Dell Dell SonicWALL WXA 1.3 manual

| 1 WXA 1.3 User’s Guide[...]

2 | Dell SonicWALL WX A 1.3 User’s Guide Notes, Cautions, and W arnings © 2014 Dell Inc. T rademarks: Dell™, the DELL logo, SonicW ALL™, and all other SonicW ALL product and service names and slogans are trademarks of Dell Inc. 2014 – 02 P/N 232-002401-00 Rev . A NOTE : A NOTE indicates import ant information that helps you make better use[...]

Table of Contents | 3 Table of Contents Part: Introduction Chapter 1 Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 About this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Organization of this Guide . . . . . . . . . . . . . .[...]

4 | Dell SonicWALL WX A 1.3 User’s Guide Configuring the TCP Accele ration > Configuration Tab . . . . . . . . . . . . . . . . . 56 Verifying the TCP Acceleration Configuration . . . . . . . . . . . . . . . . . . . . . . . . 59 Part: WFS Acceleration Chapter 7 Viewing the WFS Acceleration Page . . . . . . . . . . . . . . . . . . . . . . . . . [...]

Table of Contents | 5 Configuring Custom Zones for WXA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156 Configuring Reverse Lookup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157 Manually Adding SPN Hostnames in DNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . 158 Appendix B: Configu[...]

6 | Dell SonicWALL WX A 1.3 User’s Guide[...]

| 7 Introduction[...]

8 | Dell SonicWALL WX A 1.3 User’s Guide[...]

Preface | 9 Chapter 1 Preface About this Guide Welcome to the WXA 1.3 User ’s Guide . This manual provides the information you need to successfully activate, configure, and administer a WXA series appliance. Note Always check http://www .soni cwall.com/us/support.html for the latest version of this manual as well as other Dell SonicW ALL product [...]

10 | Dell SonicWALL WXA 1.3 User’s Guide Part 4 WFS Acceleration Covers the management interface functions and configuration procedures for the WFS Acceleration page . The WFS Acceleration serv ice can be configured to use Unsigned and/or Signed SMB. Unsigned SMB is used for networ ks that do not require traf fic signing. Signed SMB is used for n[...]

Preface | 11 Guide Conventions The following conventions used in this guide are as follows: Dell SonicWALL Technical Support For timely resolution of technical support questi ons, visit Dell SonicWALL on the Internet at http://www .sonicwal l.com/us/Support.html . Web-based resources are available to help you resolve most technical issues or contac[...]

12 | Dell SonicWALL WXA 1.3 User’s Guide More Information on Dell SonicWALL Products Contact Dell SonicW ALL, Inc. for information about Dell SonicW ALL product s and services at: Web: http://www .sonicwall.com E-mail : sales@sonicwall.com Phone:(408) 745-9600 Fax:(408) 745-9300 Current Documentation Check the Dell SonicW ALL document ation Web s[...]

Introduction | 13 Chapter 2 Introduction Introduction WXA 1.3 is the latest version of firmware for the Dell SonicW ALL WXA series appliance. This chapter provides an overview of the W AN Acceleration feature, the W AN Acceleration management interface, deployment prerequisite s and considerations, supported platforms, and details the key fea tures[...]

14 | Dell SonicWALL WXA 1.3 User’s Guide The illustration below displays the basic networ k topology for the Dell SonicW ALL WXA series appliance and the NSA/TZ series appliances. Transmission Control Protocol Acceleration The TCP Acceleration service is a process that decreases the amount of data p assing over the W AN by using compression, whic[...]

Introduction | 15 The WXA series appliance offer s WFS Accele ration for Unsigned SMB and Signed SMB traf fic. In a network that supports unsigned SMB traffic, the WFS Acceleration service configuration is greatly simplified. The reason for this is Unsi gned SMB traf fic does not have a security layer , so the WXA series appliance can in tercept th[...]

16 | Dell SonicWALL WXA 1.3 User’s Guide Key Features in WXA 1.3 The WXA 1.3 release includes the following Key features: • W an Acceleration — The W AN Acceleration service allows network administrators to accelerate W AN traf fic between a central si te and a branch site by using T ransmission Control Protocol (TCP) and Windows File Sharing[...]

Introduction | 17 Deployment Prerequisites The pre-requisites for deploying the W AN Acceleration service are as follows: • A NSA/TZ series appliance is required to deploy the Dell SonicW ALL WXA series appliance. • T raf fic p assing through the Dell SonicW ALL WXA series appliance requires Internet Protocol version 4 (IPv4). The W AN Accelera[...]

18 | Dell SonicWALL WXA 1.3 User’s Guide • Dell SonicW ALL recommends that the WXA seri es appliance retr ieve NTP updates from the Domain Contro ller . • Dell SonicW ALL recommends that the DNS server accept secure updates. • Configure the zone properties of an interface to which the WXA appliance is connected as a LAN zone. Refer to the f[...]

Introduction | 19 Navigating the Ma nagement Interface Navigating the W AN Acceleration management inte rface includes a hierarchy of menu buttons on the navigation bar (left side of your browser window). When you click a menu button, related management functions are di splayed as submenu items in the na vigation bar . If the navigation bar continu[...]

20 | Dell SonicWALL WXA 1.3 User’s Guide Applying Changes Clicking the Apply Changes button saves any configuration changes you made on the p age. If the settings are contained in a secondary window within the management interface, when you click Apply , the settings are automatically applied to the WXA series appliance. Tooltips T ooltips are sm[...]

Introduction | 21 Getting Help Each Dell SonicW ALL WXA series appliance includes Web-based online help available from the management interface. Clicki ng the question mark button on the top-right corner of eve ry page accesses the context-sensitive he lp for the p age. Note Accessing the Dell SonicW ALL WXA series appliance online help re quires a[...]

22 | Dell SonicWALL WXA 1.3 User’s Guide[...]

| 23 St a t u s[...]

24 | Dell SonicWALL WXA 1.3 User’s Guide[...]

Viewing Status Information | 25 Chapter 3 Viewing Status Information WAN Acceleration > Status The S tatus page displays a S tatus tab with a dashboard view of the System Information, TCP Acceleration, WFS Acceleration, and W eb Cache of your WXA seri es appliance . It also displays a Settings tab that provides top level control of the W AN Acce[...]

26 | Dell SonicWALL WXA 1.3 User’s Guide Status Tab Name Description Action Items Provides the options to Refresh and Probe for the WXA series appliance. See Action Items on page 27 for det ails. WXA System Information Panel Displays system details of the WXA series app liance. See WXA System Information Panel on page 27 for det ails. TCP Acceler[...]

Viewing Status Information | 27 Action Items WXA System Information Panel Name Description Probe for WXA Checks for the presence of a WXA series appliance. This is a handshake between the NSA/TZ series appl iance and the WXA series appliance, and confirms they are connecte d to ea ch other . Refresh Refreshes the Statu s page. The refresh interval [...]

28 | Dell SonicWALL WXA 1.3 User’s Guide TCP Acceleration Panel Authentication Code Displays the authen tication code used to register the WXA serie s appli- ance. Note: This is also use d as the password for a machi ne accoun t when automatically provisioni ng the WXA series applian c e. Firmware V ersion Displays the firmwa re ve rsion that is [...]

Viewing Status Information | 29 WFS Acceleration Panel W AN Capacity Increase Factor The ratio of the amount of d ata conveyed, to the amount that is actually sent. Use this as a guide for how much ex tra capacity the W AN has gained without any increase in band width. Connections Displays the following in formation for TCP Acceleration con nec- ti[...]

30 | Dell SonicWALL WXA 1.3 User’s Guide Web Cache Panel Windows Domain The Windows domain on which th e WXA series appliance will accelerate access to configured shares. Note : This field is not displayed if using “Unsigned SMB” on ly . T otal Data Reduction (%) The total percentage of dat a reduced by the WFS Acceleration ser- vice. W AN Ca[...]

Viewing Status Information | 31 Settings Tab Action Items WXA Appliance Conf iguration Panel Name Description Action Items Provides the options to apply changes, prob e for the presence of the WXA series appliance, and cr eate a static DHCP lease for the WXA series appliance. WXA Appliance Configurati on Pane l Enables and configures the WXA series[...]

32 | Dell SonicWALL WXA 1.3 User’s Guide WXAC The NetExtender W AN Acceleration Client (WXAC) securely accelerates W AN traffic between a remote PC and a central or branch office using SonicW ALL NetExtender .The WXAC panel will not display unless the NSA/TZ series appliance is running SonicOS 5.9 firmware. Name Description Enable NetExtender WAN[...]

Configuring the WXA Series Appliance | 33 Chapter 4 Configuring the WXA Series Appliance Configuring Network Interfaces The initial configuration of the WXA series appliance should be performed by using the WXA Setup Wizard, which is available by clicking t he Wizards button in the top-right corner of the NSA/TZ series appliance’s management inte[...]

34 | Dell SonicWALL WXA 1.3 User’s Guide T o configure your NSA/TZ security appliance to be used with the WXA series appliance, perform the following step s: Ste p 1 Open a W eb browser . Ste p 2 Access the SonicOS Management interface. Ste p 3 Navigate to the Network > Interfaces page. Ste p 4 Click the Edit button in the row for the interfac[...]

Configuring the WXA Series Appliance | 35 • (Optional) Comment : T ext Field — Enter text that describes the device. For example, WXA connection . • (Optional) Management : checkboxes — Select the management methods. • Click OK . Ste p 6 Navigate to the Network > DHCP Server page. Ste p 7 Under the DCHP Server Lease Scopes, click Add D[...]

36 | Dell SonicWALL WXA 1.3 User’s Guide Step 10 Navigate to the W AN Acceleration > St atus page. Ste p 11 Click the Settings tab. Step 12 In the WXA Appliance Confi guration panel, click the WXA Interface drop-down list and select the X5 interface. Step 13 Select the Enable W AN Acceleration checkbox. Step 14 Click the Apply Changes button. [...]

Configuring the WXA Series Appliance | 37 Step 16 Navigate to the W AN Acceleration > St atus page. Step 17 Click the Settings tab. Step 18 Click Create static DHCP lease for WXA . A DHCP lease will be set for the WXA series applian ce. Step 19 V erify that the lease wa s created. Navigate to the Network > DHCP Server p age. A dynamic range i[...]

38 | Dell SonicWALL WXA 1.3 User’s Guide[...]

| 39 TCP Acceleration[...]

40 | Dell SonicWALL WXA 1.3 User’s Guide[...]

Viewing the TCP Acceleration Page | 41 Chapter 5 Viewing the TCP Acceleration Page WAN Acceleration > TCP Acceleration The W AN Acceleration > TCP Acceleration p age provides options to c onfigure and monitor the TCP Acceleration service. This chapter det ai ls the management interface functions of the Configuration, S tatistics, S tatistics [...]

42 | Dell SonicWALL WXA 1.3 User’s Guide Configuration Tab Name Description Apply Changes Button Saves the changes to the configuration. Bypassed Button Displays a pop-up window with a list of connections that have either been excluded from the accele ra tion process or failed. This button is gr eye d ou t if th e se conditi o ns ar e not presen [...]

Viewing the TCP Acceleration Page | 43 Statistics Tab Name Description Covering Period Click the Covering Period drop-d own list and select the period of time the data dis- plays on the S tatistics tab. Chart Selects the graph style used to display the TCP Acceleration data. Refresh Actions Refreshes the data displayed in the W AN Acceleration >[...]

44 | Dell SonicWALL WXA 1.3 User’s Guide Statistics Breakdown Tab Name Description Display Drop-Down Menu Selects one of the following options: • Dest. Port - Displays the volume of data (or “Detemined By” value) com- pared to the destination port numbers of the accelerated connections. • Dest. Address - Displays the volume of da ta compa[...]

Viewing the TCP Acceleration Page | 45 Connections Tab Action Items Plot Graph Displays a graphical representation of the selected criteria. Refresh Button Refreshes the graph with th e most recent TCP Acceleration data. Data and Graphs Displays read-only data for the Remote Node, Direction, Threshold, T ot al Con- nections, and Covering Period. Th[...]

46 | Dell SonicWALL WXA 1.3 User’s Guide Column/Field Headings Name Description S tart Time Indicates the starting time of a connection. End T ime Indicates the ending time of a connection. Initiator Displays which end of the network initiated the connectio n. LAN for connections started locally , and W AN for connections started from a remote si[...]

Configuring TCP Accelerat ion | 47 Chapter 6 Configuring TCP Acceleration WAN Acceleration > TCP Acceleration The initial configuration of TCP Accelerati on should be per formed by using the WXA Setup Wizard, which is available by cl icking the Wizards button in the top-right corner of the NSA/TZ series appliance’s management interface. Howeve[...]

48 | Dell SonicWALL WXA 1.3 User’s Guide The Configure VPN Policy pop-up window displays. Ste p 3 Select the Advanced tab. Ste p 4 Select the checkbox for Permit Acceleration . Ste p 5 Click the OK button.[...]

Configuring TCP Accelerat ion | 49 Configuring TCP Acceleration on a Non-VPN (Routed Mode) If you do not have a VPN configured on your network and you are using a cu stom routing policy , you need to add two routing policies on each site: One for outgoing traffic, and one for incoming traffic. Both routing po licies ar e configured to permit accele[...]

50 | Dell SonicWALL WXA 1.3 User’s Guide Configure Routing Policies for Outgoing Traffic On the central site, configur e a routing policy for outgoing traf fic to the branch site. On the branch site, configure a routing policy fo r outgoing traf fic to the central site. The steps in this section are an example of c onfiguring a routing policy on [...]

Configuring TCP Accelerat ion | 51 Ste p 9 Navigate to the Network > Routing page. Step 10 Click the Add button.[...]

52 | Dell SonicWALL WXA 1.3 User’s Guide The Route Policy Settings pop-up window displays. Ste p 11 Click the Source drop-down, select Any . Step 12 Click the Destination drop-down, select the address object you created ( Central S ite .) Step 13 Click the Service drop-down, select Any . Step 14 Click the Gateway drop-down, select the X1 Default [...]

Configuring TCP Accelerat ion | 53 Configure Routing Policies for Incoming Traffic On the central site, configur e a routing policy fo r incoming traf fic from the branch site. On the branch site, configure a routing policy fo r incoming traf fic from the central site. The steps in this section are an example of c onfiguring a routing policy on the[...]

54 | Dell SonicWALL WXA 1.3 User’s Guide Ste p 9 Navigate to the Network > Routing page. Step 10 Click the Add button.[...]

Configuring TCP Accelerat ion | 55 The Route Policy Settings pop-up window displays. Ste p 11 Click the Source drop-down, select Central Site . Step 12 Click the Destination drop-down, select the address object you created ( Branch Site. ) Step 13 Click the Service drop-down, select Any . Step 14 Click the Gateway drop-down, select ( 0.0.0.0 ). Ste[...]

56 | Dell SonicWALL WXA 1.3 User’s Guide Configuring the TCP Acceleration > Configuration Tab The Configuration t ab gives you the option to select the mode, se rvice object, and address object or group that are included or excl uded from the TCP Acce leration service. T o view a list, create, and edit service object s, navigate to the Network[...]

Configuring TCP Accelerat ion | 57 Example 2 T o configure acceleration of only the HTTP web traffic, follow the steps below: Ste p 1 Navigate to W AN Acceleration > TCP Acceleration. Ste p 2 Select the Configuration tab. Ste p 3 Click the Enable TCP Acceleration checkbox. Ste p 4 Click the TCP Acceleration Mode drop-down, then select Only TCP S[...]

58 | Dell SonicWALL WXA 1.3 User’s Guide Example 3 T o configure acceleration of everything except Micr osoft SQL database traf fic or traf fic to the Guest Authentication Server s, follow the step s below: Ste p 1 Navigate to W AN Acceleration > TCP Acceleration. Ste p 2 Select the Configuration tab. Figure 1 Configuring T CP Acceleration Exa[...]

Configuring TCP Accelerat ion | 59 Verifying the TCP Acceleration Configuration After you complete the TCP Acceleration confi guration procedures, verify TCP Acceleration is working by checking the TCP Acceleration > S t atistics T ab. Ste p 1 Navigate to the TCP Acceleration > St atistics T ab. Ste p 2 View the st atistics dat a and graphs t[...]

60 | Dell SonicWALL WXA 1.3 User’s Guide[...]

| 61 WFS Acceleration[...]

62 | Dell SonicWALL WXA 1.3 User’s Guide[...]

Viewing the WFS Accelerati on Page | 63 Chapter 7 Viewing the WFS Acceleration Page WAN Acceleration > WFS Acceleration This chapter describes the management inter face features and options that are available on the W AN Acceleration > WFS Acceleration p age and is split up in two sections, Unsigned SMB and Signed SMB. Some of the tabs and op[...]

64 | Dell SonicWALL WXA 1.3 User’s Guide When using SMB Signing, additi onal t abs display depending on wh ich configuration mode is selected (Basic or Advanced) , which is explained below: The Basic configuration mode displays the Conf iguration, S tatistics , Signed SMB Setup, and T ools tabs. The Advanced configuration mode displays the Config[...]

Viewing the WFS Accelerati on Page | 65 WFS Acceleration Page Using Unsigned SMB Clicking the Unsigned SMB checkbox displays the Configur ation and S tatistics tabs, this section details the opt ions for those t abs. Configuration Tab The Configuration tab using Unsigned SMB gives you the options to enable the WFS Acceleration service and configure[...]

66 | Dell SonicWALL WXA 1.3 User’s Guide Statistics Tab The S tatistics tab displays performance stat istics for the WFS Ac celeration service. Note The WFS Cache statistics displayed in this page only represent Signed SMB traf fic. If you are using Unsigned SMB, the WFS Cache statistics do not apply . Name Description Covering Period Drop-down C[...]

Viewing the WFS Accelerati on Page | 67 WFS Acceleration Page Using Signed SMB Clicking the Support SMB Signing checkbox displays the Basic (recommended) and Advanced configuration mode radio buttons. T hese signed SMB configuration modes give you the option to perform a simplified or more deta iled WFS Acceleration conf iguration. The Basic config[...]

68 | Dell SonicWALL WXA 1.3 User’s Guide Configuration Tab The Configuration t ab allows you to enable the WFS Acceleration service, configure (SMB) signing settings, select an IP address object for the WXA series appliance, and view info for the WXA series appliance hostname (which can be c onfigured, if the WXA series appliance is unjoined), au[...]

Viewing the WFS Accelerati on Page | 69 Note Y ou can verify the WFS Acceleration status on the W A N Acceleration > S tatus page. Hostname Displays the hostname of the WXA series app liance. Note: The address for the WXA series applia nce normally remains pr ivate because it is behind the managing NSA/TZ series app liance’s IP address which i[...]

70 | Dell SonicWALL WXA 1.3 User’s Guide Statistics Tab The S tatistics tab displays performance st atistics for the WFS Acceleration service. Note The WFS Cache statistics displayed in this page only represent Signed SMB traf fic. If you are using Unsigned SMB, the WFS Cache statistics do not apply . Name Description Covering Period Drop-down Cl[...]

Viewing the WFS Accelerati on Page | 71 Signed SMB Setup Tab The Signed SMB Setup t ab of fers a simplified and user friendly way to have the WXA series appliance join the domain, add servers to the configuration, and to create the necessary records on the domain. Note There is a WFS Setup Wizard available for deployments running SonicOS 5.9 firmwa[...]

72 | Dell SonicWALL WXA 1.3 User’s Guide The Configure Hostname pop-up window displays after clicking the Configure button in the Hostname field: Figure 4 Join Domain Pop-up W in do w Name Description Hostname (text field) Enter a hostname for yo ur WXA series appliance. A d efault hostname is chosen for you, leave the text field blank to use it.[...]

Viewing the WFS Accelerati on Page | 73 Figure 5 Join Domain Result s If the WXA series appliance is joined to the domain, the Add Server and Update Domain Records buttons display , alo ng with the domain details and configured servers p anels. Click the Local radio button to configure se rvers on the local site and the Remote radio button to confi[...]

74 | Dell SonicWALL WXA 1.3 User’s Guide The configured servers information changes when toggling between the Local and Remote radio buttons, as seen in the two figures below: Figure 6 Signed SMB Setu p for the remote site Figure 7 Sig ned SMB Setup for the local si te Name Description Add Server button Configures the WXA security appliance to sh[...]

Viewing the WFS Accelerati on Page | 75 Figure 8 Add Local File Server Po p-up Window Hostname: (text fiel d) Displays the defa ult or created hostname for the WXA series appli - ance. File Server Displays the file server(s) configu red to the WXA series appliance. Via Next Hop WXA Displays the auto-genera ted name of the WXA series appliance on th[...]

76 | Dell SonicWALL WXA 1.3 User’s Guide Figure 9 Add Remote Fi le Server Pop-u p Window Name Description File Server: (text field) Selects the remote file server from the drop-down list. Local WXA Name: (text field) Enter a name for your local WXA series appliance. Adding a dot at the end of the name auto-completes the na me with that of the dom[...]

Viewing the WFS Accelerati on Page | 77 Figure 10 Update Domain Records Po p-up Window Tools Tab The T ools tab provides diagnostic tools for the WFS Acceleration service. The Diagnostic T ools drop-down provi des the following selections: • DNS Name Lookup — Performs a search on a spec ific Name or IP address, see on page 78 for det ails. • [...]

78 | Dell SonicWALL WXA 1.3 User’s Guide Figure 1 1 DNS Name Lookup Panel The DNS Name Lookup Panel displays the following information: Note The DNS servers in the DNS Name Lookup s hould all be domain DNS servers. Non-domain DNS servers can cause issues. Name Description Primary DNS: (read-only) Displays the primary DNS which was configured on N[...]

Viewing the WFS Accelerati on Page | 79 Figure 12 Available Shar es Panel The Available Shares Panel provides the following configuration options: Note If the WXA series appliance has already joi ned the domain, you can use the WXA series appliance credentials, the username/pa ssword do not need to be entered. Name Description Host: T ext Field The[...]

80 | Dell SonicWALL WXA 1.3 User’s Guide Figure 13 Test WFS Configuration O ption The T est WFS Configuration Panel provi des the following c onfiguration options: For more information on troubleshooting test result s, refer to V erifying the W FS Acce leration Configuration on page 1 17. Figure 14 List Kerberos Servers Option The List Kerberos S[...]

Viewing the WFS Accelerati on Page | 81 Advanced Configuration Mode Clicking the Advanced configuration mode radio button displays the Domain Details and Shares tabs. All other t abs (Configur ation, S tatistics, and T ools) appear the same in both Basic and Advanced configuration modes. For details on t he Configuration, S t atistics, and T ools t[...]

82 | Dell SonicWALL WXA 1.3 User’s Guide Domain Details Tab The Domain Details t ab offers an advanced confi guration of the d o main, providing more options and details than the Basic mode’s Signed SMB Setup tab. The WXA series appliance may automatically discover the domai n details if the DNS server c onfigured on the NSA/TZ series appliance[...]

Viewing the WFS Accelerati on Page | 83 If the domain name is auto-discovered, the Domain Det ails t ab displays the configured domain details and options for configuring the domain. Figure 16 WFS Acceleration (Name Auto-disco vered) Name Description Action Buttons Advanced Options Config ures th e WFS Acceleration serv ice in more detail with Clie[...]

84 | Dell SonicWALL WXA 1.3 User’s Guide Restart WFS Restart s the WFS Acceleration service. All existing sessions and file transfers will be terminated. Update Domain Records Updates any missing domain record s for SPN alia ses, con figured remote servers to the “S p ecific T rusted Host List”, and missing DNS records. Displays an Update Dom[...]

Viewing the WFS Accelerati on Page | 85 Figure 17 Configure Domain Pop-up W indow Figure 18 Configure Hostna me Pop -up Window Name Description Fully Qualified Domain Name: The FQDN for the Windows domain that the WXA series appliance will join. Use Discovered value for NETBIOS Domain Checkbox When checked (enab l ed ), us es the NETBIOS name tha t[...]

86 | Dell SonicWALL WXA 1.3 User’s Guide Note If the device has already jo ined the domain, changing the hos t name requires the device to unjoin the domain, and then rejoin the domain af ter the change is made. Figure 19 Configure Kerberos Ser ver Pop-up Window Note The LDAP Server and the Kerberos Server are usually the same computer . Name Des[...]

Viewing the WFS Accelerati on Page | 87 Figure 20 Time Synchron iza t io n Pop -up Windo w Figure 21 Advanced Options Pop-up Wi nd ow Name Description Use the Domain Controller for Time Synchronization: Checkbox When enabled (checked) the domain controll er is used as the time synchronization source. NTP Server: T ext Field Overrides the domain c o[...]

88 | Dell SonicWALL WXA 1.3 User’s Guide Figure 22 Join Domain Pop-up Window Enter the username and password of the domain administrator account. Name Description Summary of Results (Read-only) Displays a summary of results after the WXA series appliance joins the domain. Details (Read-only) Details the steps perfo rmed in the domain joini ng pro[...]

Viewing the WFS Accelerati on Page | 89 Figure 23 WFS Configura t io n T est Results Pop-up Windo w The WFS Configuration T est Results p age displays the configuration status of the WFS Acceleration service. A green circle indicates a successful configuration, and a red circle indicates an error . Hover over the circle icons to display the det ail[...]

90 | Dell SonicWALL WXA 1.3 User’s Guide Figure 24 Update Domain Records Po p-up Window Name Description Summary of Results (Read-only) Displays a summary of results after the WXA series ap pliance runs the Update Domain Reco rd s feature. Details (Read-only) Details the steps perfo rmed in the Update Domain Records pro- cedure. A green circl e i[...]

Viewing the WFS Accelerati on Page | 91 Shares Tab The Shares tab configures the WXA series applianc e to accelerate specific shares and ser vers. This tab is only available in Advanced configuration mode. Note Basic mode is the preferred way to configur e WFS Acceleration, only use Advanced mode if you need to specifically def ine the server or sh[...]

92 | Dell SonicWALL WXA 1.3 User’s Guide Figure 26 Delete a Server Name Column Displays the name of the shares set on the server . Cache Enabled Column Indicates whether caching is enable d (ch ecked) or disabled (unchecked). Cache Read Ah ead Column Displays the size of the read-ahead b uffer . Configure Column Displays an Edit and Del ete butto[...]

Viewing the WFS Accelerati on Page | 93 Figure 27 Add Server and Edit Server Details Pop-up Windows Name Description Remote Server Name: Radio Buttons The Remote Server name can be selected from a list of remote servers found on the network, or manually entered in the text field. T oggle the radio buttons to ch oose between automa tic or manual ent[...]

94 | Dell SonicWALL WXA 1.3 User’s Guide Figure 28 Add Share and Edit Share Details Pop- up Windows Apply Button Applies all changes. Cancel Button Cancels the operati on. Name Description Name Description All Shares Option All shares are added to the server . Share Name: Drop-down menu Pro vides a list of available shares on the remote server (n[...]

Viewing the WFS Accelerati on Page | 95 Figure 29 Update Domain Records This pop-up window displays when the Up date Domain Records button is clicked. Enter the Administrator ’s Credentials to resolve any missi ng domain records for SPN aliases, “trusted for delegation”, and DNS records. Name Description Username T ext Field Enter th e Admini[...]

96 | Dell SonicWALL WXA 1.3 User’s Guide[...]

Configuring WFS Acceleration | 97 Chapter 8 Configuring WFS Acceleration WAN Acceleration > WFS Acceleration This chapter provides det ails on configuring the WFS Acceleration service. There are several different ways to configure WFS Accelera ti on depending on the user requirement s and type of network environment used. If the Client PC is alr[...]

98 | Dell SonicWALL WXA 1.3 User’s Guide Configuring WFS Acceleration Using Unsigned SMB T o configure the WFS Acceleration servic e using Un signed SMB, perform the following: Ste p 1 Permit acceleration for the relevant VPN or routed policies in the Network > Routing or VPN > Settings pages in the SonicOS management interface. Ste p 2 Con[...]

Configuring WFS Acceleration | 99 Configuring WFS Acceler ation Using Signed SMB The preferred way to configure WFS Accelera tion for Sig ned SMB is to use the WXA Setup Wizard. However , this is currently only avail able if running SonicOS 5. 9 firmware. If your NSA/ TZ series appliance is using 5.8.1.x or 6.1.x firmware use the procedures in this[...]

100 | Dell Sonic WALL WXA 1.3 User’s Gui de The Signed SMB Setup and T ools tab, and Basi c and Advanced configuration mode radio buttons display: Ste p 6 Select the Basic (Recommended) or Advanced configuration mode radio button. • If you selected the Basic configuration mode, refer to the Basic Configuration Mode on page 101 for Basic mode co[...]

Configuring WFS Acceleration | 10 1 Basic Configuration Mode T o configure WFS Acceleration in Basic confi guration mode, use the Signed SMB Setup tab to join the domain, add file servers on the local and remote locations, and add domain records. When initially configuring WFS Ac celeration, always configure t he Central site first (the site where [...]

102 | Dell Sonic WALL WXA 1.3 User’s Gui de Ste p 3 Click Join D omain . The Join Domain pop-up wind ow displays. Ste p 4 Enter the username and p assword for the administr ator of the domain or an account that can join the WXA series appliance to the domain. Ste p 5 Click the Join Domain button. The WXA series appliance will create a computer ac[...]

Configuring WFS Acceleration | 10 3 Adding File Shares The Basic server configuration mode does not require you to create SPNs for the remote servers or match remote and local WXA appliance names. In Basic mode, all available shares are added when a server is configured. When addi ng a server using the Basic configuration mode, the Administrator ?[...]

104 | Dell Sonic WALL WXA 1.3 User’s Gui de Configure the WXA 4000 appliance on the Central Site Add File Server 1: Ste p 1 Navigate to the W AN Acceleration > WFS Acceleration > Signed SMB Setup tab. Ste p 2 Click the File Servers to Show: Local radio button. Always configure the central site first. Ste p 3 Click the Add Server button. The[...]

Configuring WFS Acceleration | 10 5 Add File Server 2: Ste p 8 Click the Add Server button. The Add Server pop-up window displays: Ste p 9 Click the File Server: drop-down list, and then select Local Server Name: File-Server-2 Step 10 Click Apply . The Update Domain Records pop-up window displays: Ste p 11 Enter your Administrator credentials. Step[...]

106 | Dell Sonic WALL WXA 1.3 User’s Gui de The Add Remote Server pop-up window displays: Ste p 4 Click the File Server: drop-down list, and then select the nam e of the remote file server hosting the shares: File-Server-1 Ste p 5 Enter a local WXA name: WXA-2000-RS-1 Note Adding a dot after the name will auto-complete t he name with that of the [...]

Configuring WFS Acceleration | 10 7 Add File Server 2: Ste p 9 Click the Add Server button. The Add Remote Server pop-up window displays: Step 10 Click the File Server: drop-down list, and then select name of the remote file server hosting the shares: File-Server-2 Ste p 11 Enter a local WXA name: WXA-2000-RS-2 Note Adding a dot after the name will[...]

108 | Dell Sonic WALL WXA 1.3 User’s Gui de The Update Domain Records pop-up window displays: Step 13 Enter your Administrator credentials. Step 14 Click the Update Records button. The Configured File Servers p anel in the Signed SMB Setup t ab populates the configured file server:[...]

Configuring WFS Acceleration | 10 9 Advanced Configuration Mode T o configure WFS Acceleration in Advanced c onfiguration mode, use the Domain Det ails and Shares tabs to join the domain and add file shares. Cau tion Advanced configuration mode should only be used if you need to specifically define server or share names. The preferred way to confi [...]

110 | Dell Sonic WALL WXA 1.3 User’s Gui de The Join Domain pop-up wind ow displays. Ste p 3 Enter the username and p assword for the administr ator of the domain or an account that can join the WXA series appliance to the domain. Ste p 4 Click the Join Domain button. A Join Domain Result s pop-up window displays , showing live result s of the jo[...]

Configuring WFS Acceleration | 11 1 Adding File Shares The Advanced mode offers a more detailed configuration process for adding file servers and shares. Giving you manual confi guration options such as enabli ng the default cache, selecting the default cache read ahead, specifying indivi dual shares, and adding domain records. Note the following c[...]

112 | Dell Sonic WALL WXA 1.3 User’s Gui de Configure the WXA 4000 appliance on the Central Site Add File Server 1: Ste p 1 Navigate to the W AN Acceleration > WFS Acceleration > Shares tab. Ste p 2 Click the Add Server button. The Add Server pop-up window displays: Ste p 3 Enter the Remote Server Name: Select File Server 1 from the drop-do[...]

Configuring WFS Acceleration | 11 3 Add File Server 2: Ste p 1 Click the Add Server button. The Add Server pop-up window displays: Ste p 2 Enter the Remote Server Name: Select File Server 2 from the drop-down list. If the remote server is not in the list, toggle the radio button and enter it manually in the text field. Ste p 3 Enter a Local WXA Nam[...]

114 | Dell Sonic WALL WXA 1.3 User’s Gui de Configure the WXA 2000 appliance on the Branch Site When configuring the Branch Site to access a file server on the Central Site, the Remote Server Name entered on the Branch Site must match t he Local WXA Name of the Central Site's WXA appliance. T his allows the Central Site WXA ap pliance to pro[...]

Configuring WFS Acceleration | 11 5 Add File Server 2: Ste p 1 Click the Add Server button. The Add Server pop-up window displays: Ste p 2 Enter the Remote Server Name: Select WXA-4000-CS-2 from the drop-down list. If the remote server is not in the list, toggle the radio button and enter it manually in the text field. Ste p 3 Enter a Local WXA Nam[...]

116 | Dell Sonic WALL WXA 1.3 User’s Gui de The Shares tab displays the co nfigured file servers:[...]

Configuring WFS Acceleration | 11 7 Verifying the WFS Acceleration Configuration This section details how to ve rify that the WFS Acceleration service is configured correctly . Note These verification procedures only apply to systems using Signed SMB. After completing the step-by-step WFS Accele ration configur ation pr ocedures. V erify WFS Accele[...]

118 | Dell Sonic WALL WXA 1.3 User’s Gui de The results display when the test is complete. The T est WFS Configuration p age displays the te st result s for the WFS Acceleration service. A green circle indicates a successful configuration, and a red circle indicates an error . Hover over the circle icons to display the details for that c onfigura[...]

Configuring WFS Acceleration | 11 9 Verifying WFS Acceleration in Advanced Mode T o verify that the WFS Acceleration was successful using the Domain Details t ab in Advanced mode, perform the following steps: Ste p 1 Navigate to the W AN Acceleration > WFS Acceleration page. Ste p 2 Select Advanced configuration mode. Ste p 3 Select the Domain D[...]

120 | Dell Sonic WALL WXA 1.3 User’s Gui de The WFS Configuration T est Results pop-up win dow displays when the test is complete: The WFS Configuration T est Results p age displays the test results for the WFS Acceleration service. A green circle indicates a successful c onfiguration, and a red circle indicates an error . Hover over the circle i[...]

| 121 We b C a c h e[...]

122 | Dell Sonic WALL WXA 1.3 User’s Gui de[...]

Viewing the Web Cache Page | 123 Chapter 9 Viewing the Web Cache Page WAN Acceleration > Web Cache This chapter is an overview of the W AN Acceleration > Web Cache management interface page. The W eb Cache page of fers the S tatus, S t atistics, and T ools ta bs for configuring and testing the Web Cache service . Name Description S tatus T ab[...]

124 | Dell Sonic WALL WXA 1.3 User’s Gui de Status Tab Name Description Apply Changes Button Applies the latest configuration cha nges. Restart W eb Cache Button Restarts the W eb Cache service. This disconnects any currently open connections. Flush Cache Button Removes all the data from the Web Cache. This also restart s the Web Cache service, d[...]

Viewing the Web Cache Page | 125 Cau tion The Aggressive mode should be used with caut ion, it violates the HTTP standard and may lead to unwanted consequences. Web Cache Panel Enable or Disable directin g web traffic p assing through the NSA/TZ series appliance to the WXA Web Cache via the Enable Web Cache checkbox. When the Web Cache is enabled, [...]

126 | Dell Sonic WALL WXA 1.3 User’s Gui de Statistics Tab Name Description Covering Period Drop-Down Menu Click the Covering Period drop-down menu and select the period of time the da t a displays on the S tatistics tab . Chart: Drop-Down Menu Selects what data displays in the graph. For details on the differ- ent chart types, se e Graphs on pag[...]

Viewing the Web Cache Page | 127 Graphs The S tatistics graphs display the W eb Cache data for the selected Coverin g Period and Chart. The Convey ed data is the number of bytes that w ould be sent from a web server witho ut the use of the WXA series appli- ance’s W eb Cache. The Sent data is the bytes that are actually sent from web servers in r[...]

128 | Dell Sonic WALL WXA 1.3 User’s Gui de • Requests — The Request s chart graphically displa ys the number of requests, hit s, and hits% over a selected period of time. Y ou can drag the mouse over the chart to zoom in on a selected area. T o zoom back out, click the Reset Zoom button[...]

Viewing the Web Cache Page | 129 Tools Tab T est the performance or diagnose th e Web Cachi ng feature by using the DNS Name Lookup or Web Request diag nostic tools and viewing the results. Note The T ools tab management interface options change depending on which dia gnostic tool (DNS Name Lookup or Web Request) is select ed from the Diagnostic T [...]

130 | Dell Sonic WALL WXA 1.3 User’s Gui de Name Description Diagnostic T ool > W eb Request Selects the tool type from the Diagnostic T ool drop- down menu. Request URL - http:// T ext Field Enter the URL you wish to test. Go button Initiates the test for the requested URL. This button is greyed out until a URL is entered into to “Request U[...]

Configuring the Web Cache | 131 Chapter 10 Configuring the Web Cache WAN Acceleration > Web Cache The Web Cache page provides options to enable, configure, view result s, diagnose, and test performance of the Web Cache feature. By enabli ng the Web Cache servic e, the NSA/TZ series appliance immediately begins transparently forw arding HTTP conn[...]

132 | Dell Sonic WALL WXA 1.3 User’s Gui de Configuring the Web Cache T o configure the Web Cache page, per form the following: Ste p 1 Login to the managing NSA/TZ series appliance, and then navigate to the Network > Web Proxy page. Ste p 2 Select the Divert traffic to the WXA series appliance’ s Web Cache checkbox. This enables the use of [...]

Configuring the Web Cache | 133 Ste p 7 In the Client Inclusion Address Object drop-d own menu you can select the Address Object or Group that represent s the local subnets whos e web traffic should be diverted via the Web Cache. Y ou can also choose “Any” and the traf fi c from any source IP address is forwarded to the WXA. Ste p 8 In the Serv[...]

134 | Dell Sonic WALL WXA 1.3 User’s Gui de Verifying Web Cache Operation After Configuring the W eb Cache service, perform the following verification steps: Ste p 1 Navigate to the Web Cache > St atistics tab. Ste p 2 View the number of cached objects to c onfirm th e Web Cache se rvice is working.[...]

Configuring the Web Cache | 135 Diagnosing and Testing Performance of the Web Cache T est the performance or diagnose the W eb Cachi ng features on the W eb Cache > T ools tab by using the W eb Request diagnostic t ools and viewing the results. DNS Lookups are not used in the operation of the Web cache, but there is a DNS Name Lookup tool provid[...]

136 | Dell Sonic WALL WXA 1.3 User’s Gui de DNS Name Lookup The DNS Name Lookup panel searches for a name or IP address and displays results including the address, DNS server , resolv ed status, and lookup time. T he DNS server s used in these lookups are the DNS servers inherited fr om th e NSA/TZ serie s appliance’ s settings. They may be dif[...]

| 137 System[...]

138 | Dell Sonic WALL WXA 1.3 User’s Gui de[...]

Viewing the System Page | 139 Chapter 11 Viewing the System Page WAN Acceleration > System The System page provides options to m onitor and change the W A N Acceleration system settings. This chapter det ails the management in terface functions of the System S tatus, Interface S tatus, Management, Settings, and Firmware tabs. Name Description Sy[...]

140 | Dell Sonic WALL WXA 1.3 User’s Gui de System Status Tab Name Description System Information Panel (Read-only) Displays the following in formation: • Model Number • Serial Number • Firmware V ersion. T ime Settings Panel Configure the time synchr onization source , refresh the UTC ti me, or view the loca l time on client. It is recomme[...]

Viewing the System Page | 141 Figure 30 Time Settings > Time Synchronization Pop-up Window • Use the Domain Controller for Time Synchronization: Checkbox — Select this checkbox to use the domain controller as the time synchronization source. • NTP Server: T ext Field — Override the domain controller synchronization by specifying an NTP s[...]

142 | Dell Sonic WALL WXA 1.3 User’s Gui de Interface Status Tab Name Description Refresh Refreshes the Interface S tatus tab. The refresh interval can be entered in the text field. The inte rval can be increased to a maximum of 999 seconds. Click the Refresh butto n to manually update the Interface S tatus tab. Click the Pause button to stop upd[...]

Viewing the System Page | 143 Figure 31 Maximum Tran smissio n Unit • MTU: T ext Field — The Maximum T ransmission Unit (MTU). • Apply Button — Applies all changes. • Cancel Button — Cancels the operation. Management Tab SNMP Name Description SNMP Panel Ena ble s the simple network monitoring protocol server . Add read-only and read-wri[...]

144 | Dell Sonic WALL WXA 1.3 User’s Gui de Syslog Server Settings Tab Name Description Syslog Server Panel Sets the ser ver IP address to which log messages are sent. Apply Changes Button Applie s all changes. Name Description Refresh Refreshes the Setting s tab. Settings Panel Manage the setti ngs by downloadi ng new settings or delete old/un u[...]

Viewing the System Page | 145 Firmware Tab Note When performing a firmware upload, do NOT na vigate away from the System > Firmware tab. This could stop the uploading process or cause the management interface to become unresponsive. Name Description Current Settings Panel Allows you to download a copy of the current settings. Perform this before[...]

146 | Dell Sonic WALL WXA 1.3 User’s Gui de[...]

| 147 Log[...]

148 | Dell Sonic WALL WXA 1.3 User’s Gui de[...]

Viewing the Log Page | 149 Chapter 12 Viewing the Log Page WAN Acceleration > Log The Log page provides a d etailed list of log event messages and provides multiple options to change how the log messages display . The Minimum Priority and Categories drop- down menus are used to determine which logs are retrieved fr om the WXA.The filters at the [...]

150 | Dell Sonic WALL WXA 1.3 User’s Gui de Column Headings Filter by Filter the results by selecting from the drop-down l ists and entering text into the priority , category , and message text fiel ds. The filters you select determine which of the log entries retrieved from the WXA series a ppliance are displaye d on the Log screen. Export as CS[...]

| 151 Appendices[...]

152 | Dell Sonic WALL WXA 1.3 User’s Gui de[...]

Appendix A: Configuring the WXA to the Domain Without Us ing the WXA Management Interface | 15 3 Appendix A: Configuring the WXA to the Domain Without Using the WXA Management Interface This appendix contains procedures to configur e the WXA series appliance to the domain without using the WA N Acceleration management interface. Note Although this [...]

154 | Dell Sonic WALL WXA 1.3 User’s Gui de Ste p 3 In the Enter the object name to select text field, enter SELF , and then click OK . Note This is also required when manually joining using a non-admin account. Ste p 4 Right click on the computer account, go to Properties . Ste p 5 Select the setting T rust this computer for delegation to specif[...]

Appendix A: Configuring the WXA to the Domain Without Us ing the WXA Management Interface | 15 5 Ste p 8 Select the computer account to which the WXA series appliance computer account can present delegation credentials. For example, if you were performing this c onfiguration for a central site, you would select the WXA series appliance computer acc[...]

156 | Dell Sonic WALL WXA 1.3 User’s Gui de If you typed SELF in the computer account for step 3, perform steps 1 1 and 12. Ste p 11 Open a cmd.exe window . Step 12 Set the password for the computer account, where ABCD -EFGH is the auth code. Note The password for the computer account must be the auth code found on the WA N Acceleration > St a[...]

Appendix A: Configuring the WXA to the Domain Without Us ing the WXA Management Interface | 15 7 Configuring Reverse Lookup After both WXA appliances are added to the dom ain , corresponding Computer Account s for WXA appliances, DNS Host name, and Pointer (P TR) records are automatically created on the DC and DNS servers. For PTR records to be upd[...]

158 | Dell Sonic WALL WXA 1.3 User’s Gui de Manually Adding SPN Hostnames in DNS In the event that SPN hostnames are not added automatically , the Domain Administrator can manually add SPN hostnames in the DNS. Perform the following step s: Ste p 1 Navigate to the DNS on the central and branch sites. Ste p 2 Expand the Forwar d Lookup Zones. Ste [...]

Appendix B: Configuring the NetExtender WAN Accelerati on Client | 159 Appendix B: Configuring the NetExtender WAN Acceleration Client This appendix provides configuration procedures for activating, inst alling, and enabling the NetExtender W AN Acceleration Client (WXAC). The configur ation procedures are split into two part s: one for the Adminis[...]

160 | Dell Sonic WALL WXA 1.3 User’s Gui de • If the WXA appliance is not connected to a De ll SonicW ALL NGFW , t he WXAC tab will not display in the NetExtender management interface. • A link to install the WXAC will display on t he NetExtender WXAC t ab if WXAC is licensed and enabled on the managing NSA/TZ series appliance, but not yet in[...]

Appendix B: Configuring the NetExtender WAN Accelerati on Client | 161 The License Management p age displays: Ste p 4 Enter your MySonicW ALL cr edentials, then click the Submit button. The Manage Online Services page displays: Ste p 5 Click the Activate link in the Manage Service column for the WAN Acceleration Client.[...]

162 | Dell Sonic WALL WXA 1.3 User’s Gui de The License Management p age displays: Ste p 6 In the W AN Acceleration Client Activation Key text- field, enter your W A N Acceleration Client license key , then click the Submit button. For reference, the table below displays the ma ximum numbers of supported client licences per appliance: Note Lower [...]

Appendix B: Configuring the NetExtender WAN Accelerati on Client | 163 Configuring SSL VPN for the NetExtender WXAC Co nnection Ste p 7 Navigate to the SSL VPN > Server page, and then configure the server settings. Ste p 8 Navigate to the SSL VPN > Client page, and then configure the client settings. Refer to the SonicOS 5.9 Administrator ’[...]

164 | Dell Sonic WALL WXA 1.3 User’s Gui de Configuring WXAC on a Remote PC This section shows the client user how to download and install the NetExtender Client (if not already done), and then download, install, and enable NetExtender WXAC. These procedures are performed on a remote PC that is connecting to a central site. Downloading / Installi[...]

Appendix B: Configuring the NetExtender WAN Accelerati on Client | 165 The Virtual Of fice main page displays: Ste p 4 Click the Here link to download the NetExtender Client. Ste p 5 Run the NetExtender Setup Wizard to install the NetExtender Client. Refer to the SonicOS 5.9 Administrator ’s Guide for details on the NetExtender Setup Wizard. Down[...]

166 | Dell Sonic WALL WXA 1.3 User’s Gui de Password —the password created by the Administrator . Domain —the domain name displayed in the SSL VPN > Server Settings page of the managing NSA/TZ appliance’ s management interface. Ste p 8 Click the Connect button. Ste p 9 Once the NetExtender Client is connected, click the WXAC tab, and the[...]

Appendix B: Configuring the NetExtender WAN Accelerati on Client | 167 Step 12 Once you are connected, click the Properties button, then select Acceleration from the lef t- navigation menu. The Acceleration screen displays: Step 13 V erify that the Enable Acceleration checkbox is selected. Note The Enable Acceleration check box is selected by defau[...]

| 169[...]