Bruce_Briggs

VLAN interfaces also do not have the MAC Address Control option. Since many sites do use VLANs for their AP, this setup would also prevent the use of MAC address controls for AP connected clients. Wi… (View Post)

You either need "Force all client traffic through tunnel", or you need "Specify allowed resources" with the desired subnets. The 2nd option does not include remote subnets such as… (View Post)

There are tools such as ping plotter which can show where the dropped/lost packets are likely happening. Free trial: https://www.pingplotter.com/products/free.html I have done a pingplotter session t… (View Post)

No further thoughts. Time for a support incident. A switch could, and most likely is, between your firewall port and the DNS server. So do check that if it is a smart switch. If it isn't smart, … (View Post)

As always, what XTM version are you running? What is between the firewall and the DNS server? Could there be an ACL on it which is denying packets from an "unknown" subnet? Can you tracert … (View Post)