Comments
-
@Rinconmike, Unfortunately, the TZ devices do not have dedicated MGMT ports. But you can certainly configure one of the free interfaces in the LAN zone with a specific subnet and use that for management purposes. Thanks!
-
Hello @ACP_1 , If the firewall is the DHCP server, it would be best to set up VLAN sub-interfaces on the firewall and create separate VLANs on the LAN switch so that the VoIP phones can get the IP addresses from the correct subnet. Thanks!
-
Hello @Rinconmike, When you purchase a new device with a secure upgrade program, once you register the new device on mysonicwall, you get two options register and transfer or register only. If you select register only, you would get 60 days where the licenses stay activated on both platforms. So, I would suggest using the…
-
Hello @FatiguedTech, If the assigned IP addresses belong to the same subnet, then only one of the interfaces will get an IP from that subnet. On the firewall, no two interfaces can be in the same subnet. Multiple WAN interfaces can be on DHCP as long as the IP addresses are from a different subnet. Thanks!
-
Hello @DanOltean, You can create static routing so that the computers and the APs can use dedicated WAN connection. Any network configured on the firewall, created automatic access rules and routes for connectivity. So, it should be possible for the two to communicate through the firewall. Thanks!
-
No problem at all. I am glad I could help. Have a good one, @IT_celikel 😀
-
@IT_celikel, On the application/category of applications as well we have options to include/exclude either IP addresses or user groups. I think you can use those fields to create this limited apps for the specific group that you would like. Thanks!
-
@IT_celikel, I am sorry but I do not understand the question correctly. We have categorized the applications, you can choose to allow/block a complete category of applications. Could you please let me know what you are trying to set up? Thanks!
-
Correct, the access rules are checked first. So, if internet access is allowed for certain MAC addresses, using App control/ CFS you can decide which Applications or websites are allowed for those users. Thanks!
-
Hello @IT_celikel, Welcome to the SonicWall community. You can allow/block only certain websites using the CFS (Content Filtering service) on the firewall. Please refer to the KB below for the same. The applications can be managed using the App control feature on the firewall. I hope this helps! Thanks!
-
@DisaRicks, In that case, I would suggest reaching out to SonicWall support for further assistance. We probably need to dig deeper and find out the root cause of this issue. Thanks!
-
Hello @satpalmatta, Welcome to the SonicWall community. What device model are you using? Are you getting 500 Mbps when you bypass the firewall? Kindly take a look at the following KB for more troubleshooting steps: Thanks!
-
@DisaRicks, Based on the drop code, it looks like there is a missing access rule. What zone is Serveurs_Marne in? Could you please check the access rule from that zone to VPN or whatever zone you have placed PASTEUR_NETWORK in? Even if it is present make sure that the priority of that rule is set correctly and if there is…
-
@DisaRicks, So, is it like you have both VPN as well as routing to PASTEUR_NETWORK which includes the network 172.20.85.0/255.255.255.0? The only difference that I can see is that the non-working route is on a metric 5 although the other one is on 1. What happens when you do a packet capture with the source as…
-
@DisaRicks, The packet replay feature only shows how the firewall will process and will not send the packet outside of the firewall. Could you please share how the interface X2 is configured, the routes you have in place, and the networks included in VPN? That should help us troubleshoot this issue. Thanks!