Recommended Sonicwall Global VPN Client

As of 2/3/2014

For Windows 7: 4.6.4.0114

For Windows 8: 4.7.3.0403

They can be downloaded here
https://www.mysonicwall.com/firmware/previousversions.aspx?CF=14&SG=5317&PG=FD&LC=EN

How to monitor Sonicwall for FTP traffic

On Sonicwall, navigate to System->Packet Monitor
Click Clear
Click Configure
On the Monitor Filter tab
    Ether Types: IP
    IP Types: UDP, TCP, ICMP
    Destination IP Address: (public IP of FTP server)
    Check "Enable Bidirectional Address and Port Matching
On Advanced Filter tab
    Check all boxes
Click OK

Click Start Capture
Click Stop Catpure when done captureing

Configuring Two Sonicwalls To Use Layer 2 Connection with Failover

This is a summery of how you can connect a layer 2 (point to point/direct connection) between two Sonicwalls using SonicOS Enhanced 5.8.  This is also a summery of how you can use the second Sonicwall’s WAN as a failover connection for the first Sonicwall.

On the first Sonicwall, plug layer 2 connection into an interface.  For this example we will use X5.

Network->Interfaces
   
    Zone: WAN
    IP Assignment: Static
    IP Address: 10.10.10.1
    Subnetmask: 255.255.255.0
    Default Gateway: 10.10.10.2
    DNS Server 1: 208.67.222.222
    DNS Server 2: 8.8.8.8
    DNS Server 3: 208.67.222.220

On the second Sonicwall, plug layer 2 connection into an interface.  For this example we will use X5.

Network->Interfaces

    Zone: LAN
    Mode/P Assignment: Static IP Mode
    IP Assignment: 10.10.10.2
    Subnetmask: 255.255.255.0

For failover and the ability to use the second Sonicwall's WAN for the first Sonicwall's WAN...
On the first Sonicwall

Network->Failover & LB

    Check Enable Load Balancing
    Check Respond to Probes

    In the Groups section Click Configure for Default LB
        Type: Basic Failover
    Check Preemp failback to preferred interfaces when possible
    Highlight X5 interface and click Add
    Order desired interface and click OK

    Click Configure for X5
        Select Logical/Probe Monitoring enabled
        Select Probe succeeds when either Main Target or Alternate Target responds
        Main Target: Ping (ICMP) Host: 4.2.2.1
        Alternate Target: Ping (ICMP) Host: 8.8.8.8
        Default Target IP: 208.67.222.222
        Click OK
    Click Accept

How to configure Verizon UML295 with Cradlepoint 1400 as an auto failover WAN connection using a Sonicwall

Request Public IP from Verizon if necessary. As of this writing, it is a one time charge of $500.  Call Verizon customer service at 800-922-0204.

Plug Verizon USB device into Cradelpoint USB port 1.

Cradlepoint Settings:
Note: With Sonicwall, do not do IP passthrough.
    Navigate to System Settings->System Software
        In Firmware Upgrade click Check Again button. Apply any firmware update.
    Navigate to Internet->Connection Manager
        In WAN Interfaces section find USB device and verify Enabled is checked
        Verify State is connected
        Click Modem name
        Click Edit
    Navigate to Network Settings->WiFi / Local Networks
        Edit Primary LAN
            IP Settings tab
                Verify Enabled is checked
                Router Mode = NAT (default)
            DHCP tab
                DHCP Server = checked
            Click Submit

Sonicwall Settings:
Make sure to have latest Sonicwall firmware.  As of this writing, it is SonicOS Enhanced 5.8.1.12-65o.
    Navigate to Network->Interfaces
    Select desired interface.  For me it is X3
    Click Configure
        Zone = WAN
        IP Assignment = DHCP
        Host Name = CradlePoint
        Comment = CradlePoint Failover
        Click OK
    Navigate to Network->Failover & LB
        Check box for Enable Load Balancing
        Check box for Respond to Probes
        Configure Defalut LB Group
            On General tab, Add X3 to Selected Interface Ordering
            On Probing tab, uncheck Probe responder.global.sonicwall.com
            Click OK
        Configure X1
            Select Logical/Probe Monitoring enabled
            Choose Probe succeeds when both Main Target and Alternate Target respond
                Main Target = Ping, responder.global.sonicwall.com
                Alternate Target = Ping, 8.8.8.8
            Click OK
        Configure X3
            Select Logical/Probe Monitoring enabled
            Choose Probe succeeds when both Main Target and Alternate Target respond
                Main Target = Ping, responder.global.sonicwall.com
                Alternate Target = Ping, 8.8.8.8
            Click OK

To test from Sonicwall:
    Navigate to System->Diagnostics
        Dignostic Tools = Ping
        IP Address = 8.8.8.8
        Interface X3
        Verify Alive
       
        Dignostic Tools = TraceRoute
        IP Address = 8.8.8.8
        Interface X3
        Verify hops, route, and trace complete
       
To test from a computer
Create a new route with the test computers IP address.
    Navigate to Network->Routing and click Add button at bottom of screen
        Source = Create new address object. Give same name as test computer name.
        Destination = Any
        Service = Any
        Gateway = X3 Default Gateway
        Interface = X3
    Click OK
From test computer ping 8.8.8.8 and tracert 8.8.8.8. Verify reply and reachable.
Go to http://ipchicken.com/ and verify public IP

Source

http://www.sonicwall.com/app/projects/file_downloader/document_lib.php?t=TN&id=341

http://www.sonicwall.com/app/projects/file_downloader/document_lib.php?t=TN&id=334

http://www.cradlepoint.com/firmware/MBR1400

http://www.cradlepoint.com/products/branch-office-retail-pos/mbr1400-mission-critical-broadband-router

How To Clear Connections On A Sonicwall Without Restarting

 

Log onto your sonicwall.  Once logged on, change the URL from http://x.x.x.x/main.html to http://x.x.x.x/diag.html

Click Internal Settings button.

Scroll to bottom and click Flush Connections button.

This happened to me after a client's Sonicwall reached the maximum number of connections.  On the System->Status page the Current Connections was 65536.  The maximum connections that this Sonicwall with this firmware can have when using GAV/IPS is 65536.

You can find out maximum connection information by navigating to System->Diagnostics.  In the Tech Support Report section check all four boxes and click Download Report.  Save the report to desktop.  Open report and search for “Max Connections when using GAV/IPS”.  Compare that number with the number Status page.

When the maximum connections have been made, the logs should have an entry stating:

The cache is full; 65536 open connection; some will be dropped.

The above was listed for me on the Status page in the Latest Alerts section.

Office 2007 opens slowly fixes

Some people have observed Office 2007 products taking longer than normal to open. Specifically Excel, PowerPoint and Word. The other issue is that attachments in Outlook 2007 can take a long time to open. Below are several things you can do to improve opening times.

Add-ins can make Office 2007 open very slowly.

Adobe Acrobat PDFMaker - The first thing to check for is Adobe Acrobat add-in PDFMaker. You can do a search on the c drive for “pdfmaker.dot, pdfmaker.xla, pdfmaker.ppa”. Search instructions based on what version of Windows you are running:

Windows XP, Windows Server 2003, and Microsoft Windows 2000:
1. Click Start, and then click Search.
2. Click All files and folders.
3. In the All or part of the file name box type: pdfmaker.dot, pdfmaker.xla, pdfmaker.ppa
4. Press ENTER.
5. Right-click the file, and then click Delete.

Windows Vista
1. Click Start , type pdfmaker.dot (for Microsoft Office Word), pdfmaker.xla (for Microsoft Office Excel), or pdfmaker.ppa (for
Microsoft Office PowerPoint), and then press ENTER.
2. Right-click the file, and then click Delete.

Outlook 2007 Add-Ins - Uninstall any unnecessary 3rd party ad-ins.

1. Open Outlook and go to Tools->Trust Center
2. Navigate to Add-Ins in the left column
3. Select COM Add-ins in the Manage drop down and click Go
4. Uncheck any unnecessary add-in like Norton or Symantec product and Click OK

Modify the Way Windows Opens and Shares Data

1. Launch Windows Explorer (explorer.exe) by double clicking My Computer.
2. Navigate to Tools->Folder options.
3. Click File Types tab
4. Select list item XLS (Microsoft Office Excel 97-2003 Worksheet) and click on Advanced. (hint, you can quickly type xls))
5. Select Open and click Edit
6. In the “Application used to perform action” box, scroll to the end. Add a space and then “%1” . Make sure to include the double quotes.
Example for Excel would be "C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e "%1"
7. Uncheck Use DDE.
8. Click OK
9. Repeat steps for Read Only and then repeat steps 4 – 8 for the following file types:
xlsx
doc
docx
ppt
pptx

Or put the following in a text file and save as .bat. Double click the .bat file for it to automatically populate the registry for you.
# doc
[HKEY_CLASSES_ROOT\Word.Document.8\shell\Open\command]
@="\"C:\\Program Files\\Microsoft Office\\Office12\\WINWORD.EXE\" \"%1\""
# docx
[HKEY_CLASSES_ROOT\Word.Document.12\shell\Open\command]
@="\"C:\\Program Files\\Microsoft Office\\Office12\\WINWORD.EXE\" \"%1\""
#xls
[HKEY_CLASSES_ROOT\Excel.Sheet.8\shell\Open\command]
@="\"C:\\Program Files\\Microsoft Office\\Office12\\EXCEL.EXE\" /e \"%1\""
# xlsx
[HKEY_CLASSES_ROOT\Excel.Sheet.12\shell\Open\command]
@="\"C:\\Program Files\\Microsoft Office\\Office12\\EXCEL.EXE\" /e \"%1\""
#ppt
[HKEY_CLASSES_ROOT\PowerPoint.Addin.8\shell\Open\command]
@="\"C:\\Program Files\\Microsoft Office\\Office12\\POWERPNT.EXE\" \"%1\""
#pptx
[HKEY_CLASSES_ROOT\PowerPoint.Addin.12\shell\Open\command]
@="\"C:\\Program Files\\Microsoft Office\\Office12\\POWERPNT.EXE\" \"%1\""

The next time you open Office 2007 it should be faster. If not, unregister the products and reregister them. To do this Navigate to Start->Run and type each line in separately. Note that each time done it will open the product.
Excel /unregserver
Winword /unregserver
POWERPNT /unregserver
Excel /regserver
Winword /regserver
POWERPNT /regserver

Last but least, install Microsoft add-in, Lookup Wizard, to Excel 2007.

More can be read at
http://support.microsoft.com/kb/302596
http://kb.adobe.com/selfservice/viewContent.do?externalId=328399&sliceId=2
http://www.m3rlin.org/wordpress/slow-opening-excel-2003-files-in-excel-2007/
http://help.lockergnome.com/office/Excel-extremely-slow-opening-ftopict950153.html

http://excel2007-slow-open-file.blogspot.com/

WSUS not syncing correctly in SonicWall environment

I have a client whose Windows Server Update Services (WSUS) was not syncing correctly and therefor computers were not getting updated. The event viewer logs on the server had the following entry:

Event Type: Error
Event Source: Windows Server Update Services
Event Category: Synchronization
Event ID: 364
Description:Content file download failed.
Reason: The server does not support the necessary HTTP protocol. Background Intelligent Transfer Service (BITS) requires that the server support the Range protocol header. Source File: /msdownload/update/v3-19990518/cabpool/photolibrary_0da3b50e5b2cdad0a44d21f10d825d8be8d5be3b.cab Destination File: F:\WSUS\WsusContent\3B\0DA3B50E5B2CDAD0A44D21F10D825D8BE8D5BE3B.cab.

Microsoft KB 922330 resolution method 2 was to "Enable HTTP Byte-Range request with Gateway AV" on the SonicWall firewall.

To get to the Sonicwall setting log onto your firewall. After you have logged on, change the URL from /main.html to /diag.html. Click Internal Settings button. Check "Enable HTTP Byte-Range requests with Gateway AV". Click Apply button. Click Close button. Restart is not required.

Test WSUS by manually syncing. Sync should begin.

Thanks to this site for the info http://parkesy.wordpress.com/category/sonicwall/