19
votes
Accepted
What does a UDP connection timeout really mean?
While there is no formal "connection" with UDP there is still a convention that clients send requests and expect to get responses back with the source IP and port swapped with the Destinatoin IP and ...
- 12.8k
11
votes
What does a UDP connection timeout really mean?
Your firewall is maintaining a connection table for UDP connections. For example, when you send a DNS query, the firewall creates an entry for that flow so that the DNS reply will be allowed back ...
- 66.2k
4
votes
How I can block Psiphon?
I'm quoting what is posted on the Psiphon page:
You can only establish connections via Psiphon by using the following ports:
53, 80, 443, 554, 1935, 7070, 8000, 8001,
6971-6999.
If you block ...
- 2,095
4
votes
Accepted
Dual Network Switch Setup to Firewall - Best Practices
The answer will depend on where most of your internal LAN traffic will be going:
If most of your LAN traffic is INTERNALLY BOUND (ie, to a local File Server, Terminal Server, Intranet server, etc) ...
- 556
4
votes
How do I set up a Link Aggregation for 2 ports between a Sonicwall TZ500 and a Dell XP1018P
You can't do it on Sonicwall device. TZ series doesn't support link aggregation. Check this doc http://documents.software.dell.com/sonicos/6.2.3.1/release-notes/document-download?ParentProduct=847
- 1,152
4
votes
Accepted
I can't get a VLAN to talk to the LAN on a SonicWALL
Well, you normally don't make the port that the PC "on the VLAN" connects to a trunk, and that's probably the bulk of your problem. So the PC isn't actually ON the VLAN, regardless of what you set its ...
- 2,746
4
votes
Accepted
Multiple subnet exist on not seperated network segment?
It may be seen, today, as a poor design, but it's a perfectly valid configuration. The nodes in one subnet are mostly unaware of those in the other subnet. (yes, they can see each others broadcast ...
- 31.1k
4
votes
What does a UDP connection timeout really mean?
Your NTP server is behind your NAT (firewall). UDP is connectionless from the point of view of the application and OS and for most network appliances along the way.
For your NAT firewall, however, ...
- 41
4
votes
Sonicwall DHCP client option code
DHCP servers accept very few options from clients; though as you point out in comments a few options are sent by the client in the DHCP REQUEST, such as Vendor class identifier (option 60) and the ...
- 16.1k
3
votes
Impact on Firewall with IP camera network attached
I understand that most of the CCTV traffic will be confined to the LAN under X6 traffic because communication is between your cameras and the recording device.
Also, I understand that the only ...
- 1,152
3
votes
Accepted
SonicWall : Blocking Access Between Different Subnets or Interfaces
By default the LAN Zone has Interface Trust enabled, which means all interfaces within the same Zone trust each other (pass traffic). Go to Network, Zones, and Edit the Zone in question (LAN) and ...
- 556
3
votes
SonicWall : Blocking Access Between Different Subnets or Interfaces
By default, communication intra-zone is allowed. You just enter in Firewall->Access rules, select LAN->LAN and unmark the last rule wich allow intra-zone connections.
In my opinion, if you don't want ...
- 1,152
3
votes
Accepted
SonicWall : Bandwidth Management Per User
Set user for guaranteed speed of 1Mb and max speed of 2Mb.
This is absolutely possible. Dell has an article outlining this specifically; How To Configure Bandwidth Management with limits Per IP (...
- 5,469
3
votes
Accepted
SonicWall NSA 2400 and 1:1 NAT with multiple public IPs
You certainly can do MANY:1 NAT -- that is: have several Public WAN IPs point to 1 internal LAN IP.
Just create Address Objects for each WAN IP and put those Address Objects into an Address Object ...
- 556
3
votes
Accepted
How do I send syslogs from a UTM/switch to a cloud-hosted log server?
You may be running into the fact that some firewalls only allow syslog to be sent from them via their management interface (and not directly out the port facing towards your SaaS/logging provider).
...
- 9,156
3
votes
SonicWall is dropping encrypted packets with error "sonicwall ipsec vpn decryption failed selector check error"
This sounds like an issue with traffic-selectors - if you are using policy-based VPN on both sides, you need to make sure the policy (eg: traffic you permit over the tunnel) is the same but reversed ...
- 9,156
3
votes
How to connect high-availability routers to high-availability firewalls
High availability is a big and sometimes tricky topic, depending on what you actually want to achieve. If you want to maintain running TCP connections, for example, with sub 100 ms retransmission, ...
- 16.1k
3
votes
Accepted
How can I create a static route between subnets on sonicwall
As boomi has already pointed out, this is no routing issue but a firewall issue. Most firewalls have an implicit deny all rule at the end of their policy list, so everything you haven't explicitly ...
- 79.9k
3
votes
Accepted
Access to a server behind the SonicWall from the LAN using Public IP addresses
It sounds like what you want is hairpin routing. This is not a good idea because it is suboptimal routing, involving NAT (a kludge that should be avoided whenever possible), and it unnecessarily ...
- 97.7k
3
votes
Accepted
Can I route a VLAN on a Sonicwall to use a different gateway?
The Gateway for the PBX should be the firewall (192.168.16.1). But you need to add a route (default) to the PBX to send SIP traffic to the SBC.
- 66.2k
3
votes
Can't get to the Internet from VLAN on switch
You can't use the same IP address 10.240.10.1 for both Switch 1 and firewall.
VLAN 20 is missing from Switch 1 altogether, so there's no connectivity from it to the firewall.
- 79.9k
3
votes
Accepted
What is the easiest way to regain access to the Sonicwall configuration management after I have locked myself out by deactivating https management
If you have a config saved off-device that you could cut & paste in via console, you are able to replace your Sonicwall config with the backed-up config via Safe Mode. AFAIK you can NOT edit an ...
- 5,374
2
votes
Allow WAN to LAN traffic
You do not need transparent mode. Your firewall will forward traffic from the WAN1 to the LAN interfaces, assuming your policies allow it. To configure these policies, you will need to create ...
- 66.2k
2
votes
QoS for site to site VPN
You need to create a Bandwidth Management Rule (BWM) Rule and apply it to a LAN > VPN firewall rule or DMZ > VPN if you have it in the DMZ. You can customize it for each individual site connection ...
2
votes
Equal WAN bandwidth for all LAN devices using Sonicwall NSA 2400/2600
I know this is an older post, but in case someone else stumbles upon it like I did, I wanted to provide some input.
So far, the only way to do this that I know of is with Mikrotik's PCQ (per-...
- 21
2
votes
Accepted
SonicWall : Configuring WAN X1
The best answer will be to ask your ISP to either exchange your modem-router combo device for a modem-only device OR see if they can switch it into Bridge mode (where it becomes only a modem and no ...
- 556
2
votes
Accepted
How can I know about if there is a smurf attack on my network?
I agree with Ricky Beam. You'll have to get a packet capture of the Firewall to see if you are receiving responses for a spoofed broadcast request not made by the SonicWall. Only then would we see if ...
- 509
2
votes
How can I know about if there is a smurf attack on my network?
It is all to common (sadly) for firewalls to flag things a little aggressively. You'll need to use something like wireshark and/or netflow to watch and monitor what's actively flowing through the ...
- 31.1k
2
votes
Point to point LAN using two sonicwalls at seperate locations
As others have said you can't use IPs that are already in use. You should use a separate subnet that you can route through (to the other network).
I would suggest using something larger than a /30 ...
- 556
2
votes
Accepted
Sonicwall - SSH to change admin password
If you have a valid configuration backup you can boot sonicwall in safe mode and change admin password, which is not stored in exported backup file.
You have to phisically access the appliace, ...
- 401
Only top scored, non community-wiki answers of a minimum length are eligible