SonicWALL 2200 manuale d’uso

CO M P R E H E N S I VE I N T E R NE T SE C U R I T Y ™ b SonicWALL Content Security Manager Series SonicWALL CSM 2 200 Getting Started Guide[...]

SonicWALL CSM Series Appliance Getting Started Guide Page 1 SonicWALL Content Security Manag er 2200 Getting Started Guide Thank you for purchasing a So nicW ALL Content Security Manager (CSM) series appliance. The SonicW ALL CSM is an Intern et cont ent and ap plication filt er that enhances security and employee pr oducti vity , optimizes network[...]

Page 2 Befor e Y ou Begin This section cont ains the following subsections: • “Check Package Content s” on page 3 • “What Y ou Need to Provide” on page 4 • “Important Info rmation Y ou Need” on page 4 • “SonicW ALL CSM 2200 Front and Back Panels Overview” on pag e 5[...]

SonicWALL CSM Series Appliance Getting Started Guide Page 3 Chec k P a c k ag e Contents 1. One SonicW ALL SonicW ALL CSM appliance 2. One SonicWALL CSM Getting S tarted Guide 3. One SonicOS Release No te 4. One Tha nk Y ou card 5. One straight-throu gh Ethernet cable 6. One red cr ossover Et hernet cab le 7. One power cord * 8. One SonicWALL CSM R[...]

Page 4 Wha t Y ou Need to Pr ovide • A firewall or securit y appliance protecting your LAN • PC or Macintosh computer to act as an out-of-ba nd management station for initial configuration of the Sonic W ALL CSM • Web browser for accessing the SonicW ALL CSM’s W e b-based manageme nt interface. The W eb browser must support Ja va and HTTP u[...]

SonicWALL CSM Series Appliance Getting Started Guide Page 5 SonicWALL CSM 2200 F r ont and Bac k P anels Overvie w Power T est Alarm X0 X1 X2 X3/HF- Port Console LED LE D LED P ort Port Port O n/Off Power Switch Front Panel F eature Description Console Provides access to command-line interface. Power LED Indicates the SonicW ALL CSM appliance is po[...]

Page 6 Configuring Y our SonicWALL CSM Configuring your SonicWALL CSM comprises the following step s: 1 “Applying Power to the SonicW ALL CSM” on pag e 6 2 “Accessing the SonicW ALL Management Interface” on p age 7 3 “Configuring Y our SonicWALL CSM Using the Setup Wiza rd” on page 9 4 “Connecting the SonicW ALL CSM to Y our Network?[...]

2 SonicWALL CSM Series Appliance Getting Started Guide Page 7 Accessing the SonicWALL Mana gement Interf ace T o access the Web-based man agement interf ace of the Sonic W ALL CSM, co nfigure yo ur out-of-band manage ment station (the comput er you are using to manage the SonicW ALL CSM) with the following static TCP/IP address prop erties: • IP [...]

Page 8 3. Enter http://192.168.168.168 in the Location or Addre ss field and press Enter on your keyboard. Note: For additional se curity, you may also access the appliance using HTTPS. 4. In the SonicW ALL CSM authentication p age, enter ad min in the Name field and password in the Pass word field and click Login . The Setup W izard p age is displ[...]

SonicWALL CSM Series Appliance Getting Started Guide Page 9 3 Configuring Y our SonicWALL CSM Using the Setup Wizar d The SonicW ALL CSM Setup Wizard page autom atically displays afte r the CSM is properly powered on and config ured for and connected to your management st ation. The Setup Wizard allows you to co nfigure the following component s: ?[...]

Page 10 4. In the Time Zon e drop down list, select the correct time zone for your locati on. Check the box next to Automa tically adjust clock for daylight savin g time if you live in a region that observes Daylight Saving T ime. Click Next> to continue. Note: For best perfor mance, you need to configur e the time zone to accurately reflect geo[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 11 5. The Net work Setup screen will prompt you for info rmation to configure the SonicW ALL CSM’s X0 and X1 interfaces , which will enable Internet connectivity . Refer to the t able below for a descr iption of the Network Setup field s. After you ha ve entered th e required informat ion[...]

Page 12 6. The SonicW ALL Configuration Summary displays. Click Apply to confirm the settings. After yo u click the Apply button, the S toring SonicW ALL Configuration screen displays. It may take up to two minute s while changes are being applied to your SonicW ALL CSM appliance. 7. When the configuration has been stored, you will see the Setup Wi[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 13 8. Disconnect your crossove r cable from your management st ation and the CSM appliance and refer to “Connecting t he SonicWALL CSM to Y our Network” on pag e 14 . Note: After initial configuration using the X2 out-of-band manage ment interface, you can now perform managemen t from t[...]

4 Page 14 Connecting the SonicWALL CSM to Y our Networ k Connect the SonicW ALL CSM between your LAN and your firewall/security applia nce, allowing it to filter content request s from the LAN before they pass through th e firewall/ security appliance. This step contain s the following procedures: • “Connecting the Ether net Cables” on p age [...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 15 Connecting the Ethernet Ca bles 1. Connect one end of the Ethe rnet cable con nected to your internal ne twork (your LAN hub, switch, or router) to the X0 (Interna l) port o f the SonicWALL CSM. The LEDs on the X0 port light up indicating an active connection. 2. Connect one end of an Et[...]

Page 16 Tip: The System > Diagnostics > Run Tes t page provides the status of your network connection and security services. The example on this page shows test r esults for a SonicWALL CSM a ppliance with multiple active ne twork DNS server connections. The Content Filt ering Server status is displayed as “no t configured ” in red, which[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 17 5 R egistering Y our SonicWALL CSM Once you have establ ished an Intern et connection for your SonicW ALL CSM, you must register the SonicW ALL CSM to activate: • Allowed Nodes/Users license • SonicW ALL Content Filtering Service subscription • Client Anti-Virus • Gateway Anti-Vi[...]

Page 18 Befor e Y ou Re gister Y ou need a mySonicW ALL.com account to register your SonicW ALL CSM. Y ou can create a new mySonicW ALL.com account directly from the SonicW ALL management interface. Alert: Verify that the DNS and Time s ettings on your SonicW ALL CSM are correct when you register the device. Your DNS and Time setting s should have [...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 19 Cr ea ting a mySonicWALL.com Account Creating a mySonicW ALL.com account is fast , simple, and FREE . Simply complete an online registration form in the SonicW ALL CSM management interface. Y ou must have your SonicWALL CSM and yo ur manage ment station conn ected to the Interne t to com[...]

Page 20 R egistering Y our SonicWALL CSM Using the Manag ement Interfac e 1. Log in to the SonicW ALL CSM management interface if you are not logge d in. 2. If the System > S t atus page is not d isplayed in the management interface, click System in the left-navigatio n menu, and then click St a tu s . 3. On the System > St atus page, in the [...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 21 6 Under standing the *Default P olic y The SonicW ALL CSM includes a pre-configured *D efault Policy with pre-defined W eb Filter Category Set s. The default settings are automa tically applied when you add users from the network segment protected by the SonicW ALL CSM, unless you assign[...]

Page 22 Vie wing the *Default P olicy Settings 1. In the management interface, click the Policies t ab, then select Policy List . 2. Click the Configure icon next to *Default . 3. T o view the default Web filters, click the We b Filters tab. The *Default Web filters are Adult Content , Drugs/Alcohol/T obacco , and Racism/Hate /Violence/Weapons and [...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 23 7 V erifying the *Default P olic y Y ou can verify that the *Default Policy is ac tive by testing the e ach default W eb filter category using a computer with an IP address that is within the assigne d IP address range you specified in Users and Host s > Host s and that is on the same[...]

8 Page 24 Integ ra ting the SonicWALL CSM with Microsoft Activ e Directory T o provide direct, single-sign-on integration with Microsoft’ s Active Direc tory for applyin g filtering properties, th e SonicW ALL CSM includes the SonicW ALL ADConnector application to provide an inte rface between the SonicW ALL CSM filtering policies and Active Dire[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 25 SonicWALL ADConnector R equir ements The Windows PC on which you inst all th e SonicW ALL ADConnector must meet the following requirement s : • A direct or routable acce ss to both the Active Directo ry Domain Controller and the SonicW ALL CSM • An always on comp uter , so that th e [...]

Page 26 Download SonicWAL L ADConnector Softw are Note: You must register your Son icWALL CSM before you can do wnload the SonicWALL AD Connector S oftware. F or instruct ions regist ering, re fer to “Registering Yo ur SonicWAL L CSM” on p age 17. 1. Go to https://www .mySonicWALL.com and log in. 2. Click Download Center under Do wnload in the [...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 27 Install the SonicWALL ADConnector The SonicWALL ADConnector installation wizard installs both the SonicW ALL ADConnector Configuration T ool and the SonicW ALL Agent Service. Note: You must have administrati ve privileges on the computer where you are installing the SonicWALL ADCo nnecto[...]

Page 28 Starting the SonicWALL AD Connector After inst alling the SonicW ALL ADConnector , start the service. Th e agent service must be running at all times for the SonicW ALL CSM to communicate with Active Directory . 1. On your Windows desktop , double click the ADConnector Conf iguration T ool icon, or from the Windows Star t menu, select Progr[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 29 Pr eparin g the SonicWALL A DConnector Configur ation T ool for Fi r st Use 1. Expand the Users list to view the users. 2. The first time you click on a user , the SonicW ALL ADConnector prompts you for the Active Directory attributes for the SonicW ALL ADConnector . Click OK in the Warn[...]

Page 30 8. Click Check . The Active Directory Agent S tatus win dow is displayed. If the Directory Services Conne ctor is detected, the me ssage Directory Services Connector is ready is displayed. 9. Click OK twice to exit. At the end of step 8, if you see th e message, Direc tory Services Connector is not responding , test connectivity from the So[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 31 Adding a Static R oute to the SonicWALL ADConn ector If the SonicW ALL ADConnector is inst alled on a comp uter in a dif ferent subnet than the SonicW ALL CSM, you need to add a static route in the Son icW ALL CSM to the SonicW ALL ADConnector station: 1. In the SonicW ALL CSM management[...]

Page 32 Adv anced Configur a tion After you initially set up an d configure your SonicW ALL CSM, these are the key step s you take to provide content filte ring to your LAN: 1. Organize your We b Filters and determine the content filtering needs for each Category Set. These can be local use rs, RADIUS us ers, or Active Directory use rs. 2. Create c[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 33 Configuring Sta tic IP T o configure the static IP address and subnet mask on your manageme nt station, follow the steps below: Windows XP 1. Right click the Local Area Connection icon and se lect Properties . 2. Double-click Internet Protocol (TCP/IP) . 3. In the Internet Protocol (TCP/[...]

Page 34 Glossary of Networ k ing T erms SonicW ALL ADConnector - A SonicW ALL application for integrating SonicW ALL Content Security Manager filt ering policies with Microsoft Ac tive Directory grou ps and users. applicatio n filtering - A signature-based deep p acket inspectio n mechanism for controlling peer-to-peer (P2P), Instant Messaging (IM)[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 35 router - A device that rou tes data betwee n networ ks through IP address in formation in the header o f the IP packet . A router forwards packets to other rou ters until the packets reach their destinatio n. The Int ernet is the largest example of a routed network. subnet - A por tion o[...]

Page 36 SonicWALL CSM Appliance R egula tory Sta tement and Safety Instr uctions Regulator y Model/T ype Product Name 1RK0A-02A CSM 2200 FCC P art 15 Class A Notice Note: This equipment was tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Ru les. These limit s are designed to provide reasonable[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 37 EU Dec lar ation of Conformity Application of council Directives 89 /336/EEC (EMC) and72/23/EEC (L VD) S tandards to which confor mity is declared: EN 55022 (1998) +A2 Class A EN 55024 (1998) +A2 EN 61000-3-2 (2000) EN 61000-3-3 (1995) +A1 EN 60950-1 (2001) + A1 1 National Deviations: A [...]

Page 38 R egula tory Information f or K orea Ministry of Informatio n and T elecom munication All product s with country code “” (blank) an d “A” are made in the USA. All product s with country code “B” are made in China. All products with country code "C" "D" or "F" are made in T aiwan R.O.C. All certifica[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 39 Mounting the SonicWALL CSM The above SonicW ALL appliances are desig ned to be mounted in a st andard 19-inch rack mount cabinet. The following conditions are required for proper installa tion: • Use the mou nting hardware recommended by the rack manufa cturer and ensure that the rack [...]

Page 40 Ka belv erbindung en Alle Ethernet- und RJ45 Konsole -Kabel eignen sich für die V erbindung von Ge räten in Innenräumen. Schließen Sie an die Anschlüsse der SonicW ALL keine Kabel an, die aus dem Gebäude herausge führt werden, in dem sich das Gerät befin det. W eiter e Hinweise zur Montag e der Modell Die oben genannten SonicW ALL-M[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 41 Copyright Notice © 2006 SonicW ALL, Inc. All rights re served. Under the copyright laws, this manua l or the software d escribed within, cannot be copied, in whole or p art, without the written consent of the man ufacturer , except in the normal use of the software to make a backup copy[...]

Page 42 Notes[...]

© 200 6 Soni cWALL, I n c . So nicWAL L is a reg istered tradem ark of S onic WALL, I n c . Other produ ct and c ompany name s men tioned h erein ma y be t r ademar ks and/ or re gistered trade marks of the i r respe ctive com pan i e s. Speci f icat ions and desc ription s subject to chang e with out n oti c e. T: 408.745.9600 F: 408.745.9300 www[...]