asked on

Sonicwall 3060 Firewall Access Rule

Hi,

I have the standard sonic OS on my SonicWall 3060 and need to write a rule that says to allow all traffic from an external ip range to an internal destination ip range. I don't want to reference any services but just ip addresses.

Thanks

ASKER CERTIFIED SOLUTION

BigPapaGotti

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

wpmcj

ASKER

Unfortunately, Address Objects is not available in the standard version of SonicOS. I could update but looks like I'd have to start from scratch with the Enhanced version.

BigPapaGotti

I see. What happens when you go to the next part of the Firewall Access Rule does it allow you to specify the access rule or is it useless without the Address Objects?

How much configuration would be involved with moving to the enhanced version. Although it is not supported you should be able to upload the Enhanced OS boot off of it and then import the configuration from your Standard OS. You may run into issues or you may be lucky and not having any. You can always revert back to the Standard OS if necessary. I'm not sure what your maintenance window looks like

wpmcj

ASKER

Basically, I have to specify a service or use "any" but tried and didn't work for my purpose. Others maintain it would work if I had a rule based in IPs and not services.

Looking for more info on the upgrade to Enhanced but I think you're correct in that it may or not import the old settings. Our maintenance time would probably be a weekend.

BigPapaGotti

I think it would be worth your while about going from a Standard to Enhanced firmware and then trying to import the same configuration. I've completed once successfully in the past without any issues.

Let me know how it goes should you attempt this on the weekend or after hours one night

Qlemo

I've requested that this question be closed as follows:

Accepted answer: 350 points for BigPapaGotti's comment #a39168831
Assisted answer: 0 points for wpmcj's comment #a39169071

for the following reason:

This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.