SonicWALL SRA 1200/4200 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62

Go to page of

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of SonicWALL SRA 1200/4200, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of SonicWALL SRA 1200/4200 one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of SonicWALL SRA 1200/4200. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of SonicWALL SRA 1200/4200 should contain:
- informations concerning technical data of SonicWALL SRA 1200/4200
- name of the manufacturer and a year of construction of the SonicWALL SRA 1200/4200 item
- rules of operation, control and maintenance of the SonicWALL SRA 1200/4200 item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of SonicWALL SRA 1200/4200 alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of SonicWALL SRA 1200/4200, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the SonicWALL service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of SonicWALL SRA 1200/4200.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the SonicWALL SRA 1200/4200 item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    SonicWALL Anti-Virus Router 80 Getting Sta rted Guide Page 1 Getting Star ted Guide SonicW ALL Secure Remote A cc ess Appliances SECURE REMOTE A C CESS SRA 1200/4200 Getting Star ted Guide[...]

  • Page 2

    SonicWALL SRA 1200/4200 Gett ing Started Guide Page 1 SonicW ALL SRA 1200/4200 Getting S tarted Guide This Getting St arted Guide contains inst allation procedures and configu ra tion guidelines for deploying a SonicW ALL SRA 1200/4200 appliance into an existing or new network. This document addresse s the most common use-case scenarios a nd networ[...]

  • Page 3

    Page 2 Document C o nt ents[...]

  • Page 4

    SonicWALL SRA 1200/4200 Getting Start ed Guide Page 3 Setting Up Y our Network In this Section: This section provides pre-configu ration information. Review this section before setting up your SonicWALL SRA 1200/4200 appliance. • SRA 1200 System Requirements - page 4 • SRA 4200 System Requirements - page 5 • Selecting a Deployment Scenario - [...]

  • Page 5

    Page 4 SRA 1200 System Requirements SRA 1200 System Requirements Before you begin the se tup proc ess, veri fy that your package contains the following parts: • One SonicW ALL SRA 1200 appliance • One SonicWALL SRA 1200/4200 Getting St arted Guide • One straight-thr ough Etherne t cabl e • One serial CLI cable • One rack-mount kit • One[...]

  • Page 6

    SonicWALL SRA 1200/4200 Getting Start ed Guide Page 5 SRA 4200 System Requirements Before you begin the se tup proc ess, veri fy that your package contains the following parts: • One SonicW ALL SRA 4200 appliance • One SonicWALL SRA 1200/4200 Getting St arted Guide • One straight-thr ough Etherne t cabl e • One serial CLI cable • One rack[...]

  • Page 7

    Page 6 What You Need to Begin What Y ou Need to Begin • Administrative access to the network gateway device • A Windows, Linux, or MacOS computer to use as a management station for initial configuration of the SonicW ALL S RA 1200/4200 • A Web browser supporting Java Script and HTTP uploads (See previous pages for supported Web browsers) • [...]

  • Page 8

    SonicWALL SRA 1200/4200 Getting Start ed Guide Page 7 Selecting a Deployment Scenario The deployment scenarios described in this section are based on actual customer deployments and are SonicW AL L- recommended deployment best practice s for SRA appliances . A SonicW ALL SRA appl iance is commonly deployed in “one- arm” mode over the DMZ or Opt[...]

  • Page 9

    Page 8 Selecting a Deployment Scenario Scenario B: SRA on an Existing DMZ Scenario C: SRA on the LAN SonicW ALL SRA 120 0/4200 Deployment Sc enarios DMZ LAN WA N OPT , X2, etc X1 X0 X0 Remote Users Network Nodes SonicWALL UTM Appliance E7500 Network Security Appliance Switch Switch Router 1200 SRA Secure Remote Access X0 X1 CONSOLE PWR TEST ALARM S[...]

  • Page 10

    SonicWALL SRA 1200/4200 Getting Start ed Guide Page 9 Applying Power to the SonicW ALL SRA 1. Plug one end of the power cord into the SonicW ALL SRA 1200/4200 and the other into an appropriate power outlet. 2. T urn on the pow er switch located on the rear of the appliance next to the power cord. The 'Pwr' LED on the front panel lights up[...]

  • Page 11

    Page 10 Applying Power to th e SonicWALL SRA 4. The ‘SonicWALL SRA Management Interface Login ’ displays and prompts you to en ter your user na me and password. Enter “ ad min ” in the User Name field, “ password ” in the Password field, select “ LocalDomai n ” from the Domain drop-down list, and click the Logi n button . Y ou are n[...]

  • Page 12

    SonicWALL SRA 1200/4200 Get ting Started Gui de Page 11 Connecting Y our Appliance In this Section: This section provides procedures for conne cting your SonicW ALL SRA 1200/4200 appliance. • Configuring Y our SRA 12 00/4200 - page 12 • Connecting Y our SRA 1200/4200 - page 18 2[...]

  • Page 13

    Page 12 Configuring Your SRA 1200/42 00 Configuring Y o ur SRA 1200/4200 Once your SonicWALL SRA 1200/4200 is connected to a computer through the mana gemen t port (X0), it can be configured through the Web- based managemen t interface. Setting Y our Administrator Password 1. From the management interfa ce, select the Use rs > Local Users page. [...]

  • Page 14

    SonicWALL SRA 1200/4200 Get ting Started Gui de Page 13 Adding a Local User 1. Navigate to Use rs > Local Users pag e. 2. Click the Add User button. 3. Enter a User Name . 4. Select LocalDomain from the Group/Domain drop-do wn menu. 5. Enter a Password for the user . Confirm the new password. 6. Select User from the User T ype drop-down menu. 7.[...]

  • Page 15

    Page 14 Configuring Your SRA 1200/42 00 Configuring SRA Network Settings Y ou wil l now configure your SR A 1200/4200 network settings. Refer to the notes you took in the “Recording Configuration Information” on page 6 to complete this section. Configuring DNS / W INS 1. Navigate to the Network > DNS page in the mana gement interface. 2. Ent[...]

  • Page 16

    SonicWALL SRA 1200/4200 Get ting Started Gui de Page 15 3. In the Interface Settings dialog box, s et the IP address and subnet mask to: 4. Click OK . Note that you will l ose connection to the SRA. 5. Reset the manageme nt computer to have a static IP address in the range you just set for the X0 interface , for example, 10.1.1.20 or 192.168.200.20[...]

  • Page 17

    Page 16 Configuring Your SRA 1200/42 00 Adding a NetExtender Client Route NetExtender allows remote cli ents to have seamless access to resources on your local network. Y ou can also enable Tunnel All Mode so that, when NetExten der clien ts connect, all the traffic will be tunneled through the NetExtender conne ction. T o configure a Ne tExt ender[...]

  • Page 18

    SonicWALL SRA 1200/4200 Get ting Started Gui de Page 17 Setting Y our NetExtender Address Range The NetExtender IP range defines the IP address pool from which addresses will be assigned to remote users du ri ng NetExtender sessions. The range needs to be large enough to accommodate the maximum number of concurrent NetExtende r users you wish to su[...]

  • Page 19

    Page 18 Connecting Your SRA 1200/ 4200 Connecting Y our SRA 1200/4200 Before continuing, refe rence t he diagrams on the followi ng pages to connect the SonicW ALL SRA 1200/4200 to your network. Refer to the options in “Selecting a Deployment Scenario” on page 7 to determine the proper scenario for your networ k configuration: • Scenario A: C[...]

  • Page 20

    SonicWALL SRA 1200/4200 Get ting Started Gui de Page 19 Scenario B: Connecting Y our Network Interfaces Scenario B: SRA on an Existing DMZ T o connect the SonicWALL SRA 1200/4200 using Scenario B, perform the following steps: 1. Connect one en d of an Ethern et cable to an unused port on your DMZ , ei ther directly to the OPT or X2 on your existing[...]

  • Page 21

    Page 20 Connecting Your SRA 1200/ 4200[...]

  • Page 22

    SonicWALL SRA 1200/4200 Getting St arted Guide Page 21 Registering Y our Appliance In this Section: This section provides in structions for registering your SonicW ALL SRA 1200/4200 appl iance. • Creating a MySonicWALL Account - page 22 • Registering Y our SonicWALL SRA - page 22 • Services and Licensing - page 23 Note: Registration is an imp[...]

  • Page 23

    Page 22 Creating a MySonicWALL Account Creating a MySonicW ALL Account A MySonicW ALL account is require d fo r pro duct registration. If you already have an account, continue to the following secti on. Perform the following steps to create a MySoni cW ALL account: 1. In your browser , navi gate to www .mysoni cwall.com. 2. In the login screen, cli[...]

  • Page 24

    SonicWALL SRA 1200/4200 Getting St arted Guide Page 23 Services and Licensing This section contains the following subsectio ns: • Service Management - page 23 • Flexible Per-User Li censing - page 24 • Activating Services and Software - page 24 • T rying or Purchasin g Services - page 25 Service Management The Service Management page in MyS[...]

  • Page 25

    Page 24 Services and Licensing The following produ cts and services are available for the SonicW ALL SRA 1200/4200 appl iance: • Gateway Service Bundles : • Per-user license upgrades in flexibl e block incremen ts • Desktop and Server Software: • Virtual Assist • Web Application Firewall •V i e w P o i n t • Support Services: • Dyna[...]

  • Page 26

    SonicWALL SRA 1200/4200 Getting St arted Guide Page 25 3. In the 'Activate Service' page, type or paste your key into the Activation Key field and then click Submit . Once the service is activat ed, you will see an expirati on date or a license key string in the S tatus column on the Service Management page. T rying or Purchasing Services[...]

  • Page 27

    Page 26 Services and Licensing[...]

  • Page 28

    SonicWALL SRA 1200/4200 Getting St arted Guide Page 27 Network Configuration In this Section: This section pro v id es det ail e d ov erviews of deployment scenarios, as well as configuration instructio ns for connecting your SonicW ALL SRA to various network devices, includi ng gateway appliances. • Scenario A: SRA on a New DMZ - page 27 • Sce[...]

  • Page 29

    Page 28 Scenario A: SRA on a New DMZ Connecting to a SonicW ALL Security App liance 1. Using a computer connected to your LAN, launch your Web browser and enter the IP address of your existin g SonicW ALL security app liance in the Location or Address field. 2. When the management interfac e displays, enter your user name and password in the approp[...]

  • Page 30

    SonicWALL SRA 1200/4200 Getting St arted Guide Page 29 6. Select the Gateway A V , Intrusion Prevention Service and Anti-Spyware checkboxes. Click OK . 7. On the 'Edit Interface' window , enter the IP address for this interface in the IP Address field. (For example, “192.168.200.2”. This should be the same address you created in "[...]

  • Page 31

    Page 30 Scenario A: SRA on a New DMZ 5. On the 'Server Private Network Confi guratio n' page, enter the following , and click Next : 6. On the 'Server Public Information' page, accept the default IP addres s , or enter an IP address in your allowed public IP range. Click Next . Note: The default IP address is the WAN IP address [...]

  • Page 32

    SonicWALL SRA 1200/4200 Getting St arted Guide Page 31 6. In the 'Add Address Object' dialog box, create an address object for the X0 interface IP address of the SonicWALL SRA: 7. Click Add to create the object. Once done, click Close . 8. On the 'Network > Address Objects' page, in the ‘Address Groups’ section, click . 9[...]

  • Page 33

    Page 32 Scenario B: SRA on an Existing DMZ 13. In the 'Add Rule' window , create a rule to allow acces s to the LAN for the address group you just created: 14. Click OK to create the rule. Continue to "T esti ng Y our Remote Connection" on page 39 Scenario B: SRA on an Existing DMZ This section provides procedur es to config ure[...]

  • Page 34

    SonicWALL SRA 1200/4200 Getting St arted Guide Page 33 Allowing W AN -> DMZ Connection If you are already forwardin g HTTP or HTTPS to an internal server , and you only have a single public IP address, you will need to select different (unique ) ports of operati on for eithe r the existing servers or fo r the SonicW ALL SRA appliance, because bo[...]

  • Page 35

    Page 34 Scenario B: SRA on an Existing DMZ Allowing DMZ -> LAN C onnection When users have connected to the SRA, they need to be able to connect to resourc e s on the LAN. 1. Navigate to the Network > Address Objects page. 2. In the 'Address Objects' section, click . 3. In the 'Add Object' dialog box, create an addres s ob[...]

  • Page 36

    SonicWALL SRA 1200/4200 Getting St arted Guide Page 35 7. In the 'Add Address Object Group' dialog box, create a group for the X0 interface IP address of your SonicWALL SRA and the NetExtender IP range, then click OK . • Enter a name for the group . • In the left column, select the two group s you create d and click the arrow button .[...]

  • Page 37

    Page 36 Scenario C: SRA on the LAN Scenario C: SRA on the LAN This section pro vides proc edures to configure your ga te w a y appliance based on Scenario C. This section contains the following subsections: • Connecting to a SonicWALL Security Appliance - page 36 • Configuring SRA -> LAN Connectivity - page 36 • Setting Public Server Acces[...]

  • Page 38

    SonicWALL SRA 1200/4200 Getting St arted Guide Page 37 6. In the 'Add Object' dialog box, create an addres s ob ject for the X0 interface IP address of your SonicWALL SRA, then click OK . 7. On the 'Network > Address Ob jects' page, in the 'Address Groups' section, click . 8. In the 'Add Address Object Group&ap[...]

  • Page 39

    Page 38 Scenario C: SRA on the LAN 1 1. In the 'Add Rule' window , create a rule to allow access to the LAN for the address group you just created: 12. Click OK to finish creating the rule. Setting Public Server Access 1. Click the Wizards icon in the top right corne r of the SonicOS management interface. 2. Select the Public Server Wizar[...]

  • Page 40

    SonicWALL SRA 1200/4200 Getting St arted Guide Page 39 T esting Y our Remote Connection Y ou have now configured your SonicWALL security appliance and SonicW ALL SRA for secure SSL-VPN remote access.This section provides instructions to verify your conn ection using a remote client on the WAN. V e rifying a User Connection from the Internet 1. From[...]

  • Page 41

    Page 40 Testing Your Remote Connection[...]

  • Page 42

    SonicWALL SRA 1200/4200 Getting St arted Guide Page 41 Upgrading Y our Appliance In this Section: This section provid es procedures for up grading an exis ting SRA SSL VPN image on a SonicW ALL SRA 4200, 1200 to a newer version. • Obta ining the L atest SRA SSL VPN Image - page 42 • Exporting a Copy of Y our Configuration Settings - page 42 •[...]

  • Page 43

    Page 42 Obtaining the Latest SRA SSL VPN Imag e Obtaining the Latest SRA SSL VPN Image T o obtain a new SRA SSL VPN image file for your SonicW ALL security appliance, connect to your mysonicwall .com account at < http://www .mysonicwall.com >. Note: If you have already registered your SonicWALL SSL VPN appliance, and you selected Notify me wh[...]

  • Page 44

    SonicWALL SRA 1200/4200 Getti ng St arted Guide Page 43 Uploading a New SRA SSL VPN Image Note: SonicWALL SRA 4200/12 00 appliances do not support downgrading an image and using th e configuration settings file from a higher version. If you are downgrading to a previous version of a SRA SSL VPN image, you must select Uploaded Firmware with Factory [...]

  • Page 45

    Page 44 Resetting the Appliance Using SafeMode Resetting the Appliance Using SafeMode If you are unable to connect to the SonicWALL security appliance’s management interface, you can restart the SonicW ALL security appliance in SafeMode. Th e SafeMode feature allows you to quickly recover from uncertain configuration states with a simplified mana[...]

  • Page 46

    SonicWALL SRA 1200/4200 Getting St arted Guide Page 45 Support and T raining Options In this Section: This section pro v id es overvi ews of customer support and training options for SonicW ALL SRA appliances. • Customer Support - page 46 • Knowledge Base - page 46 • User Forums - page 47 • T ra ining - page 48 • Related Documentation - p[...]

  • Page 47

    Page 46 Customer Support Customer Support SonicW ALL ’ s custome r support Web site is where you will find featured support topics, tutorials, a nd more. If you need further assistance, SonicW ALL offers telephone, email, and Web- based support to customers with valid Wa rranty Support or a purchased support contract. Please review our Warranty S[...]

  • Page 48

    SonicWALL SRA 1200/4200 Getting St arted Guide Page 47 User Forums The SonicWALL User Forums is a resource that provides users the ability to communicate and discuss a variety of security and appliance subject ma tters. Categories include : • SSL-VPN topic s • VPN Client to pics • Continuous Data Protection topics • Email Security topics ?[...]

  • Page 49

    Page 48 Training T raining SonicW ALL offers an extensive sales and technical training curriculum for Network Administ rators, Security Experts and SonicW ALL Medallion Partners who need to enhance th eir knowledge and maximize their investment in SonicWALL Products and Security Applications. Son icW ALL T raining provides the following resources f[...]

  • Page 50

    SonicWALL SRA 1200/4200 Getting St arted Guide Page 49 Related Documentation See the following relate d documents for more information: • SonicOS SSL-VPN Administrator ’s Guide • SonicOS SSL-VPN User ’s Guide • SonicOS SSL-VPN Release Notes • SonicOS SSL-VPN Feature Modules • SonicOS Administrator ’s Guide • SonicOS Feature Module[...]

  • Page 51

    Page 50 SonicWALL Live Product Demos SonicW ALL Live Product Demos Get the most out of your appliance with the complete line of SonicW ALL products. The SonicWALL Live Demo Site provides free test drives of SonicWA LL security products and services through inte ractive live product installations: • SSL-VPN Secure Remote Access • Unified Threat [...]

  • Page 52

    SonicWALL SRA 1200/4200 Getting St arted Guide Page 51 SonicW ALL Secure W ireless Network Integrated Solutions Guide Looking to go wireless? Have questions abou t what it takes to build a truly “secure” wireless network? Check out the SonicW ALL Secure Wireless Networ k Integrated Solutions Guide. This book is the official guide to SonicWALL ?[...]

  • Page 53

    Page 52 SonicWALL Secure Wireless Networ k I ntegrated Solutions Gui de[...]

  • Page 54

    SonicWALL SRA 1200/4200 Get ting Started Gui de Page 53 Safety and Regulatory Information In this Section: This section pro vi d es safety a nd regulatory information for the SonicW ALL SRA 1200/4200 appliances. • SonicW ALL SRA 1200/4200 Appliance Reg ulatory S tatement and Safety Instructions - page 54 • Copyright Notice - page 58 • T radem[...]

  • Page 55

    Page 54 SonicWALL SRA 1200/4200 Ap pliance Regulatory Statement and Safety Instructio ns SonicW ALL SRA 1200/4200 Appliance Regulatory Statement and Safety Instructions This regulatory informatio n can also be found in the electronic file, “ SonicW ALL_SRA_Regulato ry_S t atement .p df ,” located on the SonicW ALL Web site: < http://www .son[...]

  • Page 56

    SonicWALL SRA 1200/4200 Get ting Started Gui de Page 55 W eitere Hinweise zur Montage Das SonicW ALL Modell ist für eine Montage in einem standardmäßigen 19-Zoll-Rack konzipiert. Für eine ordnungsgemäße Montage sollten die folgenden Hinweise beachtet werden: • V ergewissern Sie sich, dass das Rack für die ses Gerät geeignet ist und verwen[...]

  • Page 57

    Page 56 SonicWALL SRA 1200/4200 Ap pliance Regulatory Statement and Safety Instructio ns FCC Part 15 Class A Notice NOTE: This equipment was tested and found to comply with the limits for a Class A digit al device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful inte rference when the[...]

  • Page 58

    SonicWALL SRA 1200/4200 Get ting Started Gui de Page 57 BMSI St atement (Class A) Regula tory Information for Korea Ministry of Information and T elecommunication Certification Numbers SWL-1RK23-07C and SWL-1RK23-088 All products wit h country code “” (blank) and “A” are made in the U SA. All products with country code “B” ar e made in [...]

  • Page 59

    Page 58 Copyright Notice Copyright Notice © 2010 SonicW ALL, Inc. All rights reserved. Under the copy right laws, this manu al or the software describe d within, can not be copied, in w hole or part, without the written consent of the manufacturer , except in the normal use of the software to make a backup copy . The same proprietary and copyright[...]

  • Page 60

    SonicWALL SRA 1200/4200 Get ting Started Gui de Page 59 Notes[...]

  • Page 61

    Page 60 Notes Notes[...]

  • Page 62

    SonicWALL Anti-Virus Router 80 Getting Sta rted Guide Page 1 ©20 10 S o ni cWALL, I n c. i s a regi s tered t rad e m ar ko f S o ni cWALL, I n c. O t h er p r o du c tn a m e sm enti o ned h erein m a yb et r a d e m ar ks and /o rr e g i s tere d trad e m ar ks of t h eir re sp e c ti v e comp ani e s. S p e c i c ati o n s and de sc ri p ti [...]