Skip to main content
mike5C0517800608
mike5C0517800608
Participant
January 22, 2021
Answered

Flash EOL , WHAT ABOUT THOSE manufactured appliances that use flash!???

  • January 22, 2021
  • 4 replies
  • 862 views

I have a sonicwall appliance that uses flash, you cannot use the appliance now because flash will not RUN!!!   so a $10,000 appliance is JUNK!  because adobe killed flash.. all i get is this big 

that will not allow me to run my expensive product , so now what?

    This topic has been closed for replies.
    Correct answer jeromiec83223024

    A couple things: 

     

    • In general, if your defenses aren't getting regular updated, they're probably not affording you meaningful protection at this point.  Castle walls were great until we invented cannons. 

      In much the same way, motivated attackers are smart, adaptable and well resourced.  The threat landscape is constantly changing.  They've moved on while your appliance (given that it hasn't been updated to remove Flash dependencies since the Flash EOL announcement in 2017) has most likely stayed static. 

      It's worth asking yourself if that appliance is providing meaningful protection at this point, or if it's simply giving you a false sense of security (and/or precluding more meaningful work with regard to addressing the current threat landscape).

    • You *can* restore access to the administrative UI via Flash Player's Enterprise Enablement features.  This would have been easier before Jan 12 (when Preview mode was an option), but it's still doable.  That said, you'll also need to freeze on a browser that continues to support plug-ins.  Flash EOL didn't happen in a vacuum, and we coordinated with all the major browser vendors to end support for both Flash Player and browser plug-ins. 

      So, you'll need to freeze and secure an administrative environment for the purpose of keeping this old firewall alive. 

     

    You can learn more about the Enterprise Enablement features and the options available for your organization (including licensing a maintained version of Flash Player from our support partner HARMAN, here): 

     

    https://www.adobe.com/products/flashplayer/enterprise-end-of-life.html

     

    You can read more about the Enteprise Enablement features in the admin guide, here: 
    https://www.adobe.com/devnet/flashplayer/articles/flash_player_admin_guide.html

     

    Hope that helps!

    4 replies

    mike5C0517800608
    mike5C0517800608Author
    Participant
    January 22, 2021

    and yes i have already reached out to sonicwall

    jeromiec83223024
    jeromiec83223024Correct answer
    Inspiring
    January 25, 2021

    A couple things: 

     

    • In general, if your defenses aren't getting regular updated, they're probably not affording you meaningful protection at this point.  Castle walls were great until we invented cannons. 

      In much the same way, motivated attackers are smart, adaptable and well resourced.  The threat landscape is constantly changing.  They've moved on while your appliance (given that it hasn't been updated to remove Flash dependencies since the Flash EOL announcement in 2017) has most likely stayed static. 

      It's worth asking yourself if that appliance is providing meaningful protection at this point, or if it's simply giving you a false sense of security (and/or precluding more meaningful work with regard to addressing the current threat landscape).

    • You *can* restore access to the administrative UI via Flash Player's Enterprise Enablement features.  This would have been easier before Jan 12 (when Preview mode was an option), but it's still doable.  That said, you'll also need to freeze on a browser that continues to support plug-ins.  Flash EOL didn't happen in a vacuum, and we coordinated with all the major browser vendors to end support for both Flash Player and browser plug-ins. 

      So, you'll need to freeze and secure an administrative environment for the purpose of keeping this old firewall alive. 

     

    You can learn more about the Enterprise Enablement features and the options available for your organization (including licensing a maintained version of Flash Player from our support partner HARMAN, here): 

     

    https://www.adobe.com/products/flashplayer/enterprise-end-of-life.html

     

    You can read more about the Enteprise Enablement features in the admin guide, here: 
    https://www.adobe.com/devnet/flashplayer/articles/flash_player_admin_guide.html

     

    Hope that helps!

      mike5C0517800608
      mike5C0517800608Author
      Participant
      January 25, 2021

      I am not sure what you mean about freeze, I have tried attempted the override, and its not working, i still get the big Fi icon, clearly I am not doing something right, but the instructions are not writing in leymans terms, and not easy to follow or even understand.

      below is what i have at my MMS.CFG uner the windows\syswow64 file path.

       if i copy this mms.cfg to the users/appdata/local/google/chrome/userdata/pepperflash

      and when i use chrome (as suggested by sonicwall) i get the message that adobe flash player was blocked because its out of date ( udpate plugin) or (Run this time)   <<< which is what i should get yes?

      anyhow when i click RUN THIS TIME ,

      the screen is blank.. nothing, nada..

       

      MMS.CFG

      ---------------------------------------

      SilentAutoUpdateEnable=0
      AutoUpdateDisable=1
      # duplicate actionscript console output
      # in browser's console for javascript
      TraceOutputEcho=1
      # Enable the AllowList feature
      EnableAllowList=1
      # Normally, the allow list blocks URL requests
      # unless the url matches a pattern in the list.
      # In preview mode, all requests go unblocked,
      # but console output is written for each request
      # indicating which pattern it matched or that
      # no match was found..
      AllowListPreview=1
      TraceOutputEcho = 1
      AllowListUrlPattern=https://172.16.129.12:443/

      Nancy OShea
      Community Expert
      Nancy OSheaCommunity Expert
      Community Expert
      January 22, 2021

      Surely, this came as no surprise to anyone.  The planned Flash Player EOL was widely publicized 3-1/2 years ahead giving programmers more than ample time to prepare for it.

       

      Pre-Announcement from 2017

      https://blog.adobe.com/en/publish/2017/07/25/adobe-flash-update.html#gs.quzsa5

       

      Flash EOL for Enterprises

      https://www.adobe.com/products/flashplayer/enterprise-end-of-life.html

       

      Flash EOL FAQ

      https://www.adobe.com/products/flashplayer/end-of-life.html

       

      Nancy O'Shea— Product User & Community Expert
        mike5C0517800608
        mike5C0517800608Author
        Participant
        January 22, 2021

        I knew EOL was coming but not that your device would fail to function.

          Nancy OShea
          Community Expert
          Nancy OSheaCommunity Expert
          Community Expert
          January 22, 2021

          1. I don't work for Adobe.  I'm a product user like you. 

          2. SonicWall knew about the EOL. So it's incumbent upon them to fix the problem.  Adobe cannot fix this for them, nor should they.

           

          Nancy O'Shea— Product User & Community Expert
          mike5C0517800608
          mike5C0517800608Author
          Participant
          January 22, 2021

          It's a bit ridiculous that I can't  use it because Adobe coded flash to stop working altogether. I get you dont want to support it, I get you not going to make any new versions,  but to force my production product to stop working is unacceptable 

          A
          Anonymous
          January 22, 2021

          You should ask someone at SonicWall if they have an update for whatever applicance you are using. I'm sure they are well aware that their equipment would stop working if they don't intend to update it. Maybe ask the user community here:

           

          https://community.sonicwall.com/technology-and-support

            Terms & ConditionsAccessibility statement
            Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices