-
Products
-
SonicPlatform
SonicPlatform is the cybersecurity platform purpose-built for MSPs, making managing complex security environments among multiple tenants easy and streamlined.
Discover More
-
-
Solutions
-
Federal
Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn MoreFederalProtect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn More - Industries
- Use Cases
-
-
Partners
-
Partner Portal
Access to deal registration, MDF, sales and marketing tools, training and more
Learn MorePartner PortalAccess to deal registration, MDF, sales and marketing tools, training and more
Learn More - SonicWall Partners
- Partner Resources
-
-
Support
-
Support Portal
Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn MoreSupport PortalFind answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn More - Support
- Resources
- Capture Labs
-
- Company
- Contact Us
Traffic of Pitney Bowes franking machine dropped - drop code 99 - Enforced firewall rule
03/26/2020 
29 People found this article helpful
484,240 Views
Description
After the upgrade to 6.2.6.x firmware franking machines are not able to update their counters online.
Packet capturing the web traffic of the device shows that the requests are dropped due to "Enforced Firewall Rule" or drop code 99.
Cause
The packet is dropped by the content filter system due to the "Host tag search" as the HTTP requests generated by the franking machine do not contain a host name.
Resolution
The recommended workaround is to add the IP of the franking machine to the CFS exclusion list.
If you already have setup a address object group for CFS exclusion follow these steps:
- Go to Network | Address Objects
- Create a new host address object using the franking machine IP in the correct zone
- Now add the created address object to your CFS exclusion address object group
If you have not used CFS exclusion before follow these steps:
- Go to Network | Address Objects
- Create a new host address object using the franking machine IP in the correct zone
- Create a new address object group that will hold future CFS exclusions
- Now add the new address object to the address object group
- Go to Security Services | Content Filter
- Under CFS Exclusion select the new address object group as Excluded Address
As an alternative you can also disable the enforcement of the "Host Tag Search" but this is not recommended as it can affect the accuracy of the website ratings.
To disable the Host Tag Search enforcement follow these steps:
- Log in to the SonicWall
- Replace main.html with diag.html in the browser address bar and press enter
- Click on Internal Settings
- Scroll down to the Security Services Settings section
- Disable "Enforce Host Tag Search for CFS" and click Accept at the top
Related Articles
- How to Block Google QUIC Protocol on SonicOSX 7.0?
- How to block certain Keywords on SonicOSX 7.0?
- How internal Interfaces can obtain Global IPv6 Addresses using DHCPv6 Prefix Delegation
Categories
- Firewalls > TZ Series
- Firewalls > SonicWall SuperMassive E10000 Series
- Firewalls > SonicWall SuperMassive 9000 Series
- Firewalls > SonicWall NSA Series
YES
NO