SMA 210/410 Deployment Guide
Connecting the SMA on an Existing DMZ
12
4 In the Add Service Group dialog box, create a service group for HTTP and HTTPS:
•
Enter a name for the service.
•
Select both
HTTP
and
HTTPS
and click the arrow button to move to the right column.
•
Click
OK
.
5 On the Server Private Network Configuration page, enter the following Server information and click Next:
6 On the Server Public Information page, accept the default IP address or enter a new IP address in your
allowed public IP range. Click
Next
.
7 The Public Server Configuration Summary page displays all configuration actions that will be performed.
Click
Apply
to create the configuration and allow access from the WAN to the SMA appliance on the
DMZ.
Allowing DMZ to LAN Connection
When users have connected to the SMA, they need to be able to connect to resources on the LAN.
To allow a DMZ to LAN connection:
1 On your gateway appliance, navigate to the
Network > Address Objects
page.
2 In the
Address Objects
tab, click
Add
.
3 In the Add Object dialog box, create an address object for the X0 interface IP address of your SMA
appliance:
4 Click
OK
to create the object. Once added, click
Close
.
5 Click
Add
again to create an address object for the NetExtender range.
6 In the Add Object dialog box, create an address object for the NetExtender range using the following
options, then click
Add
:
Server Name
Name for the SMA appliance
Server Private IP Address
The X0 IP address of the SMA appliance within your DMZ range,
such as 10.1.1.10/24.
Server Comment
Brief description of the server
NOTE:
The default IP address is the WAN IP address of your SonicWall firewall. If you accept this
default, all HTTP and HTTPS traffic to this IP address will be routed to your SMA appliance.
Name
Name for the SMA appliance
Zone Assignment
DMZ
Type
Host
IP Address
X0 IP address of the SMA appliance within your DMZ range, such as 10.1.1.10.
Name
Name for NetExtender
Zone Assignment
DMZ
Type
Range
