-
Products
-
SonicPlatform
SonicPlatform is the cybersecurity platform purpose-built for MSPs, making managing complex security environments among multiple tenants easy and streamlined.
Discover More
-
-
Solutions
-
Federal
Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn MoreFederalProtect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn More - Industries
- Use Cases
-
-
Partners
-
Partner Portal
Access to deal registration, MDF, sales and marketing tools, training and more
Learn MorePartner PortalAccess to deal registration, MDF, sales and marketing tools, training and more
Learn More - SonicWall Partners
- Partner Resources
-
-
Support
-
Support Portal
Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn MoreSupport PortalFind answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn More - Support
- Resources
- Capture Labs
-
- Company
- Contact Us
How to solve "Gateway Anti-Virus Inform: SMB out of order read/write" Event Log Information message
10/09/2023 
40 People found this article helpful
480,745 Views
Description
This article shows how to solve Event Logs error "Gateway Anti-Virus Inform: SMB out of order read/write".
Having many entries with this error message may cause slowness or failures when sharing files via SMB protocol.
NOTE: In order to be able to detect this message in Event logs, Logging Level needs to be set as "Inform".
Cause
Sometimes the SMB read requests for a file are not starting from the beginning of the file. In this case, the GAV blocks and kills the connection and the following Event Log message is registered:
"Gateway Anti-Virus Inform: SMB out of order read/write"
SMB may try several times to read not from the beginning of the file and GAV will block and kill the connection until, eventually, SMB reads the file from the beginning. Then, the copy succeeds.
Resolution
Resolution for SonicOS 7.X
This release includes significant user interface changes and many new features that are different from the SonicOS 6.5 and earlier firmware. The below resolution is for customers using SonicOS 7.X firmware.
By default, the firewall applies SMB read/write ordering enforcement. By following these steps, we will disable the enforcement:
- Navigate to Internal Settings page / Diag page. The Diag page can be reached by typing in the LAN IP of the SonicWall in the browser with IP/sonicui/7/m/mgmt/settings/diag at the end.
EXAMPLE: 192.168.168.168/sonicui/7/m/mgmt/settings/diag . How Can I access the Internal Settings of the firewall - Click Internal Settings and search for SMB
- The option that needs to be modified will be highlighted under Security Services Settings.
- Mark the option "Disable Gateway AV SMB read/write ordering enforcement".
- Click Accept to save the configuration change.
Resolution for SonicOS 6.5
This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.
By default, the firewall applies SMB read/write ordering enforcement. By following these steps, we will disable the enforcement:
- Go to https://your.firewall.ip/diag.html
- Click Internal Settings and search for SMB
- The option that needs to be modified will be highlighted under Security Services Settings.
- Mark the option "Disable Gateway AV SMB read/write ordering enforcement".
- Click Accept to save the configuration change.
Related Articles
- How to Block Google QUIC Protocol on SonicOSX 7.0?
- How to block certain Keywords on SonicOSX 7.0?
- How internal Interfaces can obtain Global IPv6 Addresses using DHCPv6 Prefix Delegation
Categories
- Firewalls > NSa Series > IPS/GAV/Spyware
- Firewalls > TZ Series > IPS/GAV/Spyware
- Firewalls > SonicWall NSA Series > IPS/GAV/Spyware
YES
NO