4
votes
How could I prevent NetExtender Cli to asking certificate confirmation?
To prevent NetExtender's certificate verification dialogue, you can use the undocumented switch "--always-trust"
For example:
netExtender -u user -p password -d 'domain' --always-trust host
...
4
votes
How to Set-Up VPN that is Client and Server Independent
There's no magic here. VPN is a complex ecosystem, with many different vendors, many different technologies, and many different configurations. There is no "VPN Master Software" or the like that will ...
3
votes
Sonicwall: cannot send email (outlook) and drops connection (google drive)
Etisalat is blocking port 25 as part of their spam mitigation policy.
Dear Customer,
Thank you for contacting Etisalat Business Services Support Desk
Kindly be informed that we have ...
3
votes
Accepted
Sonicwall not handing out address to VLAN on Dell switch
You probably need a helper-address to be defined in the VLAN that's not receiving DHCP. I don't know the exact syntax for your switch, but something like:
ip helper-address 1.2.3.4
Where 1.2.3.4 is ...
3
votes
Accepted
Why this physical interface does not have a VLAN-tagged subinterface?
To answer your comment, basically a lot of managed/VLAN-capable switches can support what's known in the Cisco world as a 'Native VLAN'. It's quite easy to understand, basically you state on a whole ...
2
votes
How do I get SonicWALL Global VPN to work with Windows 8.1?
I just solved this after an hour of fiddling with my Windows 10 settings, and I'm sharing it with you in case it's useful
1) Uninstall SonicWall. Both AppStore and classic apps can coexiste, I've ...
2
votes
SonicWALL SSL VPN Can't Click Bookmarks
I ran into this recently, having never seen this behavior on several SonicWALL devices that I've configured over the years. The details in this article resolved the issue for me: https://www.sonicwall....
2
votes
Accepted
SonicWall VPN or Windows VPN?
The sonicwall vpn is better in my own opinion, why?
Your server load to do the job is gave to the router, which is optimized for that.
You keep only one device facing the internet, while with rras + ...
2
votes
Accepted
How to Disable Remote desktop connection over internet on Windows server 2012?
Then the obvious answer is to disable outside access to your RDP port (typically 3389).
This question is a bit surprising since the only ways it could be reached from the outside would be if the ...
2
votes
Accepted
ssh_dispatch_run_fatal: Connection to x.x.x.x port 22: key type does not match
It turns out that this is indeed a buggy firmware on Sonicwall. Be advised if you run 6.2.2.2-19n that the issue pertains specifically to this version. Upgrading to 6.2.5.1 resolved this problem.
2
votes
Display all rather than a screen at a time with SonicWALL CLI SHOW command?
You can use this..
Login into SonicWALL CLI then:
cli screen length session 1600
cli screen width session 2560
or
no cli pager session
This works for me on firmware 6.2.
2
votes
Sonicwall default details / hard reset
Your firewall was not reset correctly: default (post-reset) settings are 192.168.168.168 and admin/password as credentials.
Try resetting in this manner:
- power off the device
- press and keep ...
2
votes
How could I prevent NetExtender Cli to asking certificate confirmation?
Håkan Lindqvists comment is on the money.
Only the certificates contained in ~/.netExtenderCerts/PUB_CERT/ca-bundle.crt seem to be evalutated by netExtender. The good news is this is a text file ...
2
votes
Accepted
Site-to-site VPN disconnecting every minute
I have heard of needing to turn off Keep-Alives or Dead-peer-detection when working with a sonicwal to third party firewall IPsec connection. Have you tried disabling DPD on both ends?
2
votes
Accepted
Unable to login to SonicWall TZ 215 after firmware upgrade
As show in the comment section, a 12-chars password with lower and upper case, two numbers and a special char (as @) did the trick.
2
votes
Weird routing behavior between 2 Subnets
First, 192.168.15.0/21 (255.255.248.0) isn't the proper way to name this network, it's actually 192.168.8.0/21 (255.255.248.0), ranging from 192.168.8.0 - 192.168.15.255.
Second, there is no real ...
1
vote
Accepted
SonicWall TZ205 Route traffic back to WAN IP
In your "forward rule", as a incoming NAT rule on the firewall, you need to tick the "Create a reflexible rule". That will create a loopback NAT rule.
That loopback rule detect your app want to talk ...
1
vote
Preventing SonicWALL NetExtender from asking about certificates
I'm not sure if it will work on Windows, but you can try the flag "--always-trust" which I'm sure that works on Linux (https://serverfault.com/a/1034230/592148)
1
vote
Unable to connect from Linux (Ubuntu) to SonicWall VPN
First, there is a mismatch in your IKE settings. You are asking for modp2048, which is DH Group 14, but the SonicWall is requesting modp1024, which is DH Group 2.
You may also be affected by the ...
1
vote
Sonicwall NSA 5600 Dual Wan / HA + Dual Switches how to setup fault tolerance and VLANs
Following the comment, there is a better preview of what you need.
You miss one detail, does you have bought the Active/Active for the HA ?
With it you need two interface mapped to make the HA. One ...
1
vote
Accepted
Land Attack Dropped false alarm from TZ 205
The firewall thinks this is a LAND attack because the source and destination IP address of those packets are the same. You can solve this by translating the source of the outbound packets to another ...
1
vote
openvpn client behind sonicwall can't see WAN
The VPN "address" that you are seeing is never seen by your SonicWall router. It is specific to the VPN tunnel and is only seen by the VPN tunnel.
The VPN tunnel has set your default route ( type '...
1
vote
How could I prevent NetExtender Cli to asking certificate confirmation?
#! /bin/bash
echo Y | netExtender -u user -p password -d 'domain' host
1
vote
Accepted
1
vote
Getting traffic from AWS VPC subnet w/ only private IP to route through Sonicwall and to internet
Although you may or may not be doing all of the things illustrated, your setup is essentially the same as VPC Scenario 3.
In a nutshell...
Create a new VPC route table.
Set its default route (0.0.0....
1
vote
Transferring data to Active FTP server fails from DMZ but works fine from LAN
I had a similar problem with a device form Pitney Bowes in the LAN zone.
I resolved it by updating the Sonicwall to firmware 6.2.7.1-23n.
1
vote
Accepted
Is it possible to obtain a list of https hosts that users have visited from a Sonicwall before DPI-SSL is implemented?
I've done this on other platforms, it's SSL inspection - the sonicwall has an exemption list for SSL inspection, to populate this list with previously visited SSL hosts you would need to have had ...
1
vote
Sonicwall TZ300 - Verifying and increasing Max Wireless Clients for non virtual AP
Was able to clarify with a Dell tech.
Wireless > Advanced" = The overall allowed clients for the device.
Wireless > Virtual Access Points. = shows the allowed amount of clients per SSID. However it ...
1
vote
The peer is not responding to phase 1 ISAKMP requests
This error usually is caused by UDP packets being fragmented during the initial handshaking. SonicWall now has a workaround for it.
Go to the Properties menu on the client, and turn on "Restrict the ...
1
vote
Accepted
The peer is not responding to phase 1 ISAKMP requests
Its appears this issue has resolved itself over the last couple of days due to a Windows 10 update. I dont know exactly what update at this time but will post further information if it becomes ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
sonicwall × 355vpn × 107
firewall × 63
networking × 55
routing × 31
nat × 27
site-to-site-vpn × 25
dhcp × 16
router × 15
domain-name-system × 14
subnet × 14
cisco × 13
l2tp × 11
wide-area-network × 10
vlan × 9
wifi × 8
local-area-network × 8
windows × 7
windows-server-2008 × 7
port-forwarding × 7
security × 6
ssl × 6
high-availability × 6
dell × 6
internet × 6