Hi.

I'm having some issues with our new Asterisk based VOIP system. I found several suggestions to increase UDP timeout value.  I can't find a setting for that anywhere.

Is there an equvalent of this feature from Sonicwall, that I can set on my Endian firewall?

Here is an example from SonicWall docs (see attached)
sonicwall.com/support/knowledge-base/how-can-i-increase-the-udp-timeout-value/170505468738370/

Thank you!

Hola.
Tengo un firewall endian configurado unicamente como servidor VPN.
Tengo conectados 35 usuarios y consume cerca del 95% de la memoria.Actualmente tiene 8 GB.
No hay nada raro, ni filtro, ni proxy...¿que puede estar pasando?

I'm a bit lost with something I'm trying to do here...

For background, I have EFW 3.3.0, running on a multi-homed HP RP5700 Desktop, with the ubiquitous Green, Red, and Blue zones.

The Blue zone connects to a DLink DIR-890L router, which has three separate networks, routed back through it's 172.16.x.x/16 address to the EFW Box/Internet and Local LAN. My WiFi clients connect to the router using WPA2/PSK, with a complex password arrangement. I've "punched" some inter-zone holes from Blue to Green, to allow file/print access for WiFi-connected devices.

In essence, then, there is a blanket exemption from the 172.16.x.x/16 address on the routers ethernet link, through the EFW appliance to a number of fixed (192.168.1.x/24) addresses on the LAN. Naturally, only devices we've authenticated are able to get on to the WiFi network, and thus access internal resources.

Recently, my wife was given a (very nice) work laptop to use for work, and we'd prefer that this device is allowed to access the Internet only (i.e. not able to take advantage of the Blue to Green exemptions granted to our own devices).

Is this doable?

In an ideal world, I'd simply go into the exemption rule (Inter-zone traffic), and add exemptions based on individual MAC addresses. However, even if I did that (for example, "excluding" one of the WiFi SSIDs from the rule), it would not work, as they are all seen as the 172.16.x.x/16 address on the ethernet LAN (from the Firewall's perspective).

I'm probably missing something basic, but would appreciate any help people can offer...

Hola, tengo una conexión VPN con endian y estoy buscando la forma de obtener un historial de conexion / desconexion de usuarios.
necesito saber que usuarios habia conectados en un dia concreto.

He visto opciones de openvpn mediante script, pero necesitaria instalar mysql y no se como hacerlo

There is no way for this, someone can reply me?

Ciao,
sorry for my bad english...

I want to know how many users (pc, nas, printers, etc.) are using internet trought endian in a specific moment is that possible?

Thanks in advance

Salve a tutti
Avrei bisogno di 2 dritte
Ho l'ip del firewall  endian 192.168.1.1 e in molte abitazioni i router wifi hanno lo stesso ip e subnet pertanto se configuro il firewall per la vpn in bridge mi fa scegliere la stessa sottorete e fin qua ok. Il problema è che se mi collego con Open vpn mi rilascia un ip che è lo stesso del mio router a casa e non riesco a connettermi al remote descktop del pc in ufficio
La mia idea è di impostare la vpn del firewal endian con ip 192.168.2.0/24 ma riscontro lo stesso problema, ovvero che non raggiungo comunque la rete interna del mio pc che ha come ip ad esempio 192.168.1.57.
La mia domanda è: Come faccio ad instradare l'IP 192.168.2.0/24 della VPN verso la zona interna 192.168.1.XX?
Attendo riscontri
P.S.
Ho provato a nattare come suggerito da qualcuno qui tramite firewall-->SourceNAT ma con esito negativo io però ho scelto come destinazione solo <ANY UPLINK> vedi immagine..

It works!

thank you very much!!

For those who had difficulties like me in the forum just follow my screenshots in the first post + the advice of nattelip !!

Thank you very much

Good morning

Thanks for your answers

Today I see if I can do some tests

I will try the procedure
nattelip

Thanks

no it is not a bug, you just must not use the network wizard to change the ip address of the firewall , but the the tap services and then dhcp server, thanks for the answer