#DELL SONICWALL BLACKLIST MAC ADDRESS UPDATE#
#DELL SONICWALL BLACKLIST MAC ADDRESS SERIES#

Fragment VPN packets after applying ESP.

Do not adjust the TCP MSS option for VPN traffic.

Flush unused media for SIP INVITEs without SDP.

Flush active media for SIP INVITEs without SDP.

SIP connection refresh interval (seconds): 40.

Permit B2BUA to bind established calls together.

Transform SIP URIs to have an explicit port.

Aggressively recycle expired DHCP leases in advance.

Number of DHCP leases in the database to be refreshed: 10.

Time interval of DHCP lease database to be refreshed: 600 Seconds.

Send DHCPNAK if the 'requested IP address' is on the wrong network.

Timeout for an available resource to be rechecked: 600 Seconds.

Timeout for a conflicted resource to be rechecked: 1800 Seconds.

Number of DHCP resources to discover: 10.

DHCP Server Conflict Detect Period: 300 Seconds.

Enable DHCP Server Network Pre-Discovery.

Enable stack traffic sending by DP core.

Never add static default routes to the NSM route database.

Disable learning-bridge filtering on L2 bridge interfaces.

Allow the first fragment of size lesser than 68 bytes.

Perform SYN validation when not operating in strict TCP compliance mode.

Enable TCP sequence number randomization.

#DELL SONICWALL BLACKLIST MAC ADDRESS UPDATE#

Update route version when a route is enabled/disabled (affects existing connections).

Flush flows on an alternate path when normal route path is enabled (affects existing connections).

Ignore ARPs with primary gateways MAC received on other interfaces.

Periodically broadcast system ARPs every 60 minutes.

Never broadcast more than 100 Gratuitous ARPs in any 60 second period.

Enable Gratuitous ARP Compatibility Mode.

Bypass ARP processing on L2 bridge interfaces.

Only allow ARP entries with unicast addresses.

Enable Source IP Address validation for being directly connected.

Enable open ARP behavior (WARNING: Insecure!!).

Keep in mind these options are undocumented, unsupported, and it is suggested to only make changes to these values if instructed by Dell Technical Support. Below is a rough list of some of the options. For me, the option I needed was “Disable Port Scan Detection” under the Firewall section. Under Internal Settings, there are quite a few settings and options.

On the main page, you will see the following disclaimer.

#DELL SONICWALL BLACKLIST MAC ADDRESS SERIES#

It appears to be available in all of the TZ series devices, the SOHO, and likely others. Earlier I stumbled across a hidden set of features and settings in a TZ215 by going to /diag.html and figured I'd share this with everyone in case you were unaware of it as I was.

Dell sonicwall blacklist mac address