SonicWALL TZ 180 manual

1 SonicWALL TZ 180 TotalSecure SonicWALL TZ 180 TotalSecure Administrator’s Guide Introduction SonicWALL TZ 180 TotalSec ure is included in SonicWAL L’s unified th reat manage ment solution that integr ates Ga teway Anti-Virus, Anti-Spyware, and Intrusion Preven tion Ser vice into an intelligent, real-time ne twork security solution. This provi[...]

What is TotalSecure? 2 SonicWALL TZ 180 TotalSecure Prevention Service delivers unifie d threat mana gement directly on the SonicWALL security appliance gatewa y. Unlike other threat management solutions, Soni cWALL Ga teway Anti-Virus, Anti-Spyware and Intrusion Prevention Service has the cap acity to an alyze files of any size in real-time withou[...]

SonicWALL Gateway Anti-Virus 3 SonicWALL TZ 180 TotalSecure SonicWALL Gateway Anti-Virus This section provides an overview to the SonicW ALL Gateway Anti-Virus. This section cont ains the following subsections: • GA V Overview • How Does GA V Work? • Benefits • SonicW ALL Gateway Anti-Virus/Intrusion Prevention Features • SonicW ALL GA V [...]

SonicWALL Gateway An ti-Virus 4 SonicWALL TZ 180 TotalSecure SonicWALL Gateway Anti-Virus/In trusion Prevention Features The Gateway Anti-V irus/Intrusion Prevention features are de scribed below: • Integrated Deep Packet Inspection T echnology - SonicWALL Gateway Anti-Virus/Intrusion Pr eventi on Service features a conf igurable, high-performanc[...]

SonicWALL Gateway Anti-Virus 5 SonicWALL TZ 180 TotalSecure of other stream-based protoc ols. This closes potential backdoors that can be used to compromise the network while also impr oving employee productivity and conserving Internet bandwidth. • Application Control - SonicWALL Gateway Anti-V ir us/Intrusion Prevention Service provides the abi[...]

SonicWALL Gateway An ti-Virus 6 SonicWALL TZ 180 TotalSecure Remote Site Protection To protect the internal networ k, per for m the following steps: Ste p 1 Users send typical e-mail and files between remote sites and the corporate office. Ste p 2 SonicW ALL GA V scans and analyzes files and e -mail messa ges on the SonicW ALL security appliance. S[...]

SonicWALL Gateway Anti-Virus 7 SonicWALL TZ 180 TotalSecure Ste p 4 Virus is logged and alert is sent to administrator . HTTP File Downloads The process for HTTP File Downloads is descri bed in the steps and diagram below: Ste p 1 Client makes a request to download a file from the Web. Ste p 2 File is downloaded through the Internet. Ste p 3 File i[...]

SonicWALL Gateway An ti-Virus 8 SonicWALL TZ 180 TotalSecure Server Protection The process for Server Protection is descr ibed in the steps below: Ste p 1 Outside user sends an incoming e-mail. Ste p 2 E-mail is analyzed through the SonicW ALL GA V engine for malicious code and viruses before received by e-mail server . Ste p 3 If virus found, thre[...]

SonicWALL Gateway Anti-Virus 9 SonicWALL TZ 180 TotalSecure Stream Concurrency Limitations by SonicWALL Security Appliance Because SonicWALL GAV does not have to perform reassembly, th ere are no file-size limitations imposed by the sca nning en gine. Base 64 decod ing , ZIP, LHZ, and GZIP (LZ77) decompression are also performed on a single-pass, p[...]

SonicWALL Gateway An ti-Virus 10 SonicWALL TZ 180 TotalSecure Note 8-bit encoding is handled natively for all email based protoco ls (SMTP , POP3, and IMAP) since no decoding is required for each encoding scheme. SMTP Capabilities : base64 decoding , zip (including archives) and gzip decompression . Prevention Mechanis m : The message which contain[...]

SonicWALL Intrusion Prevention Service 11 SonicWALL TZ 180 TotalSecure Prevention Mechanis m : The connection is terminated, prev enting the user from receiving the malicious payload. FTP Capabilities : zip (including archives) and gzip decom pressi on. FTP stateful code follows data port negotiations, allowing FTP data to be inspected acro ss an y[...]

SonicWALL Intrusion Prevention Service 12 SonicWALL TZ 180 TotalSecure What is a Zone? A Zone is a logical grouping of one or more inter faces and/or VLANs designed to make management, such as the d efinition and applicatio n of Access Rules, a s imp ler and more intuitive process than following strict physical inter face scheme. Zone-base d securi[...]

SonicWALL Anti-Spyware 13 SonicWALL TZ 180 TotalSecure SonicWALL Anti-Spyware SonicWALL Anti-Spyware is included within the SonicWALL Gateway Anti-Virus (GAV), Anti-Spyware and Intrusion Pre vention Service (IPS) unified threat man agement solution. SonicWALL GAV, Anti-Spyware an d IPS delivers a comprehensive, r eal-time gateway security solution [...]

SonicWALL An ti-Spyware 14 SonicWALL TZ 180 TotalSecure clients and reset those connecti ons. For example, when spyw are has been profiling a user's browsing habits and atte mpts to send the pr ofile information home, the SonicWALL security appliance identif ies that traffic an d re se ts th e con n ec tion . The SonicWALL An ti-Spyware Servic[...]

SonicWALL Content Filtering Service - Premium 15 SonicWALL TZ 180 TotalSecure SonicWALL Content Filtering Service - Premium This section provides an overview to the Soni cWALL Content Filtering Service. This section contains the following subsections: • CFS Overview • How Does CFS Premium Work? • Benefits CFS Overview SonicWALL Content Filter[...]

SonicWALL Deep Packet Inspec tion 16 SonicWALL TZ 180 TotalSecure SonicWALL Deep Packet Inspection This section provides an overview to the Soni cWAL L Intrusion Prevention Service (DPI). This section contains the following subsections: • DPI Overview • How Does DPI W ork? • Benefits DPI Overview Deep Packet Inspection (DPI) looks at the data[...]

SonicWALL Deep Packet Inspection 17 SonicWALL TZ 180 TotalSecure Figure 1 Deep Packet Inspe ction Flow Diagram The following steps descri be how the SonicWALL Deep Packet Inspection Architecture functions: 1. P attern Definition Languag e Interp reter uses signatures that can be written to detect and prevent against known and un known protocols, ap[...]

18 SonicWALL TZ 180 TotalSecure SonicWALL Security Dashboard This section provides an introduction to the Security Dashboard feature. This section cont ains the following subsections: • Security Dashboard Overview • What is Security Dashboard? • How Does the Security Dashboard W ork? • Benefits[...]

SonicWALL Security Dashboard 19 SonicWALL TZ 180 TotalSecure Security Dashboard Overview The SonicW ALL Security Dashboard provides reports of the latest threat protection data from a single SonicW ALL appliance and aggregated threat protection data from SonicW ALL security appliances deployed globally . The SonicW ALL Secu rity Dashboard displays [...]

SonicWALL Security Dashboard 20 SonicWALL TZ 180 TotalSecure Each report includes a graph of threats blocked over time and a table of the top blocked threats. Reports, which are updated hour ly , can be customized to display data for the last 12 h ours, 14 days, 21 days, or 6 months. For easier viewi ng, SonicW ALL Security Dashboard report s can b[...]

SonicWALL Security Dashboard 21 SonicWALL TZ 180 TotalSecure What is Security Dashboard? The T otalSecure provides the latest threat protection information to keep you informed about potential threats being blocked by SonicW A LL security appliances . When you activate SonicW ALL ’s security services, including Gatewa y Anti-V irus, Gateway Anti-[...]

Registering Your Applianc e on MySonicWALL 22 SonicWALL TZ 180 TotalSecure Figure 3 SonicW ALL Security Dashboard PDF Repor t Registering Your Appliance on MySonicWALL While the SonicW ALL TZ 180 To talSecure inclu des licenses fo r the Intrus ion Prevention se rvices, you must activate these services by followin g the steps within the sections lis[...]

Registering Your Appliance on MySonicWALL 23 SonicWALL TZ 180 TotalSecure Creating a mySonicWALL.com Account Creating a mySonicWALL.com account is fast, simple, and free. Simply co mplete an online registration form in the SonicWALL se curity ap pliance management inte rface. Note: If you already ha ve a mysonicWALL.co m account, go to “ ” on p[...]

TotalSecure Configuration T ask List 24 SonicWALL TZ 180 TotalSecure Registering Your SonicWALL Security Appliance 1. Log into the SonicW ALL security appliance management interface . 2. If the System > Status page is not displaying in the management interface, click System in the left-navig ation menu, and th en click Status . 3. On the System [...]

TotalSecure Configuration Task List 25 SonicWALL TZ 180 TotalSecure Setting Up SonicWALL GAV Protection The Security Services > Gateway Anti-Virus page provides the settings for configu ring SonicWALL GAV on your SonicWALL security appliance. Enabling SonicWALL GAV You must select Enable Gateway Anti-Virus chec k box in the Gateway Anti-Virus Gl[...]

TotalSecure Configuration T ask List 26 SonicWALL TZ 180 TotalSecure Applying SonicWALL GAV Protection on Zones (SonicOS Enhanced 3.0) If your SonicWALL security a ppliance is running SonicOS Enhanced 3.0, you can enforce SonicWALL GAV not only between each network zone and the WAN, but also between internal zones. For exa mple, enablin g SonicWALL[...]

TotalSecure Configuration Task List 27 SonicWALL TZ 180 TotalSecure Note Y ou also enable SonicWALL GA V protec tion for new zones you create on the Network > Zones page. Clicking the Add button displays the Add Zone window , which includes the same settings as the Edit Zone window . Viewing SonicWALL GAV Status Information The Gateway Anti-Viru[...]

TotalSecure Configuration T ask List 28 SonicWALL TZ 180 TotalSecure Updating SonicWALL GAV Signatures By default, the SonicWALL security applian ce running So nicWALL GAV au tomatically ch ecks the SonicWALL signature serve rs once an hour. There is no need for an admin istrator to constantly check for new signature updates. You can also ma nually[...]

TotalSecure Configuration Task List 29 SonicWALL TZ 180 TotalSecure The Enable Inbo und Inspection protocol traffic handling r epresented as a table: Enabling Outbound SMTP Inspection The Enable Outb ound Inspection feature is available for SMTP traffic, such as for a mail server that might be hosted on the DMZ. Enabling ou tbound in spection for S[...]

TotalSecure Configuration T ask List 30 SonicWALL TZ 180 TotalSecure Configuring Client Alerts If you want clients on your netw ork to receive notification s on their d esktop when a HTTP file download is blocked by GAV, check the Enable Client Not ification Alerts ( desktop client installation is required) box. You must install the c lient soft wa[...]

TotalSecure Configuration Task List 31 SonicWALL TZ 180 TotalSecure • Restrict T ransfer of p assword-protected Zip files - Disables the transfer of p assword protected ZIP files over any enabled protocol. This option only functions on pr otocols (e.g. HTTP , FTP , SMTP) that are enabled for inspection. • Restrict T ransfer of MS-Office type fi[...]

TotalSecure Configuration T ask List 32 SonicWALL TZ 180 TotalSecure Navigating the Gateway An ti-Virus Signatures Table The SonicWALL GAV signatures are displayed fifty to a page in the Gateway Anti-Virus Signatures table. The Items field displays the table number of the first signature. If you’re displaying the first page of a signature table, [...]

TotalSecure Configuration Task List 33 SonicWALL TZ 180 TotalSecure To disable IPS, uncheck the Enable IPS check box. This will prevent blocking of traffic that matches the IPS signatures. Howe ver, some signature s belong to Application Filter category sets as well as other types o f category set s such as GAV, IPS, An ti-Spyware, or Web Filters. [...]

TotalSecure Configuration T ask List 34 SonicWALL TZ 180 TotalSecure • Use the IPS Global Setting to enable the option Prevent All for all three IPS Signature Grou ps. Now all three IPS Signature Groups [ High, Medi um resp . Low Priority ] will be Prevented, which will Prevent quite a lot flowing in the network, fo r example: • MSN Messenger ,[...]

TotalSecure Configuration Task List 35 SonicWALL TZ 180 TotalSecure • Anti-S pyware Global Set tings - provides the key setti ngs for enabling SonicW ALL Anti-S pyware on your SonicW ALL security appliance, specifying global SonicW ALL Anti-S pyware protection based on three clas ses of spyware, and other configuration options. • Anti-S pyware [...]

Glossary 36 SonicWALL TZ 180 TotalSecure Specifying Spyware Dang er Level Protection SonicWALL Anti-Spyware allows you to globally manage your n etwork protection against attacks by simply selecting the class of attacks: High Danger Level Spyware , Medium Danger Leve l Spyware and Low Danger Level Spyware . Selecting the Prevent All and Detect All [...]

Glossary 37 SonicWALL TZ 180 TotalSecure • Deep Packet Inspection - looking at the data portion of th e packet. Enables th e firewall to investigate farther into the protocol to examine information at the application layer and defend against attacks t argeting application vulnerabilities. • Distributed Enforcement Architecture - SonicW ALL ’s[...]

Related Documentation 38 SonicWALL TZ 180 TotalSecure Related Documentation SonicW ALL user gui des and reference documents are a vailable at the SonicW ALL T echnical Documentation Online Librar y: http://www .sonicwall.com/us/Support.html F or basic and advanced deplo yment examples , refer to SonicOS Guides and SonicW ALL T echNotes av ailable o[...]

Related Documentation 39 SonicWALL TZ 180 TotalSecure See the following documents for more infor m ation: • SonicW ALL CFS Premium Administrator's Guide • SonicW ALL Gateway Anti-V irus 2.0 Administrator's Guide • SonicW ALL Intrusion Prevention Service 2.0 Administrator's Guid e • SonicW ALL Anti-Spyware Administrator's[...]

Related Documentation 40 SonicWALL TZ 180 TotalSecure[...]