-
Products
-
SonicPlatform
SonicPlatform is the cybersecurity platform purpose-built for MSPs, making managing complex security environments among multiple tenants easy and streamlined.
Discover More
-
-
Solutions
-
Federal
Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn MoreFederalProtect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn More - Industries
- Use Cases
-
-
Partners
-
Partner Portal
Access to deal registration, MDF, sales and marketing tools, training and more
Learn MorePartner PortalAccess to deal registration, MDF, sales and marketing tools, training and more
Learn More - SonicWall Partners
- Partner Resources
-
-
Support
-
Support Portal
Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn MoreSupport PortalFind answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn More - Support
- Resources
- Capture Labs
-
- Company
- Contact Us
SMA100:After upgrading to 10.2.1.7, began receiving nonstop alert emails stating "WAF threat prevented:
03/20/2023 
102 People found this article helpful
274,977 Views
Description
After upgrading to 10.2.1.7, began receiving nonstop alert emails stating "WAF threat prevented:
Cause
After upgrading to 10.2.1.7, began receiving nonstop alert emails stating "WAF threat prevented:
Log Snippets
Mar 11 23:26:55 xrXXX SSLXXX: id=sslvpn sn=xxxxxxxxxxx0 time="2023-03-11 23:26:55" vp_time="2023-03-12 05:26:55 UTC" fw=10.2.0.2 pri=2 m=34 c=402 src=xx.xxx.8.20 dst="xx.xx.xx8.104" user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack"
Resolution
WAF Protection is enabled by default to protect only the SMA OS and requires no license.
However, if you want to protect the offloaded web applications, you will need a WAF license.
Follow the steps to adjust the log level of Alert.
Related Articles
- How to Set Timeout for Inactive Tunnel Connections
- Commands for silent installation of NetExtender via CMD line
- Users on Netextender 10.3.0 version failing to connect with the following error message " Cannot get a response from the server "
Categories
- Secure Mobile Access > SMA 100 Series > Vulnerabilities
- Secure Mobile Access > SMA 100 Series > Logging
YES
NO