SonicWALL and Bonjour / Mac devices do not play well together...?

Client needs some advanced protection from home office for HIPAA and other compliancy, A Sonicwall TZ 105 is installed and working great other then it is causing havoc with the internal Apple devices. We have had our techs spend many hours on this little -what-should-be-very-easy project but unfortunately the Mac devices dont make it so easy.

What has been done:

Have allowed DMS through Sonicwall. Tested it with all security services turned off. Reloaded firmware to factory default. And more...

Looking on the Internet this seems to be a known issue but not many people have solved it.

Also there is a new Time Capsule in place which "has to have the wireless turned on" for it to be operational, another great Apple innovation.  

Apple devices do not always show in Airplay utility and the backups from the Macbook to the time machine are not working consistently or at all.

Any help is appreciated.
Jason KidmanIT Consultant & CEOAsked:
Who is Participating?
 
mikebernhardtCommented:
It could be. You could try using the Time Capsule for the wireless and see if it cleans up. That's pretty solid in my experience.
0
 
mikebernhardtCommented:
I don't believe Bonjour needs anything outside of the LAN you're trying to protect. Just block it on the firewall and don't log it. It only runs between LAN-connected devices for printer discovery, etc.

You shouldn't need the wireless on the Time Capsule as long as (duh) you have a wired connection to it. It doubles as a WiFi router but that's separate from the NAS functionality.

On the Airplay, you'd have to be more specific about the problems. But they may clear up if you turn off the WiFi on the time capsule, who knows.
0
 
Jason KidmanIT Consultant & CEOAuthor Commented:
We have tried all of that. Any other ideas?
0
Managing Security & Risk at the Speed of Business

Gartner Research VP, Neil McDonald & AlgoSec CTO, Prof. Avishai Wool, discuss the business-driven approach to automated security policy management, its benefits and how to align security policy management with business processes to address today's security challenges.

 
mikebernhardtCommented:
Are you saying you turned off the WiFi on the time capsule? Have you tried just disconnecting the Sonicwall from the network, or powering it off, to see if the local stuff clears up again? That would at least isolate whether the problem is truly the Sonicwall.
0
 
Jason KidmanIT Consultant & CEOAuthor Commented:
We tried turning off wifi, it was one of the first things we did.

We also disconnected the SonicWALL completely, and that DID make everything work. So the SonicWALL is the issue
0
 
mikebernhardtCommented:
Are the devices connected directly to the Sonicwall, or is there another switch in between? I'm wondering the Sonicwall is doing some kind of inbound inspection on each port which could be avoided if there was another switch in between to handle the LAN connectivity.
0
 
Jason KidmanIT Consultant & CEOAuthor Commented:
I will check and get back to you on that last comment
0
 
Jason KidmanIT Consultant & CEOAuthor Commented:
The sonicwall is being used as a switch.  One wan and all the rest are LAN ports.  The only thing plugged into the any of the lan ports is the Time Capsule.
0
 
mikebernhardtCommented:
Then there must be some other switch which connects the other devices to the Sonicwall?  So, what if the Time Capsule is connected to the same switch as the other devices, and the Sonicwall just provides the WAN connectivity?
Sonicwall--LAN Switch--Everything else
                               |
                          Time Capsule

Or is there no other switch and the sonicwall is providing WiFi for everything else?
0
 
Jason KidmanIT Consultant & CEOAuthor Commented:
Actually that is a good question. Everything in the home office is wireless, except the hardwired time capsule.

Does that make sense?
0
 
Jason KidmanIT Consultant & CEOAuthor Commented:
Do you think the SonicWALL builtin Wireless (which has a reputation of being poor anyway) is the culprit
0
 
Jason KidmanIT Consultant & CEOAuthor Commented:
Update: No update as of now, we will be sending a tech to this client to troubleshoot. Will post update.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.