SonicWALL SSL-VPN 2000 Bedienungsanleitung

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86

Zur Seite of

Richtige Gebrauchsanleitung

Die Vorschriften verpflichten den Verkäufer zur Übertragung der Gebrauchsanleitung SonicWALL SSL-VPN 2000 an den Erwerber, zusammen mit der Ware. Eine fehlende Anleitung oder falsche Informationen, die dem Verbraucher übertragen werden, bilden eine Grundlage für eine Reklamation aufgrund Unstimmigkeit des Geräts mit dem Vertrag. Rechtsmäßig lässt man das Anfügen einer Gebrauchsanleitung in anderer Form als Papierform zu, was letztens sehr oft genutzt wird, indem man eine grafische oder elektronische Anleitung von SonicWALL SSL-VPN 2000, sowie Anleitungsvideos für Nutzer beifügt. Die Bedingung ist, dass ihre Form leserlich und verständlich ist.

Was ist eine Gebrauchsanleitung?

Das Wort kommt vom lateinischen „instructio”, d.h. ordnen. Demnach kann man in der Anleitung SonicWALL SSL-VPN 2000 die Beschreibung der Etappen der Vorgehensweisen finden. Das Ziel der Anleitung ist die Belehrung, Vereinfachung des Starts, der Nutzung des Geräts oder auch der Ausführung bestimmter Tätigkeiten. Die Anleitung ist eine Sammlung von Informationen über ein Gegenstand/eine Dienstleistung, ein Hinweis.

Leider widmen nicht viele Nutzer ihre Zeit der Gebrauchsanleitung SonicWALL SSL-VPN 2000. Eine gute Gebrauchsanleitung erlaubt nicht nur eine Reihe zusätzlicher Funktionen des gekauften Geräts kennenzulernen, sondern hilft dabei viele Fehler zu vermeiden.

Was sollte also eine ideale Gebrauchsanleitung beinhalten?

Die Gebrauchsanleitung SonicWALL SSL-VPN 2000 sollte vor allem folgendes enthalten:
- Informationen über technische Daten des Geräts SonicWALL SSL-VPN 2000
- Den Namen des Produzenten und das Produktionsjahr des Geräts SonicWALL SSL-VPN 2000
- Grundsätze der Bedienung, Regulierung und Wartung des Geräts SonicWALL SSL-VPN 2000
- Sicherheitszeichen und Zertifikate, die die Übereinstimmung mit entsprechenden Normen bestätigen

Warum lesen wir keine Gebrauchsanleitungen?

Der Grund dafür ist die fehlende Zeit und die Sicherheit, was die bestimmten Funktionen der gekauften Geräte angeht. Leider ist das Anschließen und Starten von SonicWALL SSL-VPN 2000 zu wenig. Eine Anleitung beinhaltet eine Reihe von Hinweisen bezüglich bestimmter Funktionen, Sicherheitsgrundsätze, Wartungsarten (sogar das, welche Mittel man benutzen sollte), eventueller Fehler von SonicWALL SSL-VPN 2000 und Lösungsarten für Probleme, die während der Nutzung auftreten könnten. Immerhin kann man in der Gebrauchsanleitung die Kontaktnummer zum Service SonicWALL finden, wenn die vorgeschlagenen Lösungen nicht wirksam sind. Aktuell erfreuen sich Anleitungen in Form von interessanten Animationen oder Videoanleitungen an Popularität, die den Nutzer besser ansprechen als eine Broschüre. Diese Art von Anleitung gibt garantiert, dass der Nutzer sich das ganze Video anschaut, ohne die spezifizierten und komplizierten technischen Beschreibungen von SonicWALL SSL-VPN 2000 zu überspringen, wie es bei der Papierform passiert.

Warum sollte man Gebrauchsanleitungen lesen?

In der Gebrauchsanleitung finden wir vor allem die Antwort über den Bau sowie die Möglichkeiten des Geräts SonicWALL SSL-VPN 2000, über die Nutzung bestimmter Accessoires und eine Reihe von Informationen, die erlauben, jegliche Funktionen und Bequemlichkeiten zu nutzen.

Nach dem gelungenen Kauf des Geräts, sollte man einige Zeit für das Kennenlernen jedes Teils der Anleitung von SonicWALL SSL-VPN 2000 widmen. Aktuell sind sie genau vorbereitet oder übersetzt, damit sie nicht nur verständlich für die Nutzer sind, aber auch ihre grundliegende Hilfs-Informations-Funktion erfüllen.

Inhaltsverzeichnis der Gebrauchsanleitungen

  • Seite 1

    S e c u r e R e m o t e A c c e s s S o l u t i o n s A P P L I A N C E S S on i c W A LL S SL -V PN Se ri es SSL -V PN 2000 G e t t i n g S t a r t e d G u i d e[...]

  • Seite 2

    SonicWALL SSL-VPN 2000 Getting Started Guide Pa ge 1 SonicW ALL SSL-VPN 2000 Appliance Getting S t arted Guide Thank you for your purch ase of th e SonicW ALL SSL-VPN 2000, the solution for secure remote access to mission-cr itical resources from virtually any end point—including desktops, laptop s, PDAs and smartphones. The SonicW ALL SSL-VPN 20[...]

  • Seite 3

    Page 2 Before Y ou Begin Check Package Content s • One SonicW ALL SSL-VPN 2000 appliance • One SonicW ALL SSL-VPN 2000 Getting S tarted Guide • One SonicW ALL SSL-VPN Release Notes • One straight-through Etherne t cable • One rack-mount kit • One power cord* * A power cord is included only with units shipped to North America. What Y ou [...]

  • Seite 4

    SonicWALL SSL-VPN 2000 Getting Started Guide Pa ge 3 Selecting a SonicW ALL Recommended Deployment Scenario The deployment scenarios describ ed in this section are based on actual customer deployments and are So nicW ALL-recomm ended deployment best p ractices. This section describes three co mm o n dep loym e nts of the SonicWALL SSL-VPN 2000 . In[...]

  • Seite 5

    Page 4 Applying Power to the SonicW ALL SSL-VPN 2000 1. Plug the power cord into th e SonicW ALL SSL-VPN 2000 and into an appropriate power outlet. 2. T urn on the power switch on the rear of the appliance next to the power cord. The Power LED on the fr ont p anel lig ht s up gr een when you turn on the SonicW ALL SSL-VPN 2000. The T est LED lights[...]

  • Seite 6

    SonicWALL SSL-VPN 2000 Getting Started Guide Pa ge 5 Accessing the Management Interface T o access the W eb-based management interface of the SonicW ALL SSL-VPN 2000: 1. Connect one end of an Ethernet ca ble into the X0 port of your SonicW ALL SSL- VPN 2000. Connect the other end of the cabl e into the computer you are using to manage the SonicW AL[...]

  • Seite 7

    Page 6 5. The SonicW ALL SSL-VPN management interface disp lays and prompts yo u to enter your user name and p assword. Enter “admin” in the User Name field, “pas swor d” in the Password field, select LocalDomain from the Domain drop-down list and click the Login button. Continue to S tep If Y ou Cannot Logi n to the SSL-VPN If you cannot c[...]

  • Seite 8

    SonicWALL SSL-VPN 2000 Getting Started Guide Pa ge 7 Configuring Y our SonicW ALL SSL-VPN 2000 Once your SonicW ALL SSL-VPN 2000 is connected to a compute r through the management port (X0) , it can be configured through the W eb-based management interface. This section includes the following subsections: • “Setting Y our Administrator Password[...]

  • Seite 9

    Page 8 3. Enter a password for th e “admin” account in the Password field. Re-enter the password in the Confirm Password field. 4. Click the OK butto n to apply changes. Adding a Local User 1. Navigate to the Users > Local Users page. 2. Click the Add User button. 3. Enter t he desired user n ame in the User Name field. 4. Select LocalDomain[...]

  • Seite 10

    SonicWALL SSL-VPN 2000 Getting Started Guide Pa ge 9 Setting Time Zone 1. Navigate to the System > Time page . 2. Select the appr opriate time zone from the drop-down menu. 3. Click the Accept button.  Note: Setting the time correctly is essential to many of the operations of the SonicWALL SSL-VPN 2000. Be sure to se t the time-zone correctly[...]

  • Seite 11

    Page 10 4. (Optional) Enter a secondary DNS server in th e Secondary DNS Server field. 5. (Optional) Enter your DNS Domain in the DNS Domain Field. 6. (Optional) Enter your WINS server s in the Primary WINS Server and Secondary WINS Server fields. 7. Click the Accept button. Configuring the X0 IP address for Scenario B and Scenario C If you are dep[...]

  • Seite 12

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 11 3. In the Interface Settings dialog box, set the IP address and netmask to: 4. Click OK . When you click OK , you will lose your connection to the SSL-VPN. 5. Reset the computer you use to manage the SonicW ALL SSL-VPN 2000 to have a static IP addres s in the range you just set for the X0 interfa[...]

  • Seite 13

    Page 12 3. Select X0 in the Interfaces drop down list. 4. Click the Accept button. Adding a NetExtender Client Route NetExte nde r allows remote client s to have seamle ss access to reso urces on your lo cal network. 1. Navigate to the NetExtender > Client Rout es page. 2. Click the Add Client Route button. 3. Enter the IP address of the trusted[...]

  • Seite 14

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 13 Setting your NetExtender Address Range The NetExtender IP r ange defines the IP ad dress pool from which addresses will be assigned to remote users du ring NetExtender sessions. The range needs to be large enough to accommodate the maximum num ber of concurrent NetExtender users you wish to suppo[...]

  • Seite 15

    Page 14 T o set your NetExtender ad dress range, perform the following step s: 1. Navigate to the NetExtender > Client Settings page . 2. Enter an address range for yo ur clients in the Client Address Range Begin and Client Address Range End fields. If you have too few available addresses to s upport your desir ed number of concurrent NetExtende[...]

  • Seite 16

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 15 Connecting the SonicW ALL SSL-VPN 2000 Before continuing, reference the diagra ms on the following pages to connect the SonicW ALL SSL-VPN 2000 to your network. Refer to the table in “Selecting a SonicW ALL Recommended Deployment Scenario” on pa ge 3 to determine the proper scenario for your [...]

  • Seite 17

    Page 16 Scenario B: Configuring Y our Network Interface Configure your SonicW ALL SSL-VPN 2000 to connect with your SonicW ALL UTM appliance under network configur ations given in Scenario B. On your SonicW ALL SSL-VPN 2000: 1. Navigate to the Network > Interfaces page . 2. Click the Configure button for the X0 port. 3. If configuring with Scena[...]

  • Seite 18

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 17 Scenario B: Connecting the SonicW ALL SSL-VPN 2000 T o con nect the SonicW ALL SSL-VPN 2000 u sing Scenario B, perform the fo llowing steps: 1. Connect one end of an Ethern et cable to an unused po rt on your DMZ, either directly to the OPT or X2 on your existing SonicWALL UT M appliance or to a [...]

  • Seite 19

    Page 18 Scenario C: Configuring Y our Network Interface Configure your SonicW ALL SSL-VPN 2000 to connect to your SonicWALL UTM appliance under network configur ations given in Scenario C. On the SonicW ALL SSL-VPN 2000: 1. Navigate to the Network > Interfaces page . 2. Click the Configure button for the X0 port. 3. Enter an unused IP address in[...]

  • Seite 20

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 19 Scenario C: Connecting the SonicW ALL SSL-VPN 2000 T o connect the SonicWALL SSL-VPN 2000 using Scenario C, perf orm the fo llowin g steps: 1. Connect one end of an Ethernet ca ble to an unused port on your LAN hub or switch. Scenario C: SSL-VPN on the LAN 2. Connect the other end of the Ethern e[...]

  • Seite 21

    Page 20 Configuring Y our Gateway Device Now that you have set up your SonicW ALL SSL-VPN 2000, you need to configure your gateway device to work with the SonicW ALL SSL-VPN 2000. Refer to the table in “Selecting a SonicW ALL Recommended Deployment Scenario” on pa ge 3 to determine the proper scenario for you r network configuration. This secti[...]

  • Seite 22

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 21 Scenario A: Configuring a DMZ or OPT Port in SonicOS S tanda rd 1. Navigate to the Network > Settings page . 2. Click the Configure button for the DMZ or OPT interface. 3. Select the DMZ in NA T Mode radio button. 4. Enter 192.168.200.2 in the DMZ Private Address fie ld. 5. Enter 255.255.255.0[...]

  • Seite 23

    Page 22 4. In the Step 1: Access Rule T ype page, se lect Public Server Rule an d then click Next . 5. In the Step 2: Public Server page, perfor m the following selections and then click Next : 6. In the Congratulations p age, clic k Apply to cr eate the rules and allow access from the W AN to the SonicW ALL SSL-VPN appliance on the DMZ. Service HT[...]

  • Seite 24

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 23 If you are allowing HTTP access to the SonicW ALL SSL-VPN appliance, create a public server access rule for HTTP: 1. In the Firewall > Access Rules page, click . 2. In the Welcome to the Network Acces s Rules Wizard p age, click Next . 3. In the Step 1: Access Rule T ype page, select Public Se[...]

  • Seite 25

    Page 24 7. In the Step 4: Access Rule Source Interface and Address p age, perform the following selections and then click Next : Interface DMZ IP Address Begin The X0 IP address of the SonicWALL SSL-VPN appliance, 192.168.200.1 by default IP Address End The X0 IP address of the SonicWALL SSL-VPN appliance, 192.168.200.1 by default[...]

  • Seite 26

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 25 8. In the Step 5: Access Rule Destina tion Interface and Address p age, pe rf or m th e following selections and then click Next : 9. In the Step 6: Access Rule Time p age, leave Tim e Ac tiv e set to Always Active unless you want to limit when you want SS L-VPN clients to have access to the LAN.[...]

  • Seite 27

    Page 26 Create access to the LAN for NetExtender: 1. In the Firewall > Access Rules page, click . 2. In the Welcome to the SonicW ALL Network Access Rules p age , click Next . 3. In the Step 1: Access Rule T ype page, se lect General Rule . Click Next . 4. In the Step 2: Access Rule Service page, select Any . Click Next . 5. In the Step 3: Acces[...]

  • Seite 28

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 27 Scenario A: Adding a New SSL-VPN Custom Zone in Sonic OS Enhanced 1. Navigate to the Network > Interfaces page . 2. Click Configure button for the X2 int erface (or any other available interfa c e ). 3. Select Create New Zone in Zone field. The Add Zone window opens. 4. T y pe SSL VPN in the N[...]

  • Seite 29

    Page 28 Scenario A: Allowing W AN -> SSL-VPN Connection in SonicOS Enhanced Follow this procedure if you are connecting yo ur SonicW ALL SSL-VPN 2000 to a SonicWALL UTM appliance runnin g SonicOS Enhance d . If your SonicW ALL UTM appliance is running SonicOS St andard , refer to “Scenario A: Allowing W AN -> DMZ Connection in SonicOS S tan[...]

  • Seite 30

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 29 4. In the Add Service Group dialog box, create a ser vice group for HTTP a nd HTTPS: • Enter a name for the service. • Select both HTTP and HTTPS and click the right arrow button . • Click OK when both HTTP and HTTPS are in the right colum n . 5. In the Server Private Network Configuration [...]

  • Seite 31

    Page 30 7. In the Server Public Informatio n page, either accep t the default IP addr ess or enter an IP address in your allowe d pu blic IP range.  Note: The default IP address is the WAN IP address of your SonicWALL UT M appliance. If you accept this default, all HTTP and HTTPS traf fic to this IP address will be routed to yo ur SonicWALL SSL-[...]

  • Seite 32

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 31 Scenario A: Allowing SSL-VPN -> LAN Connection in SonicOS Enhanced When users have connected to the SSL-VPN, they need to be able to connect to resources on the LAN. 1. In the administration interface, navigate to the Ne twork > Address Object s pag e. 2. In the Address Objects section, cli[...]

  • Seite 33

    Page 32 5. In the Add Object dialog box, cr eate an address object for the X0 interface IP address of your SonicW ALL SSL-VPN 2000: Click OK to create the object. 6. On the Network > Address Object s page, in the Address Gr oups section, click . 7. In the Ad d Address Object Grou p dialog box, create a group for th e X0 interface IP address of y[...]

  • Seite 34

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 33 9. On the Firewall > Access Rules page in the matrix view , click the S SL VPN > LAN icon. 10. On the resulting Firewall > Access Rules page, click .[...]

  • Seite 35

    Page 34 1 1. In the Add Rule window , create a rule to allow access to the LAN for the address group you just created: Click OK to create the rule. Continue to S tep Action Allow From Zone SSL VPN T o Zone LAN Service Any Source The address group you just cre ated, such as SonicW ALL_SSL VPN_Group Destination Any Users Allowed All Schedule Always o[...]

  • Seite 36

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 35 Scenario B: SSL-VPN on Existing DMZ This section provides procedures to co nfigure your gateway appliance based on Scenario B. This section cont ains the following subsections: • “Scenario B: Connectin g to the SonicW ALL UTM Appliance” on page 35 • “Scenario B: Allowing W AN - > DMZ[...]

  • Seite 37

    Page 36 4. In the Step 1: Access Rule T ype page, se lect Public Server Rule an d then click Next . 5. In the Step 2: Public Server page, perfor m the following selections and then click Next : 6. In the Congratulations p age, clic k Apply to cr eate the rules and allow access from the W AN to the SonicW ALL SSL-VPN appliance on the DMZ. Service HT[...]

  • Seite 38

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 37 If you are allowing HTTP access to the SonicW ALL SSL-VPN appliance, create a public server access rule for HTTP: 1. In the Firewall > Access Rules page, click . 2. In the Welcome to the Network Acces s Rules Wizard p age, click Next . 3. In the Step 1: Access Rule T ype page, select Public Se[...]

  • Seite 39

    Page 38 6. In the Step 4: Access Rule Source Interface and Address p age, perform the following selections and then click Next : Interface DMZ IP Address Begin The X0 IP address of the SonicWALL SSL-VPN appliance within your DMZ range, for example 10.1.1.200 . IP Address End The X0 IP address of the SonicWALL SSL-VPN appliance, the same as above, f[...]

  • Seite 40

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 39 7. In the Step 5: Access Rule Destina tion Interface and Address p age, pe rf or m th e following selections and then click Next : 8. In the Step 6: Access Rule Time p age, leave Tim e Ac tiv e set to Always Active unless you want to limit when you want SS L-VPN clients to have access to the LAN.[...]

  • Seite 41

    Page 40 Create access to the LAN for NetExtender: 1. In the Firewall > Access Rules page, click . 2. In the Welcome to the SonicW ALL Network Access Rules p age , click Next . 3. In the Step 1: Access Rule T ype page, se lect General Rule . Click Next . 4. In the Step 2: Access Rule Service page, select Any . Click Next . 5. In the Step 3: Acces[...]

  • Seite 42

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 41 Scenario B: Allowing W AN -> DMZ Connection in SonicOS Enhanced Follow this procedure if you are co nnecting your SonicW ALL SSL-VPN 2000 to a SonicW ALL UTM appliance running SonicOS Enhanced . If your SonicW ALL UTM appliance is running SonicOS S tandard , refer to “Scenario A: Allowing W [...]

  • Seite 43

    Page 42 4. In the Add Service Grou p dialog box, create a service g roup for HTTP and HTTPS: • Enter a name for the service. • Select both HTTP a nd HTTPS and click . • Click OK when both HTTP and HTTPS are in the right column. 5. In the Public Server T ype page, click Next . 6. In the Server Private Netwo rk Configuration p age, enter the fo[...]

  • Seite 44

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 43 7. In the Server Public Information page, either accept the default IP address or ente r an IP address in your allowed public IP range.  Note: The default IP address is the WAN IP address of your SonicWALL UTM appliance. If you accept this default, all H TTP and HTTPS traffic to this IP addres[...]

  • Seite 45

    Page 44 3. In the Add Object dialog box, cr eate an address object for the X0 interface IP address of your SonicW ALL SSL-VPN 2000: Click OK to create the object. 4. Click again to create an address object for the NetExtender range. 5. In the Add Object dialog box, cr eate an address object for the X0 interface IP address of your SonicW ALL SSL-VPN[...]

  • Seite 46

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 45 7. In the Add Ad dress Object Group dialog box, create a group for th e X0 interface IP address of your SonicW ALL SSL-VPN 2000 and the NetExtender IP range: • Enter a name for the grou p. • In the left column, se lect the two groups you crea ted and click the arrow button . • Click OK when[...]

  • Seite 47

    Page 46 1 1. In the Add Rule window , create a rule to allow access to the LAN for the address group you just created: Click OK to create the rule. Continue to S tep Action Allow From Zone DMZ T o Zone LAN Service Any Source The address group you just created, such as SonicW ALL_SSL VPN_Group Destination Any Users Allowed All Schedule Always on Ena[...]

  • Seite 48

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 47 Scenario C: SSL-VPN on the LAN This section provides procedures to co nfigure your gateway appliance based on Scenario C. This section cont ains the following subsections: • “Scenario C: Connecting to the SonicW ALL UTM Appliance” on page 47 • “Scenario C: Config u ring SSL -VPN -> L[...]

  • Seite 49

    Page 48 3. In the Add Object dialog box, cr eate an address object for the X0 interface IP address of your SonicW ALL SSL-VPN 2000: Click OK to create the object. 4. Click again to create an address object for the NetExtender range. 5. In the Add Object dialog box, cr eate an address object for the X0 interface IP address of your SonicW ALL SSL-VPN[...]

  • Seite 50

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 49 7. In the Add Ad dress Object Group dialog box, create a group for th e X0 interface IP address of your SonicW ALL SSL-VPN 2000 and the NetExtender IP range: • Enter a name for the grou p. • In the left column, se lect the two groups you crea ted and click the arrow button . • Click OK to c[...]

  • Seite 51

    Page 50 1 1. In the Add Rule window , create a rule to allow access to the LAN for the address group you just created: Click OK to create the rule. Action Allow From Zone SSL VPN T o Zone LAN Service Any Source The address group you just cre ated, such as SonicW ALL_SSL VPN_Group Destination Any Users Allowed All Schedule Always on Enable Loggin g [...]

  • Seite 52

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 51 Scenario C: Setting Public Server Access in SonicOS S t andard 1. Select Wizards in the left navigation bar . 2. Click the Network Access Rules W izard option and press the Next button. 3. Select Public Server Rule . 4. Enter a comment, such as “W AN to SSL-VPN” to describe your conne ction. [...]

  • Seite 53

    Page 52 Scenario C: Setting Public Server Access in SonicOS Enhanced 1. Click the Wizards ico n in the top right corner of the SonicOS Enhanced management interface. 2. Select the Public Server Wizard option and then click Next . 3. Select We b Se rve r from the Server T ype drop-down menu. 4. Select the HTTP and HTTPS checkboxes. 5. Click the Next[...]

  • Seite 54

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 53 8. Enter a comment, such as “W AN to SSL-VPN” to describe your conne ction. 9. Click the Next button to continue the Wizard. 10. V erify that the Public Server field contains the correct IP address ( Y ou can generally leave this at the default sett ing). 1 1. Click the Next button. 12. Click[...]

  • Seite 55

    Page 54 T esting Y our SSL-VPN Connection Now you have configured your Son icW ALL UTM appliance and SonicW ALL SSL- VPN 20 00 for secure SSL VPN remote access.This section provides instructions to verify your SSL-VPN connectio n using a remote client on the W AN. V erifying a User Connect ion from the Internet 1. From a W AN connection out side of[...]

  • Seite 56

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 55 5. Click the NetExtender button and complete the clie nt inst allation. When complete, the following message is displayed: 6. Ping a host on your corpor ate LAN to verify your SSL-VPN remote connection. Congratulations! Y ou have successfully set up your SonicWALL SSL-VPN 2000. Continue t o S tep[...]

  • Seite 57

    Page 56 Registering Y our SonicW ALL SSL-VPN 2000 Before Y ou Register V erify that the time, DNS, and default r oute settings on your SonicW ALL SSL-VPN are correct bef ore you register you r appliance. T o verify or con figure the time set tings, navigate to the System > Time p age. T o verify or configure the DNS setting, navig ate to the Net[...]

  • Seite 58

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 57 3. On the System > Licenses page, click Activate, Up grade, or Renew services . The License M anagement page is displayed. 4. If you have a mySonicW ALL.com account, enter yo ur mySonicW ALL.com user name and password into the fields and then click Submit . The display changes. 5. Enter a desc[...]

  • Seite 59

    Page 58 6. Under Product Survey , fill in the requested information and then click Submit . The display change s to inform you that your SonicW ALL SSL-VPN 2000 is registe red. 7. Click Continue . 8. In the License Management p age, your latest license information is displayed. Congratulations Y our SonicW ALL SSL-VPN 2000 is now fully operational.[...]

  • Seite 60

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 59 Configuring Dynamic DNS To begin using Dynamic DNS, you must first set up an account with one of the four free service providers listed below: • DynDNS.org • changeip.com • No-IP .com •y i . o r g It is possible to use multiple providers simult aneously. The re gistration process normally[...]

  • Seite 61

    Page 60 To configure Dynamic DNS on the SonicW ALL UTM ap pliance, perform these steps: 1. On the Network > Dynamic DNS page, click the Add button . The Add DDNS Profile window is displayed. 2. If Enable this DDN S Profile is selected, the profile is administratively enabled, and the SonicW ALL UTM appliance takes the actions defined in the Onli[...]

  • Seite 62

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 61 7. Enter the fully qualified domain na me (FQDN) of the ho stname you register ed with dyndns.org. Make sure you provide the same hostname and domain as you configured. 8. Y ou may optionally select Enable Wildcard and/or configure an MX entry in the Mail Exchanger field. 9. Click the Advanced ta[...]

  • Seite 63

    Page 62 Configuring a St atic IP Address If you did not enable the SonicW ALL UTM appliance DHCP server , you must configure each computer with a st atic IP address from your LAN or WLAN IP addr ess range. Af ter the SonicW ALL SSL-VPN 2000 has restarted , follow the steps below for configuring yo ur network client s running any of the following Mi[...]

  • Seite 64

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 63 Windows 2000 1. From your Windows Star t menu, select Settin gs . 2. Open Network and Dial-up Connections . 3. Click Properties . 4. Highlight Internet Protocol (TCP/IP) and click Proper ties . 5. Select Use the following IP address . 6. T ype an IP address from your LAN IP range IP address fi el[...]

  • Seite 65

    Page 64 Mounting Guidelines The SonicW ALL SSL-VPN 2000 is designed to be mo unted in a standard 19-inch rack mount cabinet. The following condi tions are required for proper installa tio n: • Use the mounting hardwar e recommended by the rack manufacturer and en sure that the rack is adequate for the application. Son i cWALL includ es a rack mou[...]

  • Seite 66

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 65 Glossary of Networking T erms ActiveX - A technology that allows the sharing of applications and data across the W eb. For example, Active X allows you to view Microsoft W ord and Adobe Acrobat documents within the Internet Explorer W eb browser wit hout downloading the files and launching t he a[...]

  • Seite 67

    Page 66 SSL VPN - Secure Socket Layer Virtual Private Networking. A secured p rivate communications network usually used within a company , or by several different companies or organizations, communicating over a public network. SSL technology is used either for tunneling the entire network stack, or for securing what is essentially a Web proxy . S[...]

  • Seite 68

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 67 SonicW ALL Global Support Services On your appliance, on the W eb, and on the ph one, we make it easy and fast to find the information you need to keep your SonicW ALL solution, and your network, running smoothly and efficiently . Use the Online Help. Ev er y SonicW ALL securit y app liance inclu[...]

  • Seite 69

    Page 68 Customer Support SonicW ALL of fers Web-base d and telephone suppor t to customers who have a valid W arranty or who purchased a Support Contra ct. Please review our Warranty Support Policy for product cover age. SonicW ALL also offe rs a fu ll range of con sulting ser vices to meet your n eeds, fr om our in novative implemen tation ser vic[...]

  • Seite 70

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 69 Extend Y our Support Coverage. SonicW ALL Dynamic Support Services extend the suppo rt coverage on your SonicW ALL solution beyond the warranty period. Ou r 8x5 1 and 24x7 suppor t services include critical software an d fir mware updates, expert telephone and Web-b ased support, Advance Exchange[...]

  • Seite 71

    Page 70 Knowledge Port al The Knowledge Por tal allows user s to sear ch fo r S oni cWALL documents based on the following types of se ar ch too ls: •B r o w s e • Search for keywords • Full-t ext search For further information, na vigate to the Support > Knowledge Port al page at: < http://www .mysonic wall.com/ >[...]

  • Seite 72

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 71 User Forums The SonicW ALL User Forums is a resour ce that provides users the ability to communicat e and discuss a vari ety of security and appliance subject matters. In this forum, the following categori es are available for users: • Content Security Manager topics • Continuous Dat a Protec[...]

  • Seite 73

    Page 72 Tr a i n i n g SonicW ALL of fers an extensive sales and te chnical training curricu lum for Network Administrators, Security Experts and So nicW ALL Medallion Partners who need to enhance their knowledge an d maximize thei r investment in SonicW ALL Products and Security Applications. SonicW ALL Training provides the following resources fo[...]

  • Seite 74

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 73 Related Document ation See the following related docu ments for more information: • SonicW ALL SSL-VPN Administrator ’ s Guide • SonicW ALL SSL-VPN Release Notes • SonicWALL SSL-VPN Feature Modules • SonicW ALL SSL-VPN 3.0 V i rtual Assist Feature Module • SonicW ALL SSL-VPN 3.0 NetEx[...]

  • Seite 75

    Page 74 SonicW ALL Live Product Demos The SonicWALL Live Demo Site provid es free test drives of SonicW ALL security products and services throu gh inte ractiv e live product installations: • SSL VPN Secure Remote Access • Unified Threat Man agement Platform • Secure Cellular Wireless • Continuous Dat a Protection • Content Filtering • [...]

  • Seite 76

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 75 SonicW ALL Secure Wire less Network Integrated Solutions Guide The Of ficial Guide to SonicW ALL ’s market -leading wireless networking and secu rity devices. This 512-p age book is available in hardcopy . Order the book directly from Elsevier Publishing at: < http://www .elsevier .com >[...]

  • Seite 77

    Page 76 SonicW ALL Global T echnical Assistance Center Cont act Information T able 2: Global T echnical Assist ance Contact List Country T oll Free Phone Number T oll Phone Number Calling from North Americ a (Suppor t available in English) United S tates +1 888.777.1476 Canada +1 888.777.1476 Calling from Europe, the Mid dl e East an d Af rica (Sup[...]

  • Seite 78

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 77 Calling from Asia Pacific (Support availabl e in English except for Japan where supp ort is offered in Jap anese only) Australia +1 800.35.1642 Hong Kong +1 800.93.0997 India 000.800.100.3395 Japan +81 (0)3.3457.8971 New Zealand 800.446489 Singapore + 800.1 10.1441 Calling from Latin America (S u[...]

  • Seite 79

    Page 78 FCC Part 15 Class A Notice SonicW ALL SSL-VPN 2000 Regulato ry S tatement and Safety Instructions This regulatory information can also be foun d in the electronic file, “ SonicW ALL_SSL-VPN_Regulatory_S tatement.p df ,” located on the So nicW ALL Web site: < http://www .sonicwall.com >. FCC Part 15 Class A Notice NOTE : This equip[...]

  • Seite 80

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 79 VCCI St atement Canadian Radio Frequenc y Emissions St atement This Class A digital app aratus complies with Cana dia n ICES-003. Cet appareil numériq ue de la classe A est conforme à toutes la norme NMB-003 du Canada. CISPR 22 (En 55022) Class A War nin g : This is a class A product. In a dome[...]

  • Seite 81

    Page 80 Declaration of Conformity Regulatory Information for Korea All products with country code “” (blank) and “A” are made in the USA. All product s with country code “B” are made in China. All products with country code “C” or “D” are made in T aiwan R.O.C. Lithium Battery W arning The Lithium Battery used in the SonicW ALL [...]

  • Seite 82

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 81 Copyright Notice © 2008 SonicW ALL, Inc. All rights re served. Under the copyright la ws, this manual or the software descri bed within, can not be copied, in whole or p art, without the written consent of the manufactu rer , except in the normal use of the sof t ware to make a backup copy . The[...]

  • Seite 83

    Page 82 Declaration of Conformity Notes[...]

  • Seite 84

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 83 Notes[...]

  • Seite 85

    Page 84 Declaration of Conformity Notes[...]

  • Seite 86

    ©20 0 8 So ni cWA L L, I nc . is a r eg is te re d tr a de ma rk o f S on icW AL L, I nc . O th er p ro du ct n am es m ent i on ed h er ei n m ay b e tr a de ma rk s a nd /o r re gi s ter ed t r ad em ar k s o f th ei r re sp ec ti v e co mp a ni es . S pe c at io n s an d des cri pti o n s su bj ec t to ch an g e w ith ou t n ot i ce. T +1 40 8 [...]