Firewall configurations that restrict outbound access to Duo's service with rules using destination IP addresses or IP address ranges aren't recommended, since these may change over time to maintain our service's high availability. This application communicates with Duo's service on TCP port 443.
#USING SONICWALL NETEXTENDER UPDATE#
If you have issues with the v10 "Contemporary mode" and cannot update your device firmware, access the "Classic mode" login page by changing the VPN login URL in your browser from to There is no setting in the SMA config to force use of "Classic mode". The issue displaying the Duo prompt in "Contemporary mode" was fixed in SMA firmware update 10.2.1.0-17. This mode may prevent display of the Duo prompt. Sonicwall introduced a new "Contemporary mode" for SMA in v10.2.
#USING SONICWALL NETEXTENDER SERIES#
SMA 1000 series devices running v12+ firmwares.SMA 100 series devices or upgraded SRA devices with 8.6.x firmwares (note that v8.x firmwares are end-of-life per SonicWall).SMA 100 series devices with 9.0 firmwares before 9.0.0.2-13.The Duo web-based prompt does not support: