You have the correct idea, and this is (unfortunately) a very common setup. In general, phone people don't know firewalling and won't work with IT people to set it up so they force clients into havin… (View Post)

Look into Sonicwall's Capture Client. The TZ alone cannot automatically isolate a device if it becomes infected. (View Post)

QUIC is Google's lossy implementation of HTTPS. Its been made a standard (unfortunately), but as PRESTON mentioned it can cause issues with DPI-SSL functioning correctly with Chromium-based browsers.… (View Post)

Clearly the responder doesn't like your IKE ID... Try changing it to the documented settings (you have them documented right?) or just your WAN IP address. Ask the third party to see what the firewal… (View Post)

Glad to help. Feel free to mark an answer for others to see. (View Post)