Soniwall Firewall and RWW

[Charles]

Hi,

I am new to SBS 2003 so apologies for my very basic problem here.

I just plugged-in a brand new SonicWall TZ 180 to our SBS 2003 standard SP1.
Before I did that, everything worked just fine with remote access, including
RWW.

I have (or I hope I have) opened ports 4125 and 443 on the Sonicwal (both
incoming and outgoing).

Problem: when we attempt to access RWW typing our static public IP (just as
we usually do), instead of getting the usual SBS 2003's RWW start page, we
now get the admin log-in page of the Sonicwall! -- which in a way makes sense
since the Sonicwall now stands between internet and the server.

I am quite sure I am missing something very obvious but what? How to bridge
the RWW to the internet without bumping into the Sonicwall?

Other than than, we are having internet connectivity alright (which is how I
can post this). Interestingly, I am also able to wirelessly synchronize my
WM5 device without problem -- in other words I can get to the server with
WM5 but not through RWW.
Thank you all for you help

[Merv Porter [SBS-MVP]]

Hi Charles,

A guess... check out the remote management settings in the Sonicwall. They
may be set up to allow remote management of the router from the internet by
using your WAN IP address. If so, you may be able to turn that feature off
or change the port assocaited with it (both for HTTP and HTTPS access).

OWA thru sonicwall firewall
http://groups.google.com/group/microsoft.public.windows.server.sbs/browse_thread/thread/adb66f53ac87d0be/305e9c699cb882ab?hl=en&lnk=st&q=sonicwall+remotely+manage#305e9c699cb882ab

--
Merv Porter [SBS-MVP]
============================

"Charles" <Cha...@discussions.microsoft.com> wrote in message
news:C54ED239-94D1-45F2...@microsoft.com...

[Merv Porter [SBS-MVP]]

I'm thinking...

Sonicwall OS Main web page
http://sonicos-enhanced.demo.sonicwall.com/main.html

Network...Interfaces
http://sonicos-enhanced.demo.sonicwall.com/netInterfaces.html

X1 Interface... Configure
http://sonicos-enhanced.demo.sonicwall.com/editInterface_1.html

Uncheck HTTP and HTTPS for the WAN interface.

--
Merv Porter [SBS-MVP]
============================

"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message
news:uEgJsfyP...@TK2MSFTNGP05.phx.gbl...

[Charles]

Thanks a lot Merv
yes I think you are pointing in the right direction -- so this is not so
trivial after all.

Problem is that the TZ 180 does not come with the same menus. There is no
Interface sub-menu under Network. I am trying to locate the equivalent
settings, not sure so far.

Also, while doing this I found a "Routing" submenu under Network. Couldn't I
use that to map the public IP to the server, thus going through the Sonicwall?

[Merv Porter [SBS-MVP]]

OK. How about these...

SonicOS Standard
http://sonicos-standard.demo.sonicwall.com/main.html

Firewall... Access Policies
http://sonicos-standard.demo.sonicwall.com/main.html

Uncheck ENABLE for both HTTP Management and HTTPS Management. (However, not
sure if unchecking Enable for HTTP Management will prevent access from the
LAN to the Sonicwall web interface. You may want to change the * to "LAN"
under Source).

--
Merv Porter [SBS-MVP]
============================

"Charles" <Cha...@discussions.microsoft.com> wrote in message

news:BD691B4D-45C1-4E8D...@microsoft.com...

[Merv Porter [SBS-MVP]]

Or maybe on this page:

System... Administration
http://sonicos-standard.demo.sonicwall.com/systemAdministrationView.html

Uncheck Http and/or Https in Web Management Settings section. Also, you
could change the ports to some like port 8090 (for HTTP) and 4343 (for
HTTPS). You *may* then have to access the Sonicwall web interface (from
inside your LAN) using: http://192.168.168.168:8090 and
https://192.168.168.168:4343 (Not sure about this because I donlt know if
the "Web Management Settings" only apply to WAN or whether that apply to WAN
and LAN access).

--
Merv Porter [SBS-MVP]
============================

"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message

news:u0rMF1zP...@TK2MSFTNGP02.phx.gbl...

[Charles]

Yes that's right ! it works now.

What I did is to change (under Administration/Web Management Settings) the
port numbers to non-standard values for both HTPP (->76) and HTTPS (->700).
By the way you are right this means that I need to type IP-ADDRESS:76 to
access the firewall admin console now.

But above all, I tried RWW from OUTSIDE THE LAN, not from clients on it as I
did before. It works ! What remains a mystery to me is that is still does
not work on the LAN (it did before the firewall) but then we don't need RWW
locally, so we're happy?
Thanks again for your help Merv
PS: the next problem is that Trendmicro SMB cannot connect anymore... -- but
this deserves another thread I think