20
votes
Accepted
What does a UDP connection timeout really mean?
While there is no formal "connection" with UDP there is still a convention that clients send requests and expect to get responses back with the source IP and port swapped with the Destinatoin IP and ...
- 13.2k
11
votes
What does a UDP connection timeout really mean?
Your firewall is maintaining a connection table for UDP connections. For example, when you send a DNS query, the firewall creates an entry for that flow so that the DNS reply will be allowed back ...
- 67.1k
4
votes
Accepted
Dual Network Switch Setup to Firewall - Best Practices
The answer will depend on where most of your internal LAN traffic will be going:
If most of your LAN traffic is INTERNALLY BOUND (ie, to a local File Server, Terminal Server, Intranet server, etc) ...
- 556
4
votes
Accepted
I can't get a VLAN to talk to the LAN on a SonicWALL
Well, you normally don't make the port that the PC "on the VLAN" connects to a trunk, and that's probably the bulk of your problem. So the PC isn't actually ON the VLAN, regardless of what you set its ...
- 2,746
4
votes
How do I set up a Link Aggregation for 2 ports between a Sonicwall TZ500 and a Dell XP1018P
You can't do it on Sonicwall device. TZ series doesn't support link aggregation. Check this doc http://documents.software.dell.com/sonicos/6.2.3.1/release-notes/document-download?ParentProduct=847
- 1,152
4
votes
Accepted
Multiple subnet exist on not seperated network segment?
It may be seen, today, as a poor design, but it's a perfectly valid configuration. The nodes in one subnet are mostly unaware of those in the other subnet. (yes, they can see each others broadcast ...
- 31.8k
4
votes
How I can block Psiphon?
I'm quoting what is posted on the Psiphon page:
You can only establish connections via Psiphon by using the following ports:
53, 80, 443, 554, 1935, 7070, 8000, 8001,
6971-6999.
If you block ...
- 2,105
4
votes
What does a UDP connection timeout really mean?
Your NTP server is behind your NAT (firewall). UDP is connectionless from the point of view of the application and OS and for most network appliances along the way.
For your NAT firewall, however, ...
- 41
4
votes
Sonicwall DHCP client option code
DHCP servers accept very few options from clients; though as you point out in comments a few options are sent by the client in the DHCP REQUEST, such as Vendor class identifier (option 60) and the ...
- 16.2k
3
votes
Accepted
SonicWall NSA 2400 and 1:1 NAT with multiple public IPs
You certainly can do MANY:1 NAT -- that is: have several Public WAN IPs point to 1 internal LAN IP.
Just create Address Objects for each WAN IP and put those Address Objects into an Address Object ...
- 556
3
votes
Accepted
How do I send syslogs from a UTM/switch to a cloud-hosted log server?
You may be running into the fact that some firewalls only allow syslog to be sent from them via their management interface (and not directly out the port facing towards your SaaS/logging provider).
...
- 9,421
3
votes
SonicWall is dropping encrypted packets with error "sonicwall ipsec vpn decryption failed selector check error"
This sounds like an issue with traffic-selectors - if you are using policy-based VPN on both sides, you need to make sure the policy (eg: traffic you permit over the tunnel) is the same but reversed ...
- 9,421
3
votes
How to connect high-availability routers to high-availability firewalls
High availability is a big and sometimes tricky topic, depending on what you actually want to achieve. If you want to maintain running TCP connections, for example, with sub 100 ms retransmission, ...
- 16.2k
3
votes
Accepted
How can I create a static route between subnets on sonicwall
As boomi has already pointed out, this is no routing issue but a firewall issue. Most firewalls have an implicit deny all rule at the end of their policy list, so everything you haven't explicitly ...
- 82.7k
3
votes
Accepted
Access to a server behind the SonicWall from the LAN using Public IP addresses
It sounds like what you want is hairpin routing. This is not a good idea because it is suboptimal routing, involving NAT (a kludge that should be avoided whenever possible), and it unnecessarily ...
- 98.8k
3
votes
Accepted
Can I route a VLAN on a Sonicwall to use a different gateway?
The Gateway for the PBX should be the firewall (192.168.16.1). But you need to add a route (default) to the PBX to send SIP traffic to the SBC.
- 67.1k
3
votes
Can't get to the Internet from VLAN on switch
You can't use the same IP address 10.240.10.1 for both Switch 1 and firewall.
VLAN 20 is missing from Switch 1 altogether, so there's no connectivity from it to the firewall.
- 82.7k
3
votes
Accepted
What is the easiest way to regain access to the Sonicwall configuration management after I have locked myself out by deactivating https management
If you have a config saved off-device that you could cut & paste in via console, you are able to replace your Sonicwall config with the backed-up config via Safe Mode. AFAIK you can NOT edit an ...
- 5,449
2
votes
Accepted
Multiple Subnets on Sonicwall Firewall
First double check the devices on that X4 subnet: Can they reach the router (192.168.250.253)? Is that is their default gateway? Correct subnet mask? Are you statically assigning IPs or using DHCP? ...
- 556
2
votes
Accepted
Can Sonicwall TZ105W W0 port be configured as WAN?
If your GSM Wifi Hotspot has an Ethernet port you could connect X1 (WAN) there and it should work; that would be simplest.
If NOT then you will need to put W0 (Wireless) into Wireless Bridge Mode:
...
- 556
2
votes
Accepted
Help with Sonicwall 2600
If you have a WAN subnet of, for example, 3.3.3.3/29 then you have a range of WAN IPs from, say, 3.3.3.2 - 3.3.3.6 (let's assume 3.3.3.1 is your default gateway/ISP router).
If your SonicWALL X1 ...
- 556
2
votes
Accepted
Backup configuration from SonicWall using ssh or scp
Sonicwall export files are compiled , thus is not possible to edit them offline and reupload to a different appliace.
There is a way to fetch config files , I never tried, but on stackoverflow there ...
- 401
2
votes
Routing eigrp between socniwall
Sonicwall won't understand EIGRP cause EIGRP is Cisco proprietary may you try other routing protocol or tunnel the Sonicwall to forward the traffic without involving in any routing
- 3,444
2
votes
How I can block Psiphon?
I work with a High School and some of the students are using Psiphon to get around our web filter. So I believe we were having a similar issue. We found that A third party managed firewall and web ...
- 83
2
votes
How I can block Psiphon?
If you want to block this application, you must block all VPNs which are not yours.
Psiphon can mount proxy HTTP/SOCKS via tunnels. All the traffic of this application will bypass the port TCP 80 by ...
- 276
2
votes
sonic wall - bridge 2 lans
You should not need to add a route on the Sonicwall, as it already has a connected route when you give it an ip address in that subnet. (Edit: well maybe you do, I have no idea how a Sonicwall works ...
- 2,638
2
votes
How do I block league of legends
That is pretty standard in most firewall nowadays. The feature you are looking for is "App control" and it's a licensed feature in your Sonicwall Firewall.
I confirm you that you can block "league of ...
- 1,152
2
votes
Sonicwall NSA 3600 - allow vlan access to one website
Check the order of the access rules from LAN -> WAN. You may find the newly created rule has been automatically put underneath the debt all rule. If so you should be able to move this up the list so ...
- 21
2
votes
Can't connect to SonicWall NSA 2400 whether in/not in Safe Mode
I just did this with an NSA 2600.
Once you have the device in safe mode (TEST is blinking) connect the ethernet from your computer to the management port. You might notice the uplink light on X0 goes ...
- 21
2
votes
1-1 NAT on a SonicWall with a DMZ
In this situation, you should put your PBX device in DMZ zone, assign a private IP address for it, then create an Inbound access rule and an Inbound One-to-One NAT policy for public/Internet traffic ...
- 3,754
Only top scored, non community-wiki answers of a minimum length are eligible