Arlo Pro base station not discovered behind SonicWALL firewall

[veijones]

Arlo is installed behind a business firewall (SonicWall TZ300) connected to one of the LAN ports on the device.

Arlo is getting a DHCP assigned private IP address and sending/receiving basic traffic to a public address in Amazon's cloud.

I can ping the private IP address assigned to Arlo from the PC I'm trying to set it up on.

I've specifically NAT'd and allowed wide-open internet traffic to the Arlo.

The Arlo web discovery utility can't find my Arlo base station at any stage of the trouble-shooting steps I've tried.

??

[jguerdat]

Might be faster and easier just to take it home to set up and then take it back to the office.

[Hula_Rock]

Did you create NAT pociies for both inbound and outbound traffic.  You may want to double check to see if you created PORT specific address objects for both the Private and public connections.

[lawlogistics]

I am having an extremely similar issue, with the base unit not being found being behind an NSA250.  A LAN IP is being assigned and the device is pingable, but neither the mobile app or the web browser are able to locate the base. 

The only specific issue I can see is that outbound traffic is being dropped going to a couple of locations with the message "Invalid TCP Flag".  The primary destination for the traffic that is being blocked is 52.18.57.214.  I tried a couple of workarounds within the SonicWALL configuration, and I did open up all traffic both inbound and outbound for the Base at one point, but it did not resolve. 

Did you ever get a resolution, or did you just scrap this system?

[jguerdat]

What are the LEDs showing? Is the Internet one green?

[lawlogistics]

Yes, both the Power and Internet lights are solid green when this occurs.

[jguerdat]

It might be worth resetting the base using the reset button until the LEDs flash amber.

[lawlogistics]

That is part of basic troubleshooting and was done.  Something about the traffic that the Arlo is trying to communicate is out of spec according to the SonicWALL, and only during initial setup.  I was able to connect it directly to the internet with no router in the middle to configure it, then return it to behind the SonicWALL and it continues to function. 

This is the perfect example of why an 'Easy Setup' like the Arlo uses should be an OPTION, not the only method.  Sometimes people who know what we are doing are thwarted by unnecessary garbage like this and are forced to do additional work, when a basic non-automatic configuration procedure would have been far easier.

[jguerdat]

It is what it is. There was a let quite some time ago about why business networks may block traffic due to how Netgear utilizes secure connections (I don't recall the exact wording - maybe using port 80 instead of 443?). In any event, the system is set up for typical usage. It appears yours is not typical so you can either figure it out yourself since it's your network or open a case with support to see if they can offer suggestions.