We host a remote access tool called Simple Help. It allows us to access our clients computers and assist them with problems. I can log into it from my remote workstation, and connect to a clients workstation via our server. Then upon a successfully UDP connection Simple Help will try to "upgrade" the connection and take the server out of the picture leaving you with a direct workstation-to-workstation UDP connection. This works fine on many networks. However one of our clients has a Sonicwall firewall and it appears to be blocking this last step, the "upgrade". It seems when Simple Help tries to upgrade the connection the Sonicwall Intrustion Prevention kicks in and stops it. I've tried disabling the IPS service but to no avail. I've tried disabling Gateway AV, IPS, and AntiSpyware services under the Security Services menu all at once but still no success. I've tried removing all these services from the LAN and WAN zones. I've also tried adding an IPS exception for different IPs, no success. And it always logs that IPS detected a probable or possible port scan.
Here's a link to a screen cap of the SW Log:
https://skydrive.live.com/redir?resid=D7404A61BC894BC2!225
Any ideas how to make the Sonicwall leave this traffic alone?
Alternatively a SimpleHelp Tech suggested that maybe the sonicwall is just alerting about the IPS event and is not actually blocking it via IPS. He said looking into an option called "Enable Consistent NAT" may help – any thoughts here?
Best Answer
I guess I posted a bit prematurely but maybe this will help others. The "Enable Consistent NAT" option I mentioned in my question seems to have worked. Any explanations as to exactly what this option does are welcome. But my primary issue appears to be solved.