4 votes

How could I prevent NetExtender Cli to asking certificate confirmation?

To prevent NetExtender's certificate verification dialogue, you can use the undocumented switch "--always-trust" For example: netExtender -u user -p password -d 'domain' --always-trust host ...
Alfredo Prada Giorgi's user avatar
4 votes

How to Set-Up VPN that is Client and Server Independent

There's no magic here. VPN is a complex ecosystem, with many different vendors, many different technologies, and many different configurations. There is no "VPN Master Software" or the like that will ...
EEAA's user avatar
  • 110k
3 votes

Sonicwall: cannot send email (outlook) and drops connection (google drive)

Etisalat is blocking port 25 as part of their spam mitigation policy. Dear Customer, Thank you for contacting Etisalat Business Services Support Desk Kindly be informed that we have ...
Dee's user avatar
  • 31
3 votes
Accepted

Sonicwall not handing out address to VLAN on Dell switch

You probably need a helper-address to be defined in the VLAN that's not receiving DHCP. I don't know the exact syntax for your switch, but something like: ip helper-address 1.2.3.4 Where 1.2.3.4 is ...
ewwhite's user avatar
  • 198k
3 votes
Accepted

Why this physical interface does not have a VLAN-tagged subinterface?

To answer your comment, basically a lot of managed/VLAN-capable switches can support what's known in the Cisco world as a 'Native VLAN'. It's quite easy to understand, basically you state on a whole ...
Chopper3's user avatar
  • 102k
2 votes

How do I get SonicWALL Global VPN to work with Windows 8.1?

I just solved this after an hour of fiddling with my Windows 10 settings, and I'm sharing it with you in case it's useful 1) Uninstall SonicWall. Both AppStore and classic apps can coexiste, I've ...
Sapelko's user avatar
  • 21
2 votes

SonicWALL SSL VPN Can't Click Bookmarks

I ran into this recently, having never seen this behavior on several SonicWALL devices that I've configured over the years. The details in this article resolved the issue for me: https://www.sonicwall....
Evan Anderson's user avatar
2 votes
Accepted

SonicWall VPN or Windows VPN?

The sonicwall vpn is better in my own opinion, why? Your server load to do the job is gave to the router, which is optimized for that. You keep only one device facing the internet, while with rras + ...
yagmoth555's user avatar
  • 17.1k
2 votes
Accepted

How to Disable Remote desktop connection over internet on Windows server 2012?

Then the obvious answer is to disable outside access to your RDP port (typically 3389). This question is a bit surprising since the only ways it could be reached from the outside would be if the ...
Julie Pelletier's user avatar
2 votes
Accepted

ssh_dispatch_run_fatal: Connection to x.x.x.x port 22: key type does not match

It turns out that this is indeed a buggy firmware on Sonicwall. Be advised if you run 6.2.2.2-19n that the issue pertains specifically to this version. Upgrading to 6.2.5.1 resolved this problem.
hjlinde's user avatar
  • 51
2 votes

Display all rather than a screen at a time with SonicWALL CLI SHOW command?

You can use this.. Login into SonicWALL CLI then: cli screen length session 1600 cli screen width session 2560 or no cli pager session This works for me on firmware 6.2.
José Vicente's user avatar
2 votes

Sonicwall default details / hard reset

Your firewall was not reset correctly: default (post-reset) settings are 192.168.168.168 and admin/password as credentials. Try resetting in this manner: - power off the device - press and keep ...
shodanshok's user avatar
  • 50.6k
2 votes

How could I prevent NetExtender Cli to asking certificate confirmation?

Håkan Lindqvists comment is on the money. Only the certificates contained in ~/.netExtenderCerts/PUB_CERT/ca-bundle.crt seem to be evalutated by netExtender. The good news is this is a text file ...
LarsOH's user avatar
  • 21
2 votes
Accepted

Site-to-site VPN disconnecting every minute

I have heard of needing to turn off Keep-Alives or Dead-peer-detection when working with a sonicwal to third party firewall IPsec connection. Have you tried disabling DPD on both ends?
Cory Knutson's user avatar
  • 1,876
2 votes
Accepted

Unable to login to SonicWall TZ 215 after firmware upgrade

As show in the comment section, a 12-chars password with lower and upper case, two numbers and a special char (as @) did the trick.
shodanshok's user avatar
  • 50.6k
2 votes

Weird routing behavior between 2 Subnets

First, 192.168.15.0/21 (255.255.248.0) isn't the proper way to name this network, it's actually 192.168.8.0/21 (255.255.248.0), ranging from 192.168.8.0 - 192.168.15.255. Second, there is no real ...
jbgeek's user avatar
  • 96
1 vote
Accepted

SonicWall TZ205 Route traffic back to WAN IP

In your "forward rule", as a incoming NAT rule on the firewall, you need to tick the "Create a reflexible rule". That will create a loopback NAT rule. That loopback rule detect your app want to talk ...
yagmoth555's user avatar
  • 17.1k
1 vote

Preventing SonicWALL NetExtender from asking about certificates

I'm not sure if it will work on Windows, but you can try the flag "--always-trust" which I'm sure that works on Linux (https://serverfault.com/a/1034230/592148)
Alfredo Prada Giorgi's user avatar
1 vote

Unable to connect from Linux (Ubuntu) to SonicWall VPN

First, there is a mismatch in your IKE settings. You are asking for modp2048, which is DH Group 14, but the SonicWall is requesting modp1024, which is DH Group 2. You may also be affected by the ...
Joseph Huber's user avatar
1 vote

Sonicwall NSA 5600 Dual Wan / HA + Dual Switches how to setup fault tolerance and VLANs

Following the comment, there is a better preview of what you need. You miss one detail, does you have bought the Active/Active for the HA ? With it you need two interface mapped to make the HA. One ...
yagmoth555's user avatar
  • 17.1k
1 vote
Accepted

Land Attack Dropped false alarm from TZ 205

The firewall thinks this is a LAND attack because the source and destination IP address of those packets are the same. You can solve this by translating the source of the outbound packets to another ...
hertitu's user avatar
  • 337
1 vote

openvpn client behind sonicwall can't see WAN

The VPN "address" that you are seeing is never seen by your SonicWall router. It is specific to the VPN tunnel and is only seen by the VPN tunnel. The VPN tunnel has set your default route ( type '...
eric.green's user avatar
1 vote

How could I prevent NetExtender Cli to asking certificate confirmation?

#! /bin/bash echo Y | netExtender -u user -p password -d 'domain' host
Vlad's user avatar
  • 21
1 vote
Accepted

How to delete address-object in SonicWALL CLI?

configure no address-object mac cwhii-test
CW Holeman II's user avatar
1 vote

Getting traffic from AWS VPC subnet w/ only private IP to route through Sonicwall and to internet

Although you may or may not be doing all of the things illustrated, your setup is essentially the same as VPC Scenario 3. In a nutshell... Create a new VPC route table. Set its default route (0.0.0....
Michael - sqlbot's user avatar
1 vote

Transferring data to Active FTP server fails from DMZ but works fine from LAN

I had a similar problem with a device form Pitney Bowes in the LAN zone. I resolved it by updating the Sonicwall to firmware 6.2.7.1-23n.
Charles Chojnowski's user avatar
1 vote
Accepted

Is it possible to obtain a list of https hosts that users have visited from a Sonicwall before DPI-SSL is implemented?

I've done this on other platforms, it's SSL inspection - the sonicwall has an exemption list for SSL inspection, to populate this list with previously visited SSL hosts you would need to have had ...
Sum1sAdmin's user avatar
  • 1,964
1 vote

Sonicwall TZ300 - Verifying and increasing Max Wireless Clients for non virtual AP

Was able to clarify with a Dell tech. Wireless > Advanced" = The overall allowed clients for the device. Wireless > Virtual Access Points. = shows the allowed amount of clients per SSID. However it ...
Damainman's user avatar
  • 1,055
1 vote

The peer is not responding to phase 1 ISAKMP requests

This error usually is caused by UDP packets being fragmented during the initial handshaking. SonicWall now has a workaround for it. Go to the Properties menu on the client, and turn on "Restrict the ...
AndyB's user avatar
  • 131
1 vote
Accepted

The peer is not responding to phase 1 ISAKMP requests

Its appears this issue has resolved itself over the last couple of days due to a Windows 10 update. I dont know exactly what update at this time but will post further information if it becomes ...
scott_lotus's user avatar
  • 1,089

Only top scored, non community-wiki answers of a minimum length are eligible