @natas I am only aware of one person who might be able to answer this. I have forwarded him the link and asked him to look at it. I think he may be out today.
  • Hi @Ninad94 Any client not capable of using TLS1.2 would not be able to open a VPN. If you look at Internet Options you can see whether that PC can use TLS1.2. If the SMA only allows TLS 1.2 (or TLS1.3 in 12.4 with best security) any user system not capable of using TLS1.2, or where TLS1.2 is disabled in the Internet…
    in SMA query Comment by Simon October 2020
  • Hello @alain_fensor Yes, on the NSA you can set the port for the SSL VPN capability in the SSL VPN Server Settings page. It is the top item. ........Michael
  • YW @alain_fensor The SMA should always be protected from the internet by a firewall. You will be right to think of the SMA as an Apache server. It requires protection. Since all traffic to the SMA should come thru a firewall from the internet you would typically be using a NAT translation to hide the internal IP address of…
  • Hi @BobbyKearan What firmware are you running? Which SMA hardware are you running? This issue was seen some time ago and resolved. We have released a few generations of firmware since that issue was fixed. Regression issues are of course possible. ........Michael
  • Hi @alain_fensor The SRA 1600 (EOS 1NOV19) is not designed to set any port other than 443. In the firewall you can NAT a different port and change the unique external port back to 443 for the SRA. ........Michael
  • Hi @manicaps1 @BWC is correct - there is no tool to convert these configurations. This is mainly because they take entirely different approaches to the SSL based remote access capability. They share very little in common. The things they have in common, like EPC engine, are entirely implemented in different ways.
  • Hi @wlehnertz I don't think so. The throughput depends on several factors. Things like the firmware and Netextender versions, the number of users, the LAN environment behind the SMA, as well as the internet service. 1-2 Mbps seems low, but might be reasonable depending on the combination of factors and environment. If you…
  • Hi @BWC To answer, as much as I can: Are there still problems open which will be addressed in 10.2.1.0 and what's the ETA on that? It is the nature of software for complex systems that there will be problems fixed in any release. Why else have one? Further 10.2.1.0 is a minor feature release so there are limited function…
  • Hi @BWC I am not sure why it did not make the 10.2.0.2 release - may have been some issue with the fix they tried when it came to the QA testing prior to release. That happens on occasion.
  • Hi @BWC SMA-1087 will be fixed in 10.2.0.3. I do not have a date for predicted release. I expect it to be relatively soon. If you need a fix immediately, please open a case and ask for the engineering private build of firmware with the fix from SMA-1087. 10.2.1.0 is predicted to be released in early 2021.
  • Yes, @Camanni , there are differences. The two clients integrate into the client OS in entirely different ways. I'd suggest you open a case so a thorough examination of the issue can be done.