If the client software pins its certs or doesn't use the system certificates then you cannot MITM it because you cannot get it to trust it. Just remember that DPI-SSL is a hack, it's somewhat surpris… (View Post)

IME, when something odd happens with DHCP serving, disable/enable the scope will fix it surprisingly frequently. I have seen this with Gen6 and Gen7 firewalls. (View Post)

Log -> Reports offers similar functionality. 'Start Data Collection', then you can reset the data collection whenever you like. (View Post)

Enable ping management on WAN interfaces. WAN>WAN access rules. Edit the automatically-created access rule for this if you do not want it to be pingable from everywhere. (View Post)

I can't think of any reason to put your WAN IPs in the VPN subnet. If you have them in there, that would explain why it stops working when the VPN is up. (View Post)