20 votes
Accepted

What does a UDP connection timeout really mean?

While there is no formal "connection" with UDP there is still a convention that clients send requests and expect to get responses back with the source IP and port swapped with the Destinatoin IP and ...
Peter Green's user avatar
  • 13.3k
11 votes

What does a UDP connection timeout really mean?

Your firewall is maintaining a connection table for UDP connections. For example, when you send a DNS query, the firewall creates an entry for that flow so that the DNS reply will be allowed back ...
Ron Trunk's user avatar
  • 67.3k
4 votes
Accepted

Multiple subnet exist on not seperated network segment?

It may be seen, today, as a poor design, but it's a perfectly valid configuration. The nodes in one subnet are mostly unaware of those in the other subnet. (yes, they can see each others broadcast ...
Ricky's user avatar
  • 32.1k
4 votes

What does a UDP connection timeout really mean?

Your NTP server is behind your NAT (firewall). UDP is connectionless from the point of view of the application and OS and for most network appliances along the way. For your NAT firewall, however, ...
Alan's user avatar
  • 41
4 votes

Sonicwall DHCP client option code

DHCP servers accept very few options from clients; though as you point out in comments a few options are sent by the client in the DHCP REQUEST, such as Vendor class identifier (option 60) and the ...
jonathanjo's user avatar
  • 16.2k
3 votes
Accepted

How do I send syslogs from a UTM/switch to a cloud-hosted log server?

You may be running into the fact that some firewalls only allow syslog to be sent from them via their management interface (and not directly out the port facing towards your SaaS/logging provider). ...
Benjamin Dale's user avatar
3 votes
Accepted

SonicWall NSA 2400 and 1:1 NAT with multiple public IPs

You certainly can do MANY:1 NAT -- that is: have several Public WAN IPs point to 1 internal LAN IP. Just create Address Objects for each WAN IP and put those Address Objects into an Address Object ...
PSaul's user avatar
  • 556
3 votes

SonicWall is dropping encrypted packets with error "sonicwall ipsec vpn decryption failed selector check error"

This sounds like an issue with traffic-selectors - if you are using policy-based VPN on both sides, you need to make sure the policy (eg: traffic you permit over the tunnel) is the same but reversed ...
Benjamin Dale's user avatar
3 votes

How to connect high-availability routers to high-availability firewalls

High availability is a big and sometimes tricky topic, depending on what you actually want to achieve. If you want to maintain running TCP connections, for example, with sub 100 ms retransmission, ...
jonathanjo's user avatar
  • 16.2k
3 votes
Accepted

How can I create a static route between subnets on sonicwall

As boomi has already pointed out, this is no routing issue but a firewall issue. Most firewalls have an implicit deny all rule at the end of their policy list, so everything you haven't explicitly ...
Zac67's user avatar
  • 83.9k
3 votes
Accepted

Access to a server behind the SonicWall from the LAN using Public IP addresses

It sounds like what you want is hairpin routing. This is not a good idea because it is suboptimal routing, involving NAT (a kludge that should be avoided whenever possible), and it unnecessarily ...
Ron Maupin's user avatar
  • 99.4k
3 votes
Accepted

Can I route a VLAN on a Sonicwall to use a different gateway?

The Gateway for the PBX should be the firewall (192.168.16.1). But you need to add a route (default) to the PBX to send SIP traffic to the SBC.
Ron Trunk's user avatar
  • 67.3k
3 votes

Can't get to the Internet from VLAN on switch

You can't use the same IP address 10.240.10.1 for both Switch 1 and firewall. VLAN 20 is missing from Switch 1 altogether, so there's no connectivity from it to the firewall.
Zac67's user avatar
  • 83.9k
3 votes
Accepted

What is the easiest way to regain access to the Sonicwall configuration management after I have locked myself out by deactivating https management

If you have a config saved off-device that you could cut & paste in via console, you are able to replace your Sonicwall config with the backed-up config via Safe Mode. AFAIK you can NOT edit an ...
Jeff Wheeler's user avatar
  • 5,449
2 votes

Sonicwall NSA 3600 - allow vlan access to one website

Check the order of the access rules from LAN -> WAN. You may find the newly created rule has been automatically put underneath the debt all rule. If so you should be able to move this up the list so ...
Jackthedog's user avatar
2 votes

How do I block league of legends

That is pretty standard in most firewall nowadays. The feature you are looking for is "App control" and it's a licensed feature in your Sonicwall Firewall. I confirm you that you can block "league of ...
KorXo's user avatar
  • 1,152
2 votes

sonic wall - bridge 2 lans

You should not need to add a route on the Sonicwall, as it already has a connected route when you give it an ip address in that subnet. (Edit: well maybe you do, I have no idea how a Sonicwall works ...
hertitu's user avatar
  • 2,638
2 votes

Can't connect to SonicWall NSA 2400 whether in/not in Safe Mode

I just did this with an NSA 2600. Once you have the device in safe mode (TEST is blinking) connect the ethernet from your computer to the management port. You might notice the uplink light on X0 goes ...
Tyler's user avatar
  • 21
2 votes

1-1 NAT on a SonicWall with a DMZ

In this situation, you should put your PBX device in DMZ zone, assign a private IP address for it, then create an Inbound access rule and an Inbound One-to-One NAT policy for public/Internet traffic ...
Hung Tran's user avatar
  • 3,754
2 votes
Accepted

With large file transfer packets are dropped with the error "IDP detection OOO Exceeded Max" on encryption/decryption engine subsystem

I had that issue too, creating a rule for the object and disabling DPI on it definitely worked for me. I also noticed that the issue is specifically mentioned as a resolved issue in the latest ...
mark's user avatar
  • 36
2 votes

TZ205W DNS Issue

If I were trying to accomplish this, I would set an outgoing firewall rule to allow DNS to those specific whitelisted servers, followed by a second rule to block all DNS.
CellPointNetworks's user avatar
2 votes
Accepted

Configuring HP Smart Switch and SonicWall with VLAN

When a host is connected to port 37 you need to configure it untagged for VLAN ID 2. Hosts don't usually tag. Also, some other port needs to participate in VLAN 2 to have a working network. Likely, ...
Zac67's user avatar
  • 83.9k
2 votes
Accepted

Sonicwall: force all traffic from specific source through VPN

You should be able to do what you want by Replacing your site-2site VPN with a "Tunnel Interface" (its an option when adding a VPN) Giving the phones in B a new IP range (which you have done) Adding ...
Phil's user avatar
  • 136
2 votes
Accepted

Two sites with public IP's in same subnet. Spoof detection

This is a classic split-horizon problem. I don't know how easy it will be to deal with on ethernet, or a sonicwall. The last time I had this issue with a few cable modems, it took some inventive ...
Ricky's user avatar
  • 32.1k
2 votes

What is the easiest way to regain access to the Sonicwall configuration management after I have locked myself out by deactivating https management

SSH to WAN/LAN IP address and perform the command to Sonicwall CLI. web-management allow-http If you're not familiar with Sonicwall CLI, I'd recommend going through these steps. [https://www.sonicwall....
Not-a-Coder's user avatar
2 votes

Adding Second Interface with Different Public IP for Same Internet Connection

A firewall may not allow two interfaces using IP addresses from the same subnet. May be you can use a secondary address on the same interface.
Rais's user avatar
  • 352
1 vote

Sonicwall NSA 5600 Dual Wan / HA + Dual Switches how to setup fault tolerance and VLANs

You are mixing some concepts about HA, redundancy, port-channels and VLAN. Let's try to define every part of this network design. HA Firewall You need to conect 2 firewalls directly with one (or two)...
KorXo's user avatar
  • 1,152
1 vote

Routing to another local network with sonicwall

Your question doesn't list any specific IPs so I'm just going to make some assumptions, change them as needed. You can do what you want, DHCP is broadcast only within the local subnet (won't be passed ...
PSaul's user avatar
  • 556
1 vote
Accepted

Blocking facebook app in sonic wall

You need to have valid licenses to use Advanced Services as Content Filtering or App control. There are no alternative to this. Just check in www.mysonicwall.com what license do you have for your ...
KorXo's user avatar
  • 1,152
1 vote

How do I send syslogs from a UTM/switch to a cloud-hosted log server?

You will want to log over a VPN tunnel to protect your clients' data. What I've done is set up the tunnel between the customer's edge UTM/firewall appliance and a virtual one on my cloud. They could ...
RI Swamp Yankee's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible