If you're receiving communication error 12028 or 12031 when downloading Lacerte and have a SonicWall router, you need to configure your router and Gateway Anti-Virus software to allow exceptions for specific IP addresses.
We use a third-party content delivery network, Akamai Technologies, to host internet update files. Lacerte looks to a specific URL, or domain name, to find updates. Due to the nature of content delivery networks, the URL may use different IP addresses around the country as needed. We've listed the most common IP addresses in step 10.
Follow these steps to configure your SonicWall router:
- Log in to your SonicWall Router.
- If you don't know your username or password, your local IT professional may be able to set it up.
- If you've never configured your router, it likely still uses the default credentials. Usually, the username is "admin" and the password is "password" for default credentials.
- In the left column, select the Firewall option.
- Select Address Objects.
- Set the View to Custom Address Object.
- Under the Address Objects section, click the Add button.
- Complete the following fields with the following information:
- Name: Lacerte IP Range
- Zone Assignment: WAN
- Type: Range
- Starting IP Address: 198.31.208.130
- Ending IP Address: 198.31.208.145
- Click the Add button.
- After it's finished processing, click the Add button under Address Objects again.
- Complete the following fields with the following information:
- Name: Lacerte1
- Zone Assignment: WAN
- Type: Host
- IP Address: 208.240.240.200
- Repeat step 9 for the following IP addresses and give each one a different "Name" (Lacerte2, Lacerte3, etc.):
- 206.108.40.29
- 12.149.173.19
- 12.179.134.64
- 23.6.179.159
- 23.7.203.159
- 23.218.108.185
- 23.76.91.159
- Click Close to exit your SonicWall Router configuration.
- After you add the IP exclusions, y tie them to an existing or newly created Access Rule so that the firewall knows not to block them.
These are the most common IP addresses we've seen from the content delivery network, but they can change based on location. You or your IT person can use the nslookup command on webservicesfp.lscsoft.com or the log built into SonicWall to find the exact IP address it's blocking. This isn't a permanent fix, but it should allow you to get your program updates while we work with SonicWall to correct the issue.
Follow these steps to configure Gateway Anti-Virus:
Not all SonicWall routers have a Gateway Anti-Virus installed. Follow steps 1-3 of this section to determine if yours does.
- Log in to your SonicWall router.
- In the left column, select the Security Services section.
- Select the Gateway Anti-Virus subsection.
- Under the Gateway Anti-Virus Global section, select the Configure Gateway AV Settings.
- In the window that opens, mark the checkbox labeled Enable Gateway AV Exclusion List.
- Click the Add button.
- In the window that opens, add the same IP addresses you added from step 10 of the previous section.
- Click the OK button.
- Review your new settings in the Gateway AV Exclusion List.
- Click Close to exit your SonicWall Router Configuration.
