asked on
SonicWall TZ 205 BWM settings for RD Gateway (SBS 2011)
We have a client using SBS 2011 with a separate Remote Desktop server on Server 2012 at the main office. Users from a branch office RDP through the SBS RD Gateway to use the Remote Desktop server. Every so often the branch office users complain about sluggish connectivity to the remote server. Can anyone recommend, in detail, the best settings on their main office TZ 205 firewall, in terms of bandwidth management, to optimize traffic for the RD Gateway while still leaving enough resources for normal web browsing, SMTP, and the branch office VPN?
Thanks!
Thanks!
NetworkingHardware FirewallsRemote Access
Last Comment
MISquared
ASKER CERTIFIED SOLUTION
Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a questionSOLUTION
Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a questionASKER
Ok, set it. I'll see how it goes for a day or so.
To answer your other question. There is GAV, Content Filtering, and IPS running on the SonicWall, but these problems have been going on since before those services were enabled. Ultimately, I think the issue is on the end of the branch office, but I wanted to eliminate possibilities.
To answer your other question. There is GAV, Content Filtering, and IPS running on the SonicWall, but these problems have been going on since before those services were enabled. Ultimately, I think the issue is on the end of the branch office, but I wanted to eliminate possibilities.
I ask because the tz205 with all the security running will likely have problems with more than a 10mbit connection
Your help has saved me hundreds of hours of internet surfing.
fblack61
ASKER
It's closer to 18. Do you know if it's possible to omit that traffic, by service or IP, from being scanned by those services? I'll poke around to see what I can find out.
so not only can gav, ids, and content filtering be enabled or disabled entirely, but they can be enabled per direction per interface. If you can find some off-business-hours time, run a speedtest with how it is now. Disable all security features and run a speedtest. Plug a laptop directly into the internet line, run a speedtest.
Here is a good doc on enabling some fairly tight security on a sonicwall
https://support.software.dell.com/kb/sw12434
Here is a good doc on enabling some fairly tight security on a sonicwall
https://support.software.dell.com/kb/sw12434
ASKER
I'll check it out. Thanks for all your help. I appreciate it.
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
So...
Under Firewall Settings > BWM, I can change the BWM type to WAN, Global, or None. Should I choose Global here?
Under Firewall > Access Rules, I have rules for HTTP, HTTPS, and an RWW specific rule for port 987. There is a tab called Ethernet BWM. When I set BWM type (above) to WAN, the settings I change in Ethernet BWM under Access Rules do not stick. So, I'm guessing I need to set that to Global. When I choose this, I get a daunting message about BWM settings being reset on all Access Rules. I don't figure this will be a problem though since I don't have any BWM settings for any of the Access Rules yet.
Any thoughts on that?
Thanks!