SonicWALL SSL VPN Question

Discussion in 'Networking & Security' started by PiERiT, Jun 12, 2019 at 12:55 PM.

  1. PiERiT

    PiERiT 2[H]4U

    Messages:
    2,397
    Joined:
    Oct 8, 2010
    Working on a SonicWALL firewall with a relatively recent firmware (don't know the exact model or firmware but can get that later) and the SSL VPN is turned on and utilizing port 4433. Problem is that port 4433 is listening on both of the WAN lines and we only want it listening on one. I can't find a setting for this and the NAT rules and firewall rules that the SSL VPN creates cannot be edited, nor can any user-created rules take precedence over them. Any ideas?

    Edit: Never mind, I am dumb. User-created rules can in fact take precedence over automatic ones, so I just made a new block rule and put it above the allow rule.
     
    Last edited: Jun 12, 2019 at 5:26 PM
  2. boss6021

    boss6021 Limp Gawd

    Messages:
    337
    Joined:
    Oct 11, 2006
    You can also edit the auto-created rules if you so desire.
     
  3. PiERiT

    PiERiT 2[H]4U

    Messages:
    2,397
    Joined:
    Oct 8, 2010
    Some parts of the rule, not all of them. In this rule for instance it was From: Any To: WAN Interfaces, and I couldn't change that.
     
  4. boss6021

    boss6021 Limp Gawd

    Messages:
    337
    Joined:
    Oct 11, 2006
    I see, glad to hear you were able to resolve it.
     
  5. EniGmA1987

    EniGmA1987 Limp Gawd

    Messages:
    190
    Joined:
    May 2, 2017
    Are you not able to select a specific interface instead of just "any WAN"? Or select it by physical port instead of by interface? It has been a long time since I used SonicWall and the SSL VPN, but I thought I remember being able to select X0, X1, etc. So if WAN1 was X0, and WAN2 was X1, then select X1 only.
     
  6. Cmustang87

    Cmustang87 [H]ardness Supreme

    Messages:
    4,394
    Joined:
    Oct 4, 2007
    The default rules which can't be changed, IIRC, have the "Any WAN" interface and the option is greyed out to where you can't edit or remove it.