Dell SonicWall NSA 2600, Getting Started Manual

Page 1: ...WALL Network Security Appliances NETWORK SECURITY NSA 2600 For localized product information see page 48 ᴹ ޣ ᵜൠॆӗ ؑ ˈ䈧 ㅜ 亥DŽ 䝻䞊䜹䝷䜲䝈䛥䜜䛯〇ရ䛾 ሗ䛻䛴䛔䛶䛿䚸㻠㻥㻌䝨䞊䝆䜢ཧ 䛧䛶䛟䛰䛥䛔䚹 Ь ࢿ ࢽ ؿ Е ࢇएձ ॳˈଜ ࡁۿ Para informação localizada do produto veja página 50 ...

Page 2: ...y be trademarks and or registered trademarks of their respective companies and are the sole property of their respective manufacturers 2014 04 P N 232 002067 53 Rev A NOTE A NOTE indicates important information that helps you make better use of your system CAUTION A CAUTION indicates potential damage to hardware or loss of data if instructions are not followed WARNING A WARNING indicates a potenti...

Page 3: ...ell SonicWALL NSA 2600 Chapter 1 Sections Include Introduction to the NSA Appliance on page 5 NSA 2600 Package Contents on page 6 The Front Panel on page 7 The Back Panel on page 8 Using this Getting Started Guide on page 9 Chapter 2 Sections Include Configuring the Appliance on page 11 Determining the WAN Type on page 12 System Requirements on page 12 Recording Configuration Information on page 1...

Page 4: ...ALL on page 22 Creating a MySonicWALL Account on page 22 Registration Overview on page 23 Registering in SonicOS on page 23 Alternative Registration Options on page 24 Security Services and Software on page 25 Activating Managing Licenses Using MySonicWALL on page 26 Upgrading Firmware on page 27 Chapter 4 Sections Include Deployment Scenarios on page 31 Advanced Deployment Scenarios on page 32 Co...

Page 5: ...4 In this Guide ...

Page 6: ...Dell SonicWALL NSA 2600 appliance provides front and rear illustrations of the NSA appliance and includes a flow diagram illustrating the steps for setting up the appliance NSA 2600 Package Contents on page 6 The Front Panel on page 7 The Back Panel on page 8 Using this Getting Started Guide on page 9 1 ...

Page 7: ...untries or regions Before using a power cord verify that it is rated and approved for use in your location The power cord is for AC mains installation only See Safety and Regulatory Information for more information Missing Items If any items are missing from your package contact Dell SonicWALL Support Web http www sonicwall com us Support html Email customer_service sonicwall com Getting Started G...

Page 8: ... several seconds to set the appliance into Safe Mode High speed copper Gigabit Ethernet ports Expansion Module Bay For Dell SonicWALL approved expansion modules Power Blue Indicates power supply is operating correctly Yellow Indicates power supply is disconnected Test Quick Blinking Yellow Initializing Slow Blinking Yellow Safe Mode Solid Yellow Test mode Alarm Indicates alarm activity in Red LED ...

Page 9: ... important additional information on power supply requirements for the Dell SonicWALL NSA 2600 appliance I o Fans 2 Power Supply Dual auto throttling fans for system temperature control Provides power to the Dell SonicWALL appliance by plugging in the AC cord and switching the appliance on ...

Page 10: ... the process of getting started with your new Dell SonicWALL NSA 2600 appliance Verify Pre Configuration Requirements Start Up Management Computer Perform Initial Setup Register Appliance in SonicOS Complete Deployment Configuration Create a MySonicWALL Account Configuration Process Registration Licensing and Deployment Process ...

Page 11: ...10 Using this Getting Started Guide ...

Page 12: ...tion to record configuration information and initial setup information and procedures Determining the WAN Type on page 12 System Requirements on page 12 Recording Configuration Information on page 13 Initial Setup on page 14 Connecting to the Internet on page 17 Troubleshooting Your Connections on page 19 2 ...

Page 13: ...er PPTP typically supports older Microsoft Windows implementations requiring tunneling connectivity L2TP Layer 2 Tunneling Protocol L2TP uses IPsec to connect to a L2TP server and encrypts all data transmitted from the client to the server It does not encrypt network traffic to other destinations If L2TP is not available in the Setup Wizard you can configure it later in the SonicOS management inte...

Page 14: ...etwork default is 192 168 168 168 Subnet Mask _____ _____ _____ _____ Record the subnet mask for the local network Client devices connecting through the appliance are assigned IP addresses in this network default is 192 168 168 0 Ethernet WAN IP Address _____ _____ _____ _____ Select a static IP address for your Ethernet WAN This setting only applies if you are already using an ISP that assigns a ...

Page 15: ...nnect your management computer to the Dell SonicWALL NSA 2600 appliance for initial setup MGMT Dell SonicWALL Appliance Management Computer Ethernet 120V AC U S SonicWALL NSA 2600 CONSOLE SDHC MGMT X6 X4 1GE X2 X0 M0 X1 X3 X5 X7 ALARM M0 TEST PWR Expansion Module MGMT X X ...

Page 16: ...ents refer to Product Safety and Regulatory Information on page 51 of this document NSA 2600 LED Activity The Power LEDs on the front panel illuminate blue when the appliance is powered on The Test LED or Alarm LED may illuminate and blink while the appliance performs a series of diagnostic tests When these LEDs are no longer illuminated and the Power LEDs remain steadily lit the Dell SonicWALL NS...

Page 17: ...the default MGMT interface IP address http 192 168 1 254 2 Launch the Dell SonicWALL Setup Wizard by clicking the first Here link This wizard helps you quickly configure the Dell SonicWALL appliance to secure your Internet connection 3 Follow the on screen prompts to complete the Dell SonicWALL Setup Wizard 4 A Setup Wizard Summary page displays at the end of the wizard Verify the information you ...

Page 18: ...our Dell SonicWALL NSA appliance Testing Your Internet Connection Use the following steps to test your Internet connection 1 After you exit the Setup Wizard connect your computer to the X0 LAN port 2 Point your browser to the X0 IP address configured during initial setup or to the default http 192 168 168 168 3 When the login page appears log into the SonicOS management interface as admin using th...

Page 19: ...s how to connect your computer to the Dell SonicWALL NSA 2600 appliance for Internet access X0 LAN X1 WAN Dell SonicWALL Appliance Internet Ethernet 120V AC U S SonicWALL NSA 2600 CONSOLE SDHC MGMT X6 X4 1GE X2 X0 M0 X1 X3 X5 X7 ALARM M0 TEST PWR Expansion Module X1 X0 X0 X1 ...

Page 20: ...p on your network cable properly seated in the port of the security appliance Troubleshooting Your LAN Connection If you do not see the SonicOS login prompt when you point your browser to the X0 LAN IP address consider the following Did you correctly enter the IP address for the Dell SonicWALL NSA 2600 X0 interface into your Web browser beginning with http or https Did you try restarting your mana...

Page 21: ...20 Troubleshooting Your Connections ...

Page 22: ...t on page 22 Registration Overview on page 23 Registering in SonicOS on page 23 Alternative Registration Options on page 24 Security Services and Software on page 25 Activating Managing Licenses Using MySonicWALL on page 26 Upgrading Firmware on page 27 Note Registration is an important part of the setup process and is necessary in order to receive the benefits of Dell SonicWALL security services ...

Page 23: ...ary unit that can share security service licenses with your primary appliance Note MySonicWALL registration information is not sold or shared with any other company Creating a MySonicWALL Account A MySonicWALL account is required in order to register the Dell SonicWALL NSA 2600 appliance Create a new MySonicWALL account from any computer by navigating to http www mysonicwall com To create a MySoni...

Page 24: ...dy to register the security appliance 1 Log into your Dell SonicWALL appliance Use the defaults http 192 168 168 168 and admin password or if you changed these fields during the initial setup process use the new IP address and credentials Then click Login 2 Navigate to the System Status page A message displays at the top of the screen that your Dell SonicWALL appliance is not registered Click the ...

Page 25: ...e requested information on the Product Survey page then click Submit Synchronizing Licenses Manually To manually synchronize licenses with MySonicWALL from the SonicOS interface 1 Log in to your Dell SonicWALL appliance and navigate to the System Licenses page 2 Scroll to the Manage Security Services Online section 3 Click the Synchronize button to synchronize licenses with MySonicWALL Using the L...

Page 26: ...hen click Add to Cart Once the item s have been added click the Checkout button Follow the instructions to complete your purchase The Applicable Services section lists the services available for your product The Status of a service indicates whether the service is Licensed Not Licensed or Expired The Action column lets you purchase or activate additional services The following products and service...

Page 27: ...r MySonicWALL account and perform the following tasks 1 In the MySonicWALL My Products page click the appliance Name The Applicable Services table displays a list of services that are already licensed on your Dell SonicWALL appliance Note that your initial purchase may have included security services or other software bundled with the appliance These licenses are enabled on MySonicWALL when the ap...

Page 28: ...he event that it becomes necessary to return to a previous configuration state In addition to creating a system backup you can export the configuration preferences file to your local management station This file serves as an external backup of the configuration preferences and can be imported back into the Dell SonicWALL security appliance if it is necessary to reboot the firmware with factory def...

Page 29: ...ALL appliance and use your current configuration settings upon startup Tip The appliance must be properly registered before it can be upgraded Refer to Registering in SonicOS on page 23 for more information 1 Download the SonicOS firmware image file from MySonicWALL and save it to a convenient location on your local computer 2 On the System Settings page in SonicOS click Upload New Firmware 3 Brow...

Page 30: ... appliance has rebooted into SafeMode 3 Enter 192 168 1 254 into your computer s Web browser to access the SafeMode management interface 4 Click Upload New Firmware and then browse to the location where you saved the SonicOS firmware image select the file and click the Upload button 5 Select the boot icon in the row for one of the following Uploaded Firmware New Use this option to restart the appl...

Page 31: ...30 Upgrading Firmware ...

Page 32: ...des configuration overviews as well as deployment scenarios for your Dell SonicWALL NSA appliance Advanced Deployment Scenarios on page 32 Configuring NAT Mode Gateway on page 36 Configuring a Stateful HA Pair on page 37 Configuring L2 Bridge Mode on page 43 4 ...

Page 33: ...for an existing gateway appliance Scenario A NAT Mode Gateway on page 33 NSA appliance in addition to an existing gateway appliance Scenario C L2 Bridge Mode on page 35 Existing SonicWALL gateway appliance NSA appliance in addition to an existing Dell SonicWALL gateway appliance Scenario B Stateful HA Pair on page 34 SonicPoint A SonicWALL NSA 2600 CONSOLE SDHC MGMT X6 X4 1GE X2 X0 M0 X1 X3 X5 X7 ...

Page 34: ... routed through the NSA appliance for load balancing and failover purposes Because only a single Dell SonicWALL appliance is deployed the added benefits of high availability with a stateful synchronized pair are not available To set up this scenario follow the steps covered in Configuring NAT Mode Gateway on page 36 LAN Zone DMZ Zone WLAN Zone SonicPoint Internet ISP 1 A Dell SonicWALL NSA Applian...

Page 35: ...ed between the two devices so that the Standby appliance can seamlessly switch to Active mode without dropping connections if the Active device loses connectivity To set up this scenario follow the steps covered in Configuring a Stateful HA Pair on page 37 B SonicWALL NSA 2600 CONSOLE SDHC MGMT X6 X4 1GE X2 X0 M0 X1 X3 X5 X7 ALARM M0 TEST PWR Expansion Module SonicWALL NSA 2600 CONSOLE SDHC MGMT X...

Page 36: ... learning bridge architecture enabling it to pass and inspect traffic types that cannot be handled by many other methods of transparent security appliance integration Using L2 Bridge Mode a Dell SonicWALL security appliance can be non disruptively added to any Ethernet network to provide in line deep packet inspection for network traffic To set up this scenario follow the steps covered in Configur...

Page 37: ...s rule and a NAT policy a fundamental part of the NAT Mode architecture The NAT policy is even used for traffic that needs no IP address translation such as traffic traveling between two different LAN interfaces traffic on the simplest types of VPNs or through Layer 2 Bridge Mode Transparent Mode configurations The Dell SonicWALL NSA appliance ships with the internal DHCP server active on the LAN ...

Page 38: ...Pair This section provides instructions for configuring a pair of Dell SonicWALL NSA appliances for Stateful High Availability HA This section is relevant to administrators following deployment Scenario B A Stateful HA pair operates in NAT mode by default similar to Scenario A with the added benefit of high availability See the following sections Initial High Availability Setup on page 38 Configur...

Page 39: ...tings The first task in setting up HA after completing Initial Setup on page 14 is configuring the High Availability Settings page on the Primary Dell SonicWALL security appliance Once you configure HA on the Primary appliance it communicates the settings to the Secondary appliance To configure HA on the Primary Dell SonicWALL log in to your Primary appliance and perform the following steps 1 Navi...

Page 40: ...on of the Interface for which you want to edit settings The Edit HA Monitoring dialog box displays 2 In the Primary IP Address field enter the unique LAN or WAN management IP address of the Primary appliance 3 In the Secondary IP Address field enter the unique LAN or WAN management IP address of the Secondary appliance 4 Select the Allow Management on Primary Secondary IP Address checkbox 5 Option...

Page 41: ...mber of heartbeats that can be missed before failing over Dell SonicWALL recommends leaving this field at its default setting This field can be tuned later as necessary for your specific network environment 3 Set the Probe Interval for the interval in seconds between communication with upstream or downstream systems Dell SonicWALL recommends that you set the interval for at least 5 seconds You can...

Page 42: ... HA Pair Association You will need to associate the two appliances on MySonicWALL The second appliance will automatically share the Security Services licenses of the primary appliance If the second appliance has not yet been registered follow the steps listed in Registering on MySonicWALL on page 24 to register it This is necessary to make it available for HA association with the Primary Once both...

Page 43: ... interface displays Logged Into Primary Dell SonicWALL Status Active in the upper right hand corner To verify that the Primary and Secondary Dell SonicWALL security appliances are functioning correctly wait a few minutes then turn off the Primary device The Secondary security appliance should quickly take over From your management workstation test connectivity through the Secondary appliance by ac...

Page 44: ...connect the X0 port on your Dell SonicWALL to your LAN resources Configuring the Primary Bridge Interface The primary bridge interface X1 in the example diagram is connected to your existing Internet gateway device The only step involved in setting up your primary bridge interface is to ensure that the WAN X1 interface is configured for a static IP address You will need a primary bridge interface ...

Page 45: ...t Layer 2 Bridged Mode 4 In the Bridged to drop down select the X1 interface 5 Configure management options HTTP HTTPS Ping SNMP SSH User logins or HTTP redirects Note Do not enable Never route traffic on this bridge pair unless your network topology requires that all packets entering the L2 Bridge remain on the L2 Bridge segments You may optionally enable the Block all non IPv4 traffic setting to...

Page 46: ...vides overviews of customer support and training options for the Dell SonicWALL NSA 2600 Customer Support on page 46 Knowledge Portal on page 46 User Forums on page 47 Training on page 47 Related Documentation on page 48 Additionally Supported Languages on page 48 5 ...

Page 47: ...d upgrades and Advance Exchange hardware replacement Please Note Continuous support is recommended on all NSA products For further information visit http www sonicwall com us support html Knowledge Portal The Knowledge Portal is a resource which allows users to search for Dell SonicWALL documents based on the following types of search tools Browse Search for keywords Full text search For further i...

Page 48: ...tinuous Data Protection Scrutinizer WAN Acceleration WXA For further information visit https forum sonicwall com Training Dell SonicWALL offers an extensive sales and technical training curriculum for Network Administrators Security Experts and Dell SonicWALL Medallion Partners who need to enhance their knowledge and maximize their investment in Dell SonicWALL Products and Security Applications De...

Page 49: ...WALL Anti Spyware Administrator s Guide For further information visit http www sonicwall com us support html Additionally Supported Languages Dell SonicWALL Getting Started Guides Quick Start Guides User Guides appliance firmware and various end user clients are now available in multiple languages After registering your product you can check for applicable firmware or end user client software on M...

Page 50: ...製品の登録後に 利用可能なフ ァームウ ェ アまたはエン ド ユーザ ク ラ イアン ト を MySonicWALL 上で確認できます 新し い リ リースは利用可能になる と公開されるので フ ァームウ ェ ア ソ フ ト ウ ェ ア および ド キュ メ ン ト を定期的に確認し て く ださい 펌웨어 및 문서 한글화 안내 Dell SonicWALL Getting Started 가이드 Quick Start 가이드 사용자 가이드 어플라이언스 펌웨어 및 다양한 엔드유져 클라 이언트가 다국어를 지원합니다 다음에서 사용 가능한 한국어 문서를 찾아 보세요 http www sonicwall com apac en ko documents html Getting Started 가이드 또는 Quick Start 가이드에 있는 절차에 따라 http ww...

Page 51: ...ocumentação disponível em Português em http www sonicwall com br pt Siga as instruções da Guia de noções básicas ou Guia de início rápido para registrar seu produto em MySonicWALL no http www mysonicwall com Depois de registrar o produto você pode procurar firmaware ou clientes de usuário final aplicáveis em MySonicWALL Novos lançamentos são publicados tão pronto estejam disponíveis assim que por ...

Page 52: ...egulatory Information In this Section This section provides regulatory along with trademark and copyright information Safety and Regulatory Information on page 52 Warranty Information on page 55 Copyright Notice on page 55 6 ...

Page 53: ...rips The included power cord is approved for use only in specific countries or regions Before using a power cord verify that it is rated and approved for use in your location Lithium Battery Warning The Lithium Battery used in the Dell SonicWALL Internet security appliance may not be replaced by the user The appliance must be returned to a Dell SonicWALL authorized service center for replacement w...

Page 54: ...ur Lithiumbatterie Die in der Internet Security Appliance von Dell SonicWALL verwendete Lithiumbatterie darf nicht vom Benutzer ausgetauscht werden Zum Austauschen der Batterie muss die Dell SonicWALL in ein von Dell SonicWALL autorisiertes Service Center gebracht werden Dort wird die Batterie durch denselben oder entsprechenden vom Hersteller empfohlenen Batterietyp ersetzt Beachten Sie bei einer...

Page 55: ...for purposes not shown in this manual without the written consent of Dell Inc could void the user s authority to operate this equipment Declaration of Conformity A Declaration of Conformity in accordance with the directives and standards has been made and is on file at Dell Inc Products Europe BV Limerick Ireland CISPR 22 EN 55022 Class A Complies with EN 55022 Class A and CISPR22 Class A standard...

Page 56: ...are entitled to a Limited Software Warranty which provides bug fixes updates and any maintenance releases that occur during the coverage term Visit the Warranty Information page details on your product s warranty http www sonicwall com us en support Services html tab warranty Copyright Notice 2014 Dell Inc All rights reserved Under the copyright laws this manual or the software described within ca...

Page 57: ...56 Copyright Notice ...

Page 58: ......