[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 285
  • Last Modified:

SonicWall Network Access entries in Logs

I recently upgraded our router to a SonicWall TZ215W

Our main network is on the 192.168.1.0/24 network and there are 8 site to site VPN tunnels enabled with one of them on the 192.168.3.0/24 network.

All of the tunnels are setup and seem to work great.

When I look at the logs, I am repeatedly getting the following entries:

01/04/2015 10:50:32.896      Notice      Network Access      TCP connection dropped      192.168.1.151, 56917, X0      192.168.3.106, 9100, X1      TCP Port: 9100

01/04/2015 10:50:12.736      Notice      Network Access      UDP packet dropped      192.168.1.113, 63325, X0      192.168.3.200, 161, X1      UDP SNMP

01/04/2015 10:37:52.672      Notice      Network Access      UDP packet dropped      192.168.1.151, 64802, X0      192.168.3.106, 161, X1      UDP SNMP
             
3      01/04/2015 10:37:36.496      Notice      Network Access      TCP connection dropped      192.168.1.117, 56738, X0      192.168.3.200, 9100, X1      TCP Port: 9100



The source IP's (192.168.1.151, 192.168.1.117, 192.168.1.113) are valid PCs on the main network, but the destination IPs are not on the remote network.

1.151 is always trying to access 3.106
1.117 is always trying to access 3.200
1.113 is always trying to access 3.200
0
pmitllc
Asked:
pmitllc
  • 2
1 Solution
 
pmitllcAuthor Commented:
I ran wireshark on the 1.151 system and see this entry for the above destination:

192.168.1.151      192.168.3.106      TCP      62      [TCP Spurious Retransmission] 57380→9100 [SYN] Seq=0 Win=8192 Len=0 MSS=1460 SACK_PERM=1
0
 
pmitllcAuthor Commented:
Apparently a lot of these systems still had old printers locally installed that were pointing to these destinations.  

Once they were removed, the notices went away.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now