English dropdown-ico

SonicWALL SSL-VPN 2000 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86

Go to page of

Similar user manuals

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of SonicWALL SSL-VPN 2000, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of SonicWALL SSL-VPN 2000 one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of SonicWALL SSL-VPN 2000. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of SonicWALL SSL-VPN 2000 should contain:
- informations concerning technical data of SonicWALL SSL-VPN 2000
- name of the manufacturer and a year of construction of the SonicWALL SSL-VPN 2000 item
- rules of operation, control and maintenance of the SonicWALL SSL-VPN 2000 item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of SonicWALL SSL-VPN 2000 alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of SonicWALL SSL-VPN 2000, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the SonicWALL service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of SonicWALL SSL-VPN 2000.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the SonicWALL SSL-VPN 2000 item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    S e c u r e R e m o t e A c c e s s S o l u t i o n s A P P L I A N C E S S on i c W A LL S SL -V PN Se ri es SSL -V PN 2000 G e t t i n g S t a r t e d G u i d e[...]

  • Page 2

    SonicWALL SSL-VPN 2000 Getting Started Guide Pa ge 1 SonicW ALL SSL-VPN 2000 Appliance Getting S t arted Guide Thank you for your purch ase of th e SonicW ALL SSL-VPN 2000, the solution for secure remote access to mission-cr itical resources from virtually any end point—including desktops, laptop s, PDAs and smartphones. The SonicW ALL SSL-VPN 20[...]

  • Page 3

    Page 2 Before Y ou Begin Check Package Content s • One SonicW ALL SSL-VPN 2000 appliance • One SonicW ALL SSL-VPN 2000 Getting S tarted Guide • One SonicW ALL SSL-VPN Release Notes • One straight-through Etherne t cable • One rack-mount kit • One power cord* * A power cord is included only with units shipped to North America. What Y ou [...]

  • Page 4

    SonicWALL SSL-VPN 2000 Getting Started Guide Pa ge 3 Selecting a SonicW ALL Recommended Deployment Scenario The deployment scenarios describ ed in this section are based on actual customer deployments and are So nicW ALL-recomm ended deployment best p ractices. This section describes three co mm o n dep loym e nts of the SonicWALL SSL-VPN 2000 . In[...]

  • Page 5

    Page 4 Applying Power to the SonicW ALL SSL-VPN 2000 1. Plug the power cord into th e SonicW ALL SSL-VPN 2000 and into an appropriate power outlet. 2. T urn on the power switch on the rear of the appliance next to the power cord. The Power LED on the fr ont p anel lig ht s up gr een when you turn on the SonicW ALL SSL-VPN 2000. The T est LED lights[...]

  • Page 6

    SonicWALL SSL-VPN 2000 Getting Started Guide Pa ge 5 Accessing the Management Interface T o access the W eb-based management interface of the SonicW ALL SSL-VPN 2000: 1. Connect one end of an Ethernet ca ble into the X0 port of your SonicW ALL SSL- VPN 2000. Connect the other end of the cabl e into the computer you are using to manage the SonicW AL[...]

  • Page 7

    Page 6 5. The SonicW ALL SSL-VPN management interface disp lays and prompts yo u to enter your user name and p assword. Enter “admin” in the User Name field, “pas swor d” in the Password field, select LocalDomain from the Domain drop-down list and click the Login button. Continue to S tep If Y ou Cannot Logi n to the SSL-VPN If you cannot c[...]

  • Page 8

    SonicWALL SSL-VPN 2000 Getting Started Guide Pa ge 7 Configuring Y our SonicW ALL SSL-VPN 2000 Once your SonicW ALL SSL-VPN 2000 is connected to a compute r through the management port (X0) , it can be configured through the W eb-based management interface. This section includes the following subsections: • “Setting Y our Administrator Password[...]

  • Page 9

    Page 8 3. Enter a password for th e “admin” account in the Password field. Re-enter the password in the Confirm Password field. 4. Click the OK butto n to apply changes. Adding a Local User 1. Navigate to the Users > Local Users page. 2. Click the Add User button. 3. Enter t he desired user n ame in the User Name field. 4. Select LocalDomain[...]

  • Page 10

    SonicWALL SSL-VPN 2000 Getting Started Guide Pa ge 9 Setting Time Zone 1. Navigate to the System > Time page . 2. Select the appr opriate time zone from the drop-down menu. 3. Click the Accept button.  Note: Setting the time correctly is essential to many of the operations of the SonicWALL SSL-VPN 2000. Be sure to se t the time-zone correctly[...]

  • Page 11

    Page 10 4. (Optional) Enter a secondary DNS server in th e Secondary DNS Server field. 5. (Optional) Enter your DNS Domain in the DNS Domain Field. 6. (Optional) Enter your WINS server s in the Primary WINS Server and Secondary WINS Server fields. 7. Click the Accept button. Configuring the X0 IP address for Scenario B and Scenario C If you are dep[...]

  • Page 12

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 11 3. In the Interface Settings dialog box, set the IP address and netmask to: 4. Click OK . When you click OK , you will lose your connection to the SSL-VPN. 5. Reset the computer you use to manage the SonicW ALL SSL-VPN 2000 to have a static IP addres s in the range you just set for the X0 interfa[...]

  • Page 13

    Page 12 3. Select X0 in the Interfaces drop down list. 4. Click the Accept button. Adding a NetExtender Client Route NetExte nde r allows remote client s to have seamle ss access to reso urces on your lo cal network. 1. Navigate to the NetExtender > Client Rout es page. 2. Click the Add Client Route button. 3. Enter the IP address of the trusted[...]

  • Page 14

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 13 Setting your NetExtender Address Range The NetExtender IP r ange defines the IP ad dress pool from which addresses will be assigned to remote users du ring NetExtender sessions. The range needs to be large enough to accommodate the maximum num ber of concurrent NetExtender users you wish to suppo[...]

  • Page 15

    Page 14 T o set your NetExtender ad dress range, perform the following step s: 1. Navigate to the NetExtender > Client Settings page . 2. Enter an address range for yo ur clients in the Client Address Range Begin and Client Address Range End fields. If you have too few available addresses to s upport your desir ed number of concurrent NetExtende[...]

  • Page 16

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 15 Connecting the SonicW ALL SSL-VPN 2000 Before continuing, reference the diagra ms on the following pages to connect the SonicW ALL SSL-VPN 2000 to your network. Refer to the table in “Selecting a SonicW ALL Recommended Deployment Scenario” on pa ge 3 to determine the proper scenario for your [...]

  • Page 17

    Page 16 Scenario B: Configuring Y our Network Interface Configure your SonicW ALL SSL-VPN 2000 to connect with your SonicW ALL UTM appliance under network configur ations given in Scenario B. On your SonicW ALL SSL-VPN 2000: 1. Navigate to the Network > Interfaces page . 2. Click the Configure button for the X0 port. 3. If configuring with Scena[...]

  • Page 18

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 17 Scenario B: Connecting the SonicW ALL SSL-VPN 2000 T o con nect the SonicW ALL SSL-VPN 2000 u sing Scenario B, perform the fo llowing steps: 1. Connect one end of an Ethern et cable to an unused po rt on your DMZ, either directly to the OPT or X2 on your existing SonicWALL UT M appliance or to a [...]

  • Page 19

    Page 18 Scenario C: Configuring Y our Network Interface Configure your SonicW ALL SSL-VPN 2000 to connect to your SonicWALL UTM appliance under network configur ations given in Scenario C. On the SonicW ALL SSL-VPN 2000: 1. Navigate to the Network > Interfaces page . 2. Click the Configure button for the X0 port. 3. Enter an unused IP address in[...]

  • Page 20

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 19 Scenario C: Connecting the SonicW ALL SSL-VPN 2000 T o connect the SonicWALL SSL-VPN 2000 using Scenario C, perf orm the fo llowin g steps: 1. Connect one end of an Ethernet ca ble to an unused port on your LAN hub or switch. Scenario C: SSL-VPN on the LAN 2. Connect the other end of the Ethern e[...]

  • Page 21

    Page 20 Configuring Y our Gateway Device Now that you have set up your SonicW ALL SSL-VPN 2000, you need to configure your gateway device to work with the SonicW ALL SSL-VPN 2000. Refer to the table in “Selecting a SonicW ALL Recommended Deployment Scenario” on pa ge 3 to determine the proper scenario for you r network configuration. This secti[...]

  • Page 22

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 21 Scenario A: Configuring a DMZ or OPT Port in SonicOS S tanda rd 1. Navigate to the Network > Settings page . 2. Click the Configure button for the DMZ or OPT interface. 3. Select the DMZ in NA T Mode radio button. 4. Enter 192.168.200.2 in the DMZ Private Address fie ld. 5. Enter 255.255.255.0[...]

  • Page 23

    Page 22 4. In the Step 1: Access Rule T ype page, se lect Public Server Rule an d then click Next . 5. In the Step 2: Public Server page, perfor m the following selections and then click Next : 6. In the Congratulations p age, clic k Apply to cr eate the rules and allow access from the W AN to the SonicW ALL SSL-VPN appliance on the DMZ. Service HT[...]

  • Page 24

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 23 If you are allowing HTTP access to the SonicW ALL SSL-VPN appliance, create a public server access rule for HTTP: 1. In the Firewall > Access Rules page, click . 2. In the Welcome to the Network Acces s Rules Wizard p age, click Next . 3. In the Step 1: Access Rule T ype page, select Public Se[...]

  • Page 25

    Page 24 7. In the Step 4: Access Rule Source Interface and Address p age, perform the following selections and then click Next : Interface DMZ IP Address Begin The X0 IP address of the SonicWALL SSL-VPN appliance, 192.168.200.1 by default IP Address End The X0 IP address of the SonicWALL SSL-VPN appliance, 192.168.200.1 by default[...]

  • Page 26

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 25 8. In the Step 5: Access Rule Destina tion Interface and Address p age, pe rf or m th e following selections and then click Next : 9. In the Step 6: Access Rule Time p age, leave Tim e Ac tiv e set to Always Active unless you want to limit when you want SS L-VPN clients to have access to the LAN.[...]

  • Page 27

    Page 26 Create access to the LAN for NetExtender: 1. In the Firewall > Access Rules page, click . 2. In the Welcome to the SonicW ALL Network Access Rules p age , click Next . 3. In the Step 1: Access Rule T ype page, se lect General Rule . Click Next . 4. In the Step 2: Access Rule Service page, select Any . Click Next . 5. In the Step 3: Acces[...]

  • Page 28

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 27 Scenario A: Adding a New SSL-VPN Custom Zone in Sonic OS Enhanced 1. Navigate to the Network > Interfaces page . 2. Click Configure button for the X2 int erface (or any other available interfa c e ). 3. Select Create New Zone in Zone field. The Add Zone window opens. 4. T y pe SSL VPN in the N[...]

  • Page 29

    Page 28 Scenario A: Allowing W AN -> SSL-VPN Connection in SonicOS Enhanced Follow this procedure if you are connecting yo ur SonicW ALL SSL-VPN 2000 to a SonicWALL UTM appliance runnin g SonicOS Enhance d . If your SonicW ALL UTM appliance is running SonicOS St andard , refer to “Scenario A: Allowing W AN -> DMZ Connection in SonicOS S tan[...]

  • Page 30

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 29 4. In the Add Service Group dialog box, create a ser vice group for HTTP a nd HTTPS: • Enter a name for the service. • Select both HTTP and HTTPS and click the right arrow button . • Click OK when both HTTP and HTTPS are in the right colum n . 5. In the Server Private Network Configuration [...]

  • Page 31

    Page 30 7. In the Server Public Informatio n page, either accep t the default IP addr ess or enter an IP address in your allowe d pu blic IP range.  Note: The default IP address is the WAN IP address of your SonicWALL UT M appliance. If you accept this default, all HTTP and HTTPS traf fic to this IP address will be routed to yo ur SonicWALL SSL-[...]

  • Page 32

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 31 Scenario A: Allowing SSL-VPN -> LAN Connection in SonicOS Enhanced When users have connected to the SSL-VPN, they need to be able to connect to resources on the LAN. 1. In the administration interface, navigate to the Ne twork > Address Object s pag e. 2. In the Address Objects section, cli[...]

  • Page 33

    Page 32 5. In the Add Object dialog box, cr eate an address object for the X0 interface IP address of your SonicW ALL SSL-VPN 2000: Click OK to create the object. 6. On the Network > Address Object s page, in the Address Gr oups section, click . 7. In the Ad d Address Object Grou p dialog box, create a group for th e X0 interface IP address of y[...]

  • Page 34

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 33 9. On the Firewall > Access Rules page in the matrix view , click the S SL VPN > LAN icon. 10. On the resulting Firewall > Access Rules page, click .[...]

  • Page 35

    Page 34 1 1. In the Add Rule window , create a rule to allow access to the LAN for the address group you just created: Click OK to create the rule. Continue to S tep Action Allow From Zone SSL VPN T o Zone LAN Service Any Source The address group you just cre ated, such as SonicW ALL_SSL VPN_Group Destination Any Users Allowed All Schedule Always o[...]

  • Page 36

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 35 Scenario B: SSL-VPN on Existing DMZ This section provides procedures to co nfigure your gateway appliance based on Scenario B. This section cont ains the following subsections: • “Scenario B: Connectin g to the SonicW ALL UTM Appliance” on page 35 • “Scenario B: Allowing W AN - > DMZ[...]

  • Page 37

    Page 36 4. In the Step 1: Access Rule T ype page, se lect Public Server Rule an d then click Next . 5. In the Step 2: Public Server page, perfor m the following selections and then click Next : 6. In the Congratulations p age, clic k Apply to cr eate the rules and allow access from the W AN to the SonicW ALL SSL-VPN appliance on the DMZ. Service HT[...]

  • Page 38

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 37 If you are allowing HTTP access to the SonicW ALL SSL-VPN appliance, create a public server access rule for HTTP: 1. In the Firewall > Access Rules page, click . 2. In the Welcome to the Network Acces s Rules Wizard p age, click Next . 3. In the Step 1: Access Rule T ype page, select Public Se[...]

  • Page 39

    Page 38 6. In the Step 4: Access Rule Source Interface and Address p age, perform the following selections and then click Next : Interface DMZ IP Address Begin The X0 IP address of the SonicWALL SSL-VPN appliance within your DMZ range, for example 10.1.1.200 . IP Address End The X0 IP address of the SonicWALL SSL-VPN appliance, the same as above, f[...]

  • Page 40

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 39 7. In the Step 5: Access Rule Destina tion Interface and Address p age, pe rf or m th e following selections and then click Next : 8. In the Step 6: Access Rule Time p age, leave Tim e Ac tiv e set to Always Active unless you want to limit when you want SS L-VPN clients to have access to the LAN.[...]

  • Page 41

    Page 40 Create access to the LAN for NetExtender: 1. In the Firewall > Access Rules page, click . 2. In the Welcome to the SonicW ALL Network Access Rules p age , click Next . 3. In the Step 1: Access Rule T ype page, se lect General Rule . Click Next . 4. In the Step 2: Access Rule Service page, select Any . Click Next . 5. In the Step 3: Acces[...]

  • Page 42

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 41 Scenario B: Allowing W AN -> DMZ Connection in SonicOS Enhanced Follow this procedure if you are co nnecting your SonicW ALL SSL-VPN 2000 to a SonicW ALL UTM appliance running SonicOS Enhanced . If your SonicW ALL UTM appliance is running SonicOS S tandard , refer to “Scenario A: Allowing W [...]

  • Page 43

    Page 42 4. In the Add Service Grou p dialog box, create a service g roup for HTTP and HTTPS: • Enter a name for the service. • Select both HTTP a nd HTTPS and click . • Click OK when both HTTP and HTTPS are in the right column. 5. In the Public Server T ype page, click Next . 6. In the Server Private Netwo rk Configuration p age, enter the fo[...]

  • Page 44

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 43 7. In the Server Public Information page, either accept the default IP address or ente r an IP address in your allowed public IP range.  Note: The default IP address is the WAN IP address of your SonicWALL UTM appliance. If you accept this default, all H TTP and HTTPS traffic to this IP addres[...]

  • Page 45

    Page 44 3. In the Add Object dialog box, cr eate an address object for the X0 interface IP address of your SonicW ALL SSL-VPN 2000: Click OK to create the object. 4. Click again to create an address object for the NetExtender range. 5. In the Add Object dialog box, cr eate an address object for the X0 interface IP address of your SonicW ALL SSL-VPN[...]

  • Page 46

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 45 7. In the Add Ad dress Object Group dialog box, create a group for th e X0 interface IP address of your SonicW ALL SSL-VPN 2000 and the NetExtender IP range: • Enter a name for the grou p. • In the left column, se lect the two groups you crea ted and click the arrow button . • Click OK when[...]

  • Page 47

    Page 46 1 1. In the Add Rule window , create a rule to allow access to the LAN for the address group you just created: Click OK to create the rule. Continue to S tep Action Allow From Zone DMZ T o Zone LAN Service Any Source The address group you just created, such as SonicW ALL_SSL VPN_Group Destination Any Users Allowed All Schedule Always on Ena[...]

  • Page 48

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 47 Scenario C: SSL-VPN on the LAN This section provides procedures to co nfigure your gateway appliance based on Scenario C. This section cont ains the following subsections: • “Scenario C: Connecting to the SonicW ALL UTM Appliance” on page 47 • “Scenario C: Config u ring SSL -VPN -> L[...]

  • Page 49

    Page 48 3. In the Add Object dialog box, cr eate an address object for the X0 interface IP address of your SonicW ALL SSL-VPN 2000: Click OK to create the object. 4. Click again to create an address object for the NetExtender range. 5. In the Add Object dialog box, cr eate an address object for the X0 interface IP address of your SonicW ALL SSL-VPN[...]

  • Page 50

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 49 7. In the Add Ad dress Object Group dialog box, create a group for th e X0 interface IP address of your SonicW ALL SSL-VPN 2000 and the NetExtender IP range: • Enter a name for the grou p. • In the left column, se lect the two groups you crea ted and click the arrow button . • Click OK to c[...]

  • Page 51

    Page 50 1 1. In the Add Rule window , create a rule to allow access to the LAN for the address group you just created: Click OK to create the rule. Action Allow From Zone SSL VPN T o Zone LAN Service Any Source The address group you just cre ated, such as SonicW ALL_SSL VPN_Group Destination Any Users Allowed All Schedule Always on Enable Loggin g [...]

  • Page 52

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 51 Scenario C: Setting Public Server Access in SonicOS S t andard 1. Select Wizards in the left navigation bar . 2. Click the Network Access Rules W izard option and press the Next button. 3. Select Public Server Rule . 4. Enter a comment, such as “W AN to SSL-VPN” to describe your conne ction. [...]

  • Page 53

    Page 52 Scenario C: Setting Public Server Access in SonicOS Enhanced 1. Click the Wizards ico n in the top right corner of the SonicOS Enhanced management interface. 2. Select the Public Server Wizard option and then click Next . 3. Select We b Se rve r from the Server T ype drop-down menu. 4. Select the HTTP and HTTPS checkboxes. 5. Click the Next[...]

  • Page 54

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 53 8. Enter a comment, such as “W AN to SSL-VPN” to describe your conne ction. 9. Click the Next button to continue the Wizard. 10. V erify that the Public Server field contains the correct IP address ( Y ou can generally leave this at the default sett ing). 1 1. Click the Next button. 12. Click[...]

  • Page 55

    Page 54 T esting Y our SSL-VPN Connection Now you have configured your Son icW ALL UTM appliance and SonicW ALL SSL- VPN 20 00 for secure SSL VPN remote access.This section provides instructions to verify your SSL-VPN connectio n using a remote client on the W AN. V erifying a User Connect ion from the Internet 1. From a W AN connection out side of[...]

  • Page 56

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 55 5. Click the NetExtender button and complete the clie nt inst allation. When complete, the following message is displayed: 6. Ping a host on your corpor ate LAN to verify your SSL-VPN remote connection. Congratulations! Y ou have successfully set up your SonicWALL SSL-VPN 2000. Continue t o S tep[...]

  • Page 57

    Page 56 Registering Y our SonicW ALL SSL-VPN 2000 Before Y ou Register V erify that the time, DNS, and default r oute settings on your SonicW ALL SSL-VPN are correct bef ore you register you r appliance. T o verify or con figure the time set tings, navigate to the System > Time p age. T o verify or configure the DNS setting, navig ate to the Net[...]

  • Page 58

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 57 3. On the System > Licenses page, click Activate, Up grade, or Renew services . The License M anagement page is displayed. 4. If you have a mySonicW ALL.com account, enter yo ur mySonicW ALL.com user name and password into the fields and then click Submit . The display changes. 5. Enter a desc[...]

  • Page 59

    Page 58 6. Under Product Survey , fill in the requested information and then click Submit . The display change s to inform you that your SonicW ALL SSL-VPN 2000 is registe red. 7. Click Continue . 8. In the License Management p age, your latest license information is displayed. Congratulations Y our SonicW ALL SSL-VPN 2000 is now fully operational.[...]

  • Page 60

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 59 Configuring Dynamic DNS To begin using Dynamic DNS, you must first set up an account with one of the four free service providers listed below: • DynDNS.org • changeip.com • No-IP .com •y i . o r g It is possible to use multiple providers simult aneously. The re gistration process normally[...]

  • Page 61

    Page 60 To configure Dynamic DNS on the SonicW ALL UTM ap pliance, perform these steps: 1. On the Network > Dynamic DNS page, click the Add button . The Add DDNS Profile window is displayed. 2. If Enable this DDN S Profile is selected, the profile is administratively enabled, and the SonicW ALL UTM appliance takes the actions defined in the Onli[...]

  • Page 62

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 61 7. Enter the fully qualified domain na me (FQDN) of the ho stname you register ed with dyndns.org. Make sure you provide the same hostname and domain as you configured. 8. Y ou may optionally select Enable Wildcard and/or configure an MX entry in the Mail Exchanger field. 9. Click the Advanced ta[...]

  • Page 63

    Page 62 Configuring a St atic IP Address If you did not enable the SonicW ALL UTM appliance DHCP server , you must configure each computer with a st atic IP address from your LAN or WLAN IP addr ess range. Af ter the SonicW ALL SSL-VPN 2000 has restarted , follow the steps below for configuring yo ur network client s running any of the following Mi[...]

  • Page 64

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 63 Windows 2000 1. From your Windows Star t menu, select Settin gs . 2. Open Network and Dial-up Connections . 3. Click Properties . 4. Highlight Internet Protocol (TCP/IP) and click Proper ties . 5. Select Use the following IP address . 6. T ype an IP address from your LAN IP range IP address fi el[...]

  • Page 65

    Page 64 Mounting Guidelines The SonicW ALL SSL-VPN 2000 is designed to be mo unted in a standard 19-inch rack mount cabinet. The following condi tions are required for proper installa tio n: • Use the mounting hardwar e recommended by the rack manufacturer and en sure that the rack is adequate for the application. Son i cWALL includ es a rack mou[...]

  • Page 66

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 65 Glossary of Networking T erms ActiveX - A technology that allows the sharing of applications and data across the W eb. For example, Active X allows you to view Microsoft W ord and Adobe Acrobat documents within the Internet Explorer W eb browser wit hout downloading the files and launching t he a[...]

  • Page 67

    Page 66 SSL VPN - Secure Socket Layer Virtual Private Networking. A secured p rivate communications network usually used within a company , or by several different companies or organizations, communicating over a public network. SSL technology is used either for tunneling the entire network stack, or for securing what is essentially a Web proxy . S[...]

  • Page 68

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 67 SonicW ALL Global Support Services On your appliance, on the W eb, and on the ph one, we make it easy and fast to find the information you need to keep your SonicW ALL solution, and your network, running smoothly and efficiently . Use the Online Help. Ev er y SonicW ALL securit y app liance inclu[...]

  • Page 69

    Page 68 Customer Support SonicW ALL of fers Web-base d and telephone suppor t to customers who have a valid W arranty or who purchased a Support Contra ct. Please review our Warranty Support Policy for product cover age. SonicW ALL also offe rs a fu ll range of con sulting ser vices to meet your n eeds, fr om our in novative implemen tation ser vic[...]

  • Page 70

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 69 Extend Y our Support Coverage. SonicW ALL Dynamic Support Services extend the suppo rt coverage on your SonicW ALL solution beyond the warranty period. Ou r 8x5 1 and 24x7 suppor t services include critical software an d fir mware updates, expert telephone and Web-b ased support, Advance Exchange[...]

  • Page 71

    Page 70 Knowledge Port al The Knowledge Por tal allows user s to sear ch fo r S oni cWALL documents based on the following types of se ar ch too ls: •B r o w s e • Search for keywords • Full-t ext search For further information, na vigate to the Support > Knowledge Port al page at: < http://www .mysonic wall.com/ >[...]

  • Page 72

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 71 User Forums The SonicW ALL User Forums is a resour ce that provides users the ability to communicat e and discuss a vari ety of security and appliance subject matters. In this forum, the following categori es are available for users: • Content Security Manager topics • Continuous Dat a Protec[...]

  • Page 73

    Page 72 Tr a i n i n g SonicW ALL of fers an extensive sales and te chnical training curricu lum for Network Administrators, Security Experts and So nicW ALL Medallion Partners who need to enhance their knowledge an d maximize thei r investment in SonicW ALL Products and Security Applications. SonicW ALL Training provides the following resources fo[...]

  • Page 74

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 73 Related Document ation See the following related docu ments for more information: • SonicW ALL SSL-VPN Administrator ’ s Guide • SonicW ALL SSL-VPN Release Notes • SonicWALL SSL-VPN Feature Modules • SonicW ALL SSL-VPN 3.0 V i rtual Assist Feature Module • SonicW ALL SSL-VPN 3.0 NetEx[...]

  • Page 75

    Page 74 SonicW ALL Live Product Demos The SonicWALL Live Demo Site provid es free test drives of SonicW ALL security products and services throu gh inte ractiv e live product installations: • SSL VPN Secure Remote Access • Unified Threat Man agement Platform • Secure Cellular Wireless • Continuous Dat a Protection • Content Filtering • [...]

  • Page 76

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 75 SonicW ALL Secure Wire less Network Integrated Solutions Guide The Of ficial Guide to SonicW ALL ’s market -leading wireless networking and secu rity devices. This 512-p age book is available in hardcopy . Order the book directly from Elsevier Publishing at: < http://www .elsevier .com >[...]

  • Page 77

    Page 76 SonicW ALL Global T echnical Assistance Center Cont act Information T able 2: Global T echnical Assist ance Contact List Country T oll Free Phone Number T oll Phone Number Calling from North Americ a (Suppor t available in English) United S tates +1 888.777.1476 Canada +1 888.777.1476 Calling from Europe, the Mid dl e East an d Af rica (Sup[...]

  • Page 78

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 77 Calling from Asia Pacific (Support availabl e in English except for Japan where supp ort is offered in Jap anese only) Australia +1 800.35.1642 Hong Kong +1 800.93.0997 India 000.800.100.3395 Japan +81 (0)3.3457.8971 New Zealand 800.446489 Singapore + 800.1 10.1441 Calling from Latin America (S u[...]

  • Page 79

    Page 78 FCC Part 15 Class A Notice SonicW ALL SSL-VPN 2000 Regulato ry S tatement and Safety Instructions This regulatory information can also be foun d in the electronic file, “ SonicW ALL_SSL-VPN_Regulatory_S tatement.p df ,” located on the So nicW ALL Web site: < http://www .sonicwall.com >. FCC Part 15 Class A Notice NOTE : This equip[...]

  • Page 80

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 79 VCCI St atement Canadian Radio Frequenc y Emissions St atement This Class A digital app aratus complies with Cana dia n ICES-003. Cet appareil numériq ue de la classe A est conforme à toutes la norme NMB-003 du Canada. CISPR 22 (En 55022) Class A War nin g : This is a class A product. In a dome[...]

  • Page 81

    Page 80 Declaration of Conformity Regulatory Information for Korea All products with country code “” (blank) and “A” are made in the USA. All product s with country code “B” are made in China. All products with country code “C” or “D” are made in T aiwan R.O.C. Lithium Battery W arning The Lithium Battery used in the SonicW ALL [...]

  • Page 82

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 81 Copyright Notice © 2008 SonicW ALL, Inc. All rights re served. Under the copyright la ws, this manual or the software descri bed within, can not be copied, in whole or p art, without the written consent of the manufactu rer , except in the normal use of the sof t ware to make a backup copy . The[...]

  • Page 83

    Page 82 Declaration of Conformity Notes[...]

  • Page 84

    SonicWALL SSL-VPN 2000 Getting Started Guide Page 83 Notes[...]

  • Page 85

    Page 84 Declaration of Conformity Notes[...]

  • Page 86

    ©20 0 8 So ni cWA L L, I nc . is a r eg is te re d tr a de ma rk o f S on icW AL L, I nc . O th er p ro du ct n am es m ent i on ed h er ei n m ay b e tr a de ma rk s a nd /o r re gi s ter ed t r ad em ar k s o f th ei r re sp ec ti v e co mp a ni es . S pe c at io n s an d des cri pti o n s su bj ec t to ch an g e w ith ou t n ot i ce. T +1 40 8 [...]