Solved

Sonicwall Port Forwarding Issue

Posted on 2013-10-29
1
748 Views
Last Modified: 2014-01-15
We have a network with a Sonicwall TZ 215 firewall on it.

We have Two Networks

Internal Workstations Range 192.168.0.XX

Internal Camera Network 192.168.43.XXX

The Internal workstations are on the firewall (X0) Lan Port
The Internet Connection is on the firewall (X1) WAN Port
The Camera Network is on the Firewall (x2) Lan Port

We have 50 cameras on the 43 network, each listening on its own port (8100 - 8150) TCP/UDP

The vendor asked for port forwarding rules to be installed on the firewall to port a specific port to a specific camera (ex. Port 8100 would forward to IP 192.168.43.100, Port 8101 would forward to IP 192.168.43.101 etc.

We created service groups (TCP/UDP) for ports 8100-8150
We created Address objects for each camera on the network
We created the NAT Policy for each camera

When we tested to see if each port is open, only ports 8100-8103 are open all the rest are showing closed.  We checked and rechecked each address and service and they all are correct.  We checked to see if the closed ports are being used by any other service and they are not.

Any suggestions would be helpful

Thanks
0
Comment
Question by:mcgowray
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 10

Accepted Solution

by:
convergint earned 500 total points
ID: 39610814
Did you create all these groups and objects manually?  I have found that with the Sonicwalls that using the built-in wizard is way better at getting the ports properly forwarded.  The wizard creates all the NAT addressing, objects and firewall rules automatically.

You can do it all manually but you should use the wizard once to create a new dummy port forward.  Then look at all the NAT (there are usually 3) and firewall rules that it creates to give yourself an idea of what was missed.  I can almost guarantee that either a NAT or firewall rule was missed in your configuration.
0

Featured Post

Are You Ransomware's Next Victim?

Worried about ransomware attacks hitting your organization?  The good news is that these attacks are predicable and therefore preventable. Learn more about how you can  stop a ransomware attacks before encryption takes place with WatchGuard Total Security!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
VOIP gateways - feedback 23 125
pfsense upgrade from 2.2.6 to 2.3.3 28 90
FTP through ASA 9.5 1 39
How to flash samsung galaxy s6 edge+(verizon) with t-mobile 4 42
Do you have a computer or other electronic gear that is attached to a rat nest of cables, or alternatively have your cables all bundled nice at neat?  If so then read this post to sidstep common pitfalls. When I was a student at DeVry University,…
Before I go to far, let's explain HA (High Availability) and why you should consider it.  High availability is the mechanism used to provide redundancy to any service at the same site and appears as a single service to the users of that service.  As…
How to Install VMware Tools in Red Hat Enterprise Linux 6.4 (RHEL 6.4) Step-by-Step Tutorial
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question