Modern Connect tunnel fails to connect to Appliance with Self-Signed Certificate post 12.4.0-02559.

Description

Modern Connect tunnel fails to connect to Appliance with Self-Signed Certificate  post 12.4.0-02559.  Is this expected?

Cause


Resolution

  • SonicWall had to follow security guidelines provided by CSfC  for securing communication between client and Appliance.
  • Keeping the above guidelines 12.4.0 hotfix-02559 has hardened which would not allow connections if the appliance do not have trusted Certificate. 

Note:

  • MCT Connections have no impact  with appliances using valid certificates from a trusted CA.
  • This change impacts  who use self-signed certificates.

Workaround

  • This is recommended only for internal or feature test or Lab or QA testing devices. Not recommended for production implementation this would pose security risk.
  • Add Self-Signed Certificate to trusted sites under Internet Options-Security-Trusted Sites add the url.
  • Or 
  • To allow such users for internal testing, below registry key can be used to override the default behavior.

 

[HKEY_CURRENT_USER\Software\SonicWall\SonicWall Secure Mobile Access]
"AllowUnsafeTLS"=dword:00000001

 

Note: This restriction is not implemented for Legacy version of Connect Tunnel.

Related Articles

  • How to Provision SMA1000 in Monthly Billing (MSSP Program)
    Read More
  • SMA 1000 Series Support Matrix
    Read More
  • How to Configure SAML 2.0 SSO with Microsoft Entra ID for SonicWall SMA 1000 Series
    Read More
not finding your answers?