SonicWALL Content Security Manager 2200 manuale d’uso

CO M P R E H E N S I VE I N T E R NE T SE C U R I T Y ™ b SonicWALL Content Security Manager Series SonicWALL CSM 2 200 Getting Started Guide[...]

SonicWALL CSM Series Applian ce Getting Started Guide Page 1 SonicWALL Content Security Mana g er 2200 Getting Started Guide Thank you for purchasing a SonicW ALL Content Security Manager (CSM) serie s appliance. The SonicW ALL CSM is an Intern et content a nd applic ation filter that enhances security and emplo yee producti vity , optimizes networ[...]

Page 2 Befor e Y ou Begin This section cont ains the following subsections: • “Check Package Content s” on page 3 • “What Y ou Need to Provide” on page 4 • “Important In formatio n Y ou Need ” on page 4 • “SonicW ALL CSM 2200 Front and Back Panels Overvie w” on page 5[...]

SonicWALL CSM Series Applian ce Getting Started Guide Page 3 Chec k P ac k a ge Contents 1. One SonicW ALL SonicW ALL CSM appliance 2. One SonicWALL CSM Getting S t arted Guide 3. One SonicOS Relea se Note 4. One T hank Y ou c ard 5. One straight- through Ethernet cab le 6. One red crossov er Ethernet cable 7. One power co rd* 8. One SonicWALL CSM [...]

Page 4 Wha t Y ou Need to Pr ovide • A firewa ll or secu rity ap pliance pr otecting y our LAN • PC or Macintosh computer to act as an out-o f-band management st ation for initial configuratio n of the SonicWALL CSM • Web browser for accessing the SonicW ALL CSM’s W eb-based management interface. The W eb browser must support Ja va and HTTP[...]

SonicWALL CSM Series Applian ce Getting Started Guide Page 5 SonicWALL CSM 2200 F r ont and Bac k P anels Ov erview Powe r T e st A larm X0 X1 X2 X 3/HF-Port Console LED LED LE D Port Port Port On/Off Power S witch Front Pane l Featur e Description Console Provides access to command-line interface. Power LED Indicates the SonicW ALL CSM appliance i[...]

Page 6 Configuring Y our SonicWALL CSM Configuring yo ur SonicWALL CSM comprises the following step s: 1 “Applying Power to the Soni cW ALL CSM” on page 6 2 “Accessing the SonicW ALL Management Inte rface” on page 7 3 “Configur ing Y our Sonic W AL L CSM Us ing the Setup W izard” on page 9 4 “Connecting the Soni cW ALL CSM to Y our Ne[...]

2 SonicWALL CSM Series Applian ce Getting Started Guide Page 7 Accessing the SonicWALL Mana g ement Interf ace T o access the Web-based m anagemen t interface of the SonicWALL CSM, config ure your out-of-band man agement st ation (the comput er you ar e using to manage the SonicWALL CSM) with the following static TCP/IP address pr operties: • IP [...]

Page 8 3. Enter http://192.168.168.168 in the Location or Address field and press Enter on your keyboar d. Note: For additiona l security, you may also access the ap pliance using HTTPS. 4. In the SonicW ALL CSM authentication page , enter admin in the Name field and password in the Password field and click Login . The Setup Wiza rd page is display[...]

SonicWALL CSM Series Applian ce Getting Started Guide Page 9 3 Configuring Y our Sonic WALL CSM Using the Setup Wizar d The SonicW ALL CSM Setup Wizard p age automatically displays af ter the CSM is properly powered on and configured for and conne cted to your mana gement st ation. The Setup Wizard allows you to co nfigure the fo llowing component [...]

Page 10 4. In the Time Zon e drop down list, select the correct time zone for your loca tion. Check the box next to Au tomatically adjust clock for day l ight saving time if you live in a region that observes Daylig ht Saving T ime. Click Next> to continue. Note: For best per formance, you need to configure the time zone to accur ately reflect g[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 11 5. The Net w ork Setup screen will prompt you for info rmation to configure the SonicW ALL CSM’s X0 and X1 interf aces , which will enable Internet connectivity . Refer to the t able below for a description of the Networ k Setup fields. After you ha ve entered the requ ired info rmatio[...]

Page 12 6. The SonicW ALL Configuration Summary displays. Click Apply to confirm the settings. Afte r you click the Apply button , the St oring SonicW ALL Configurat ion screen displays. It may t ake up to two minutes while changes are being applied to your SonicW ALL CSM appliance. 7. When the configuration has been stored, you will see the Setup [...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 13 8. Disconnect your crossove r cable from your management st ation and the CSM appliance and re fer to “Connecting t he SonicWALL CSM to Y our Netw ork” on pag e 14 . Note: After initial configuration using the X2 out-of-band manage ment interface, you can now perform manage ment from[...]

4 Page 14 Connecting the SonicWALL CSM to Y our Networ k Connect the SonicW ALL CSM between your LAN and you r firewall/security appliance, allowing it to filter content reque sts from the LAN before they pa ss through the fir ewall/ security appliance. This step cont ains the following procedures: • “Connecting the Ether net Cables” on page [...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 15 Connecting the Ethernet Ca bles 1. Connect one en d of the Ethernet cable con nected to your inte rnal network (your LAN hub, switch, or router) to the X0 (Inter nal) port of the So nicW ALL CSM. The LEDs on the X0 port light up indicating an active connection. 2. Connect one end of an E[...]

Page 16 Tip: The System > Diagnostics > Run Test page provides the status of your network connection and secur ity services. The e xample on this page sh ows test results for a SonicWALL CSM appliance with multiple active network DNS server connections. The Content Filtering Serv er status is disp layed as “ not config ured” in red, which[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 17 5 R egistering Y our SonicWALL CSM Once you have est ablished an Inte rnet connection for your SonicW ALL CSM, you must register th e SonicW ALL CSM to activate: • Allowed Nodes/Users license • SonicW ALL Content Filtering Service subscription • Client Anti-Virus • Gateway Anti-V[...]

Page 18 Befor e Y o u Re gister Y ou need a mySonicW ALL.com account to register your SonicW ALL CSM. Y ou can create a new mySonicW ALL.com account directly from th e SonicW ALL management interface. Alert: Verify that the DNS and Time set tings on y our SonicW ALL CSM are co rrect when you register the device. Your DNS and Time se ttings should h[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 19 Cr eating a mySonicWALL.com Account Creating a mySonicW ALL.com account is fast , simple, and FREE. Simply complete an online registration form in the SonicW ALL CSM management inter face. Y ou must have your Sonic W ALL C SM and your ma nagemen t station conn ected to the Inter net to c[...]

Page 20 R egistering Y our SonicWALL CSM Using the Manag ement Interf ace 1. Log in to the SonicW ALL CSM managem ent interface if you are not logged in. 2. If the System > S tatus p age is not displayed in the management interface, click System in the left-n avigation menu, and then click St a t us . 3. On the System > St atus page, in the S[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 21 6 Under standing the *Default P olic y The SonicW ALL CSM includes a pre-configu r ed *D efault Policy with pre-defined Web Filter Category Set s. The default settings are automatically applied when you ad d users from the network segment protected by the SonicW ALL CSM, unless you assig[...]

Page 22 Vie wing the *Default P olic y Settings 1. In the management interface, click the Policies t ab, then select Policy Lis t . 2. Click the Configure icon next to *Default . 3. T o view the default W eb filters, click the W eb Filters tab. The *Default Web filters are Adult Content , Dru gs/Alcohol/T obacco , and Racism/ Hate/Violence /Weapons[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 23 7 V erifying the *Def ault P olicy Y ou can verify that the *Default Policy is ac tive by testing the e ach default W eb filter category using a computer with an IP address that is within th e assigned IP address range you specified in Users and Host s > Hosts and that is on the same [...]

8 Page 24 Integ ra ting the SonicWA LL CSM with Micr osoft Activ e Directory T o provide dire ct, single-sign-on integration with Micros oft’ s Active Direc tory for a pplying filtering propertie s , the SonicW ALL CSM includes th e SonicW ALL ADConnector application to provide an interface between the SonicW ALL CSM filtering policies and Active[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 25 SonicWALL ADConnector R equirement s The Windows PC on which you inst all th e SonicW ALL ADConnector must meet the following requirement s: • A direct or routable acce ss to both the Active Directo ry Domain Controller and the SonicW ALL CSM • An always on co mputer , so that the So[...]

Page 26 Download Sonic WALL ADConnecto r Softwar e Note: You must register your SonicWALL CSM before you ca n download th e SonicWALL AD Connec tor Softwa re. For instruct ions regi stering, refer to “Registering Your Sonic WALL CSM ” on page 17. 1. Go to https://www .mySonicW ALL.com and log in. 2. Click Download Center under Download in the l[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 27 Install the SonicWALL ADConnector The SonicWALL ADConnector in stallation wizard installs bo th the SonicW ALL ADConnector Configuration T ool and the SonicW ALL Age nt Service. Note: You must have administrati ve privileges on the computer where you are installing the SonicWALL ADCo nne[...]

Page 28 Starting the SonicWALL ADConnector After inst alling the SonicWALL ADConnector , start the service. Th e agent service must be running at all times for the SonicW ALL CSM to communicate with Active Directory . 1. On your Windows de sktop, double click the ADConnect or Configuration T ool icon, or from the Windo ws Star t menu, select Progra[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 29 Pr eparing the Sonic WALL ADConnector Configur ation T ool for F ir st Use 1. Exp and the Us ers list to view the users. 2. The first time you click on a user , the SonicW ALL ADConnector prom pts you for the Active Directory attributes for the SonicW ALL ADConnector . Click OK in the W [...]

Page 30 8. Click Check . The Active Directory Ag ent S tatus win dow is displayed. If the Directory Services Conn ector is detecte d, the messag e Directory Services Conne ctor is ready is displayed. 9. Click OK twice to exit. At the end of step 8, if you see the message, Directory Servic es Connector is not responding , test connectivity from the [...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 31 Adding a Static R oute to the So nicWALL ADConn ector If the SonicW ALL ADConnector is installed on a computer in a differe nt subnet than th e SonicW ALL CSM, yo u need to add a static route in the SonicW AL L CSM to the SonicW ALL ADConnector st ation: 1. In the SonicW A LL CSM managem[...]

Page 32 Adv anced Conf igur at ion After you initially set up an d configure your So nicW ALL CSM, these are the key steps you ta ke to provide conten t filtering to your LAN: 1. Organize your W eb Filters and determine the content filtering needs for each Category Se t. These can be lo cal users, RAD IUS user s, or Active Directory u sers. 2. Crea[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 33 Configuring Sta t ic IP T o configure the st atic IP address and subnet mask on your management station, follow the steps below : Windows XP 1. Right click the Local Area Connection icon an d select Properties . 2. Double-click Internet Protocol (TCP/IP) . 3. In the Internet Protocol (TC[...]

Page 34 Glossary of Netw or k i ng T erms SonicW ALL ADConnector - A SonicW ALL application for integrating SonicW ALL Content Security Manager filt ering policies with Microsoft Ac tive Directory gr oups and users. applicat ion filter ing - A signature-based deep p acket inspection mecha nism for controlling peer-to-peer (P2P), Instant Messaging ([...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 35 router - A device that r outes da ta between ne tworks thr ough IP a ddress in formatio n in the heade r of the I P packet. A ro uter forw ards packets to o ther rou ters until t he packets reach the ir dest ination. T he Inter net is the largest example of a routed network. subnet - A p[...]

Page 36 SonicWALL CSM Appliance R e gulatory Sta tement and Saf ety Instr uctions Regulat ory Mode l/T ype Product Name 1RK0A-02A CSM 2200 FCC P art 15 Class A Notice Note: This equipment was tested an d found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Ru les. These limit s are designed to provide reasona[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 37 EU Dec lara tion of Conf ormity Application of council Directives 89 /336/EEC ( EMC) and72/23/EEC (L VD) S ta ndards to which conformity is declared: EN 55022 (1998) +A2 Class A EN 55024 (1998) +A2 EN 61000-3-2 (200 0) EN 61000-3-3 (199 5) +A1 EN 60950-1 (2001) + A1 1 National Deviations[...]

Page 38 R egula tory Informa tion for K or ea Ministry of Informa tion and T elecomm unicatio n All product s with country code “” (blank) and “A” are made in the USA. All product s with country code “B” are made in China. All product s with country code "C" "D" or "F" are made in T aiwan R.O.C. All certifi[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 39 Mounting the SonicWALL CSM The above SonicW ALL appliances are desig ned to be mounted in a st andard 19-inch rack mount cabinet. The following conditio ns are required for proper inst allation: • Use the mounting hardwa re recommended by the r ack manufactu rer and ensure that the rac[...]

Page 40 Ka belverbindung en Alle Ethernet- und RJ45 Konsole-Kabel eignen sich für die V erbindung von Geräten in Innenräumen. Schlie ßen Sie an die Anschlüsse der Son icWAL L keine Kabel an, die aus dem Gebäude her ausgeführt werde n, in dem sich das Gerät befindet. W eitere Hinw eise zur Montag e der Modell Die oben genannte n SonicW ALL-M[...]

SonicWALL CSM Series Appliance Ge tting Started Guide Page 41 Copyright Notice © 2006 SonicW ALL, Inc. All right s reserved. Under the copyright laws, this ma nual or the soft ware described within, cannot be copied, in whole or part, without the written consent of the manufacturer , except in the normal use of th e software to m ake a ba ckup cop[...]

Page 42 Notes[...]

© 200 6 Soni cWALL, I n c . So nicWAL L is a reg istered tradem ark of S onicWAL L, I n c . Other produ ct and c ompany n ame s men tioned h erein ma y be t r ademar ks and/ or re gistered trade marks of their respe ctive com panie s. Speci f icat ions and desc ription s subject to chang e with out n otice. T: 408.745.9600 F: 408.745.9300 www.soni[...]