Soniceall NSA 250M

Good day,

Hopping someone can assist, I have multiple Sonicwalls, but seem to be having issues browsing two websites, "www.iteminfo.com" and "www.sprichards.com". all I get is "page can not be displayed". If I bypass the Sonicwall on the same DSL lines I have no issues.  

I contacted sonicwall, but they tell me there is noting they can do to contact the company hosting the site.
LVL 1
rudym88Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Wayne88Commented:
Since the problem is specific to only two websites, I would use the Packet Capture" Diagnostic Tool" to determine what packets are being dropped.

https://support.software.dell.com/kb/sw6003

https://www.youtube.com/watch?v=wW-kh7WTcJE

Also, you can create a basic firewall rule for testing to see if the firewall rule is the problem.
0
Blue Street TechLast KnightCommented:
Hi Rudy,

It's not a firewall rule as Access Rules apply to ports therefore if 80 or 443 were being blocked there would be no browser traffic whatsoever, unless the computer had a proxy setup. Also, keep in mind if you are not filtering outbound traffic (LAN>WAN) Access Rules would have no baring with regards to accessing a website.

Aside from packet capture try this:

I'd disabled CFS (go to Network > Zones and uncheck CFS for WAN, LAN and any other zone that CFS is located in). Test it, if that works then you know its mostly likely a content provider or some other URI that these two site are using. If the issue still persists, move to the next paragraph.

Then disable APP Control and retest. if the issue still remains then proceed to to this for all security services one by one retesting between each one so that you can source the issue.

Look at your flood settings and DNS rebinding settings.

Let me know how it goes!
0
Wayne88Commented:
If the CFS is blocking the website he won't get a "page cannot be displayed".  Wouldn't he be getting this message instead?
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

Blue Street TechLast KnightCommented:
Hi Wayne,

Only if the sole URI is at fault or in categorical focus, but if its just white/blacklisted it becomes a different story. Because of web 2.0 there are a number of different URIs involved in sites now...if an axillary function of the site falls under one of the blocked URI it may show as Page Could Not Be Displayed or cause the site to look funny (if CSS is being delivered by it for example.)

Before web 2.0, you are exactly right. it was simple to manage because website structures were singular in their delivery - they didn't outsource content resources.

Make sense?
0
Blue Street TechLast KnightCommented:
Rudy,

I just tested these sites on an NSA 250 we have here and both worked OK.

Try updating your firmware to the latest release.
0
Wayne88Commented:
Hi diverseit,

Thanks for clarifying.

Wayne
0
Blue Street TechLast KnightCommented:
You're welcome!
0
rudym88Author Commented:
I have tried everything and nothing. BTW I should have mentioned, I have been having this issue even before we upgraded to the 250 from a 240 3 years ago. I stopped the search for a solution because the purchasing department stopped dealing with the company.
0
rudym88Author Commented:
Good day, for what I see it appears the Sonicwall is not receiving or acknowledgment the [SYN,ACK] from the remote site.
C--Users-RudMan01-Desktop-2015-07-21-085
0
Blue Street TechLast KnightCommented:
If you've had this issue for that long, I'm going to take a guess and say either you transferred the settings from the 240 to the 250 or the hosting provider of these sites is grossly mishandling traffic.

Have you upgraded your firmware to the latest release?

And if you went through everything I mentioned in comment http:#a40890581, then check your Flood Settings under Advanced Firewall.

This is a misconfiguration somewhere - this stuff just doesn't happen without explicit reason aside from a bug in which case upgrading your firmware would fix.
0
rudym88Author Commented:
Thanks for the reply,

- When we upgraded the unit I didn't transferred the setting I did a clean configuration (I don't like to transfer setting I like to start clean).

- I am running the latest SonicOS

- Under Flood Protection I don't have anything configured.

- At one point Sonicwall tech support connected to the unit and came to the conclusion the issue was with the website. but then if i browse using the DSL modem it works fine
0
rudym88Author Commented:
Good day,

It appears the issue is not with the Sonicwall but with the DSL lines. After spending all night fiddling with the issue, here are some new discovery. We have 4 DSL lines, and I am binding them using the Sonicwal.

Last night I connected a laptop and tested each line individually and found that if the DSL modems are configured with static IP  it will not work, but if configured using dynamic it works find. Now my next battle is dealing with BTL.

Thanks
Rudy
1

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Blue Street TechLast KnightCommented:
That info would have been helpful upfront :)

I'm glad you pinpointed it!

You can close this question by selecting helpful comments or selecting your own comment.

Thanks and again I'm glad you have it sorted out now.
0
rudym88Author Commented:
Trust me, we came to this conclusion my misstate.
0
Blue Street TechLast KnightCommented:
I believe you! I was just talking about the 4 DSL line binding. Anyhow, I'm glad you have this sorted out now!
0
rudym88Author Commented:
Thanks.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Hardware Firewalls

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.