I have set up SSL VPN on our network but I know I missed a step somewhere. I can connect just fine and stay connected but I cannot access the network drives.
I’ve tried every article online I could find but nothing has resolved it. I tried calling Sonicwall support but could not understand them through their accent as the call center is in another country and their english was hidden too well behind their accent.
Can anyone steer me in the right direction?
Kildor
March 6, 2025, 7:29am
2
Just a guess but you may need to add a route from the VPN network to the network your drives are on. At least that is what I had to do when I setup my own VPN server.
Have you added the neccesary routes in the SSL VPN settings?
Have you also checked the firewall rules from SSL VPN → LAN and LAN → SSLVPN?
You can also consider doing a packet capture from the sonicwall and see if traffic is being blocked/dropped.
EDIT: Also for testing sake you might try temporarily disabling the firewall on the windows server which has the network shares.
Turn off IPv6 on your computer.
What do you get for DNS servers on the virtual adapter? What groups are the users in on the sonicwall?
edit the connection ini file
DNS Helper settings configured?
Is your network using a common subnet? If so probably overlap.
try accessing the shares via ip address - \\10.0.0.5 \data rather than \\server\data. Netbios requests may not be handled correctly across the vpn.
Your client DNS has to be local. Your WAN DNS should be your ISPs or public DNS. Your DHCP pool should be a subnet outside of your LAN.
What happens is the Sonicwall sets up routing rules automatically when you enable the VPN. If your VPN client pool uses the LAN subnet it gets wonky.
Can you access resources via IP address? If you can only access via IP address
\\ipaddress\share
You will need to create a NetBIOS address object Zone Assignment LAN, Type = Host and address is 255.255.255.255
You also need to allow access to the LAN subnet or whatever people need access to as well as the NetBIOS address object.
are you on wifi? I’ve had to disable RSC on wireless adapters to get global vpn client to get me to shared drives.
disable-netadapterrsc -name Wi-Fi
Can you get to the share by ip or fqdn?
Part 1 (DNS)
Edit the client connection profile on the sonicwall.
Add the internal DNS server
Add the domain to the domain DNS search
Save the profile which drops all connections
On reconnect you should be working
Part 2 in case you haven’t done it(Netbios broadcast)
Ensure you have 255.255.255.255 added as a LAN Host network object
Add this to your SSLVPN services group
https://www.sonicwall.com/support/knowledge-base/how-can-i-allow-netbios-traffic-via-sslvpn/170505417512291/
How did you do this? I cannot find any good online guides talking about this.
I have a feeling that’s where I need to adjust settings but I’m not sure what to enter there.
I’m trying to figure out this network. The person who put it all together isn’t employed here anymore.
I got it resolved. DNS addresses were incorrect.
This didn’t work unfortunately
Kildor
March 6, 2025, 7:30am
19
I can’t help on this as I’m not using a Sonicwall. My VPN server is a OpenVPN installation and it took me sometime to find the answer.
Can you ping the computer or server hosting the datas ?
are you using IP or names to access your datas ? the DNS server used by the VPN may not be the right one