Link to home
Start Free TrialLog in
Avatar of adviceplease
advicepleaseFlag for United Kingdom of Great Britain and Northern Ireland

asked on

Sonicwall content filter, users keep getting default policy

Hi
 We are using a Dell Sonicwall NSA 4600 on Firmware  SonicOS Enhanced 6.2.6.0-20n, we use the content filtering module on it to restrict users website access , using SSO and LDAP to AD.
 Through out the day users will randomly lose their internet policy and get the default policy blocking majority of websites. I have found by locking and unlocking the PC it restablishes the policy and they can continue in the majority of scenarios to browse the internet again.

 I have disabled AV (SEP) and it still happens, all users are on Windows 7.

Any help would be appreciated!

Thanks
Avatar of masnrock
masnrock
Flag of United States of America image

Have you checked the power management settings on the network cards?

Another way you could try doing the policies is by MAC address and IP. However, this also assumes that users are not sharing machines...
Avatar of adviceplease

ASKER

No its not power management settings as the users are using other applications at the time

MAC address /IP is not an option due to the size of the estate

thanks
Do multiple users share machines? SSO doesn't work well with switching users. You'd have to make sure each user signs off, and the new user signs in.

You may also want to look at excluding service accounts, as even Sonicwall has admitted it's caused issues for them:
https://support.software.dell.com/kb/sw5589
the users effected aren't using multiple machines. all have HP laptops

is random but happens to a lot of people throughout the day,everyday

if these users lock their machines and unlock using their domain credentials again , it works

very frustrating!
Just noticed your last post. However, I'd suggest that you check to see if there is a communication issue between SSO agent and the server. That seems to be the most likely cause.

However, at this rate, if you still have the support, I'd contact the support engineers at Sonicwall.
ASKER CERTIFIED SOLUTION
Avatar of adviceplease
adviceplease
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
found out for myself........