HTTP site not working
-
By default it shouldn't block anything outbound.
Check this link please https://support.software.dell.com/kb/sw9982
See if you have it denied on the outbound rule
-
@meghal said in HTTP site not working:
I have sonicwall TZ210 installed at my network. I am unable to open http site. Can anyone help me how to open http site with sonicwall Tz210?
Just one site that you are trying to open? So you can't browse to any HTTP websites? I am unclear as to what issue you are having. By default HTTP sites will work.
-
@scottalanmiller I think there trying to access the web interface to manage the device.
-
@aaronstuder said in HTTP site not working:
@scottalanmiller I think there trying to access the web interface to manage the device.
I have never liked SonicWALL devices. They're a PITA IMO. But I suppose if you spend the time with them, and don't mind a bit of frustration - they have their place.
-
@gjacobse said in HTTP site not working:
@aaronstuder said in HTTP site not working:
@scottalanmiller I think there trying to access the web interface to manage the device.
I have never liked SonicWALL devices. They're a PITA IMO. But I suppose if you spend the time with them, and don't mind a bit of frustration - they have their place.
Like for anyone addicted to pain?
I just don't get it. Used ipchains/iptables/pf in the past and pfSense since, erm, 10 years? No more PITA...
-
@aaronstuder said in HTTP site not working:
@scottalanmiller I think there trying to access the web interface to manage the device.
Oh, I didn't get that from the OP at all. Why would you want an insecure management interface?
-
@scottalanmiller said in HTTP site not working:
@aaronstuder said in HTTP site not working:
@scottalanmiller I think there trying to access the web interface to manage the device.
Oh, I didn't get that from the OP at all. Why would you want an insecure management interface?
Assuming it's internally accessible only. Who cares.
Also very few routers and switches let you easily add valid certificate. So even with HTTPS it is still not secure
-
@JaredBusch said in HTTP site not working:
@scottalanmiller said in HTTP site not working:
@aaronstuder said in HTTP site not working:
@scottalanmiller I think there trying to access the web interface to manage the device.
Oh, I didn't get that from the OP at all. Why would you want an insecure management interface?
Assuming it's internally accessible only. Who cares.
Also very few routers and switches let you easily add valid certificate. So even with HTTPS it is still not secure
There are quite a few differences in the level of security. In the worst case, he won't transmit plaintext credentials in case of some self signed certificate. In the best case, Op can be next to sure that he isn't affected by man in the middle or something similar by having a certificate with a valid chain of trust. Having management interfaces on the same (V)LAN as clients, printers and what not is another story.
Long story short: Better self signed certs than no encryption at all.
-
@JaredBusch said in HTTP site not working:
Also very few routers and switches let you easily add valid certificate. So even with HTTPS it is still not secure
True, but still adds more security than not. It's not just identification but also securing the channel.
-
@scottalanmiller
I can open http site. but this particular site http://smartnet4.bharti.com is not opening from my sonicwall. I am able to open it from another network,. -
@meghal You see what may happen if you are not giving enough details.
There could be lots of reasons. Maybe that site is blocked or only allowed from specific IP subnets, just for example.
-
@meghal said in HTTP site not working:
@scottalanmiller
I can open http site. but this particular site http://smartnet4.bharti.com is not opening from my sonicwall. I am able to open it from another network,.Ah okay, so my original assumption was correct. I'm going to make another assumption that it is only this one site that is not working? If so, that suggests just a general problem with the SonicWall, for which they are famous. Likely the SW is mangling the site.
-
@scottalanmiller
So do i need to consult with MY service provider? The funny thing is that i have airtel connection and the site which is not working is also from Airtel. -
Work methodically. Can you ping it? Can you traceroute it? Does a device (phone or laptop) reach it on one network but not this one? Is DNS working? What DNS is being hit?
-
@scottalanmiller
No i can not ping and tracerout the site. I think this is DNS proplem . I am sharing screenshot.
-
@meghal said in HTTP site not working:
@scottalanmiller
No i can not ping and tracerout the site. I think this is DNS proplem . I am sharing screenshot.
That doesn't have to be a DNS problem. Querying a DNS server for an IP is called a reverse DNS lookup. Could just be a missing PTR record in this case.
https://en.wikipedia.org/wiki/Reverse_DNS_lookup
BTW, I can't ping that site too:
Like SAM said, try to track that down. Is the site accessible from some other location?
-
If you cannot ping it, likely you have another issue. Ping it from somewhere else and see if ICMP is working. It is most likely that there is a routing or firewall issue here.
