Document toolboxDocument toolbox

(12.04.120-en_orig) Device Registration Behind SonicWall Firewall Fails

Owned by Harald Saller
Last updated: Jun 11, 2024Version comment
1 min read

Symptom

The devices are detected by the UMS during a scan, but registration fails. UMS console shows an error message like "Unexpected end of input stream found at ...". 

Possible Causes

The following causes have been reported with firewalls by SonicWall; 

  • Large packets: See Thin Client Registration fails with Error Message "Unexpected end of input stream".
  • SonicWall DPI-SSL replaces the UMS certificate: If SonicWall DPI-SSL is enabled, it functions as intermediate CA and sends its own certificate to the devices instead of the original UMS certificate. As a consequence, the devices refuse to register because they would only accept the original UMS certificate. 

Solution

  1. In SonicWall, under DPI-SSL Status, add the IP address of the UMS server to the list of DPI-SSL exclusions.
  2. Restart the VPN tunnel.