SonicWALL 7 manual

PROTECTION A T THE SPEED OF BUSINESS ™ Global Management System (GMS) 7.0 Getting Started Guide[...]

SonicWALL GMS 7.0 Get ting Started Guide Page 1 SonicWALL GMS 7.0 Getting Started Guide This Getting St arted Guide contain s installation procedures and configuratio n guidelines for deploying SonicW ALL Global Manage ment System (SonicWAL L GMS) on a Windows server on your network. SonicW ALL GMS is a Web- based application th at can configure, m[...]

Page 2 Contents This document contains the following sections: “Before Y ou Begin” on pag e 3 • “System Requirement s” on p age 3 • “Record Configur ation Informa tion” on page 7 “Installing and Upgrading SonicW ALL GMS” on page 8 • “Installing Universal Managem ent Suite 7.0” on p age 8 • “Upgrading From an Earlier V [...]

SonicWALL GMS 7.0 Get ting Started Guide Page 3 Befor e Y ou Be gin See the following sections for information about SonicW ALL GMS: • “System Requ irements” on page 3 • “Record Configura tion Information” on page 7 System R equirements The SonicW ALL GMS 7.0 software comes with a base license to manag e either 10 nodes or 25 no des. Y [...]

Page 4 Note: SonicWALL GMS does not support MS SQL Server 2005 Express. • SonicW ALL MySQL Install Package installed on either Windows 20 00 Server (SP4) or 2003 Server (S P1) MySQL R equir ements SonicW ALL GMS automatically in stalls MySQL as pa rt of the base insta llation package. Separate ly inst alled instances of MySQL is not supported wit[...]

SonicWALL GMS 7.0 Get ting Started Guide Page 5 SonicWALL Appliance and Firmw are Support Note: Legacy SonicWALL XPRS/XPR S2, SonicWALL SOHO2, So nicWALL Tele2, and SonicWALL Pro/Pro-VX mo dels are not supporte d for SonicWALL GMS management. Appliances running SonicWALL leg acy firmware including SonicOS Standard 1.x a nd SonicWALL legacy fir mwar[...]

Page 6 SonicWALL GMS Gatew ay R e commendations A GMS gateway is a SonicWALL firewall appli ance that allows for secure co mmunication between the SonicW ALL GMS server and the managed a ppliance(s), using VPN tunnels. A GMS gateway is not required in all de ployment scenarios, but when deployed , the GMS gateway must be a SonicWALL VPN-bas ed netw[...]

SonicWALL GMS 7.0 Get ting Started Guide Page 7 R ecor d Conf igura tion Informa tion Before continuing, record the following configu ra tion information for your referen ce. SonicWALL GMS Inf orma tion SMTP Server Address : The IP address or host name of your Simple Mail T ransfer Protocol (SMTP) server . For example, mail.emailprovider .com. HTTP[...]

Page 8 Installing and Upgr ading SonicWALL GMS SonicW ALL GMS can be configured for a single server or in a distribute d environment on multiple servers. SonicW ALL GMS 7.0 can be inst alled as a fresh inst all or as an upgrade from GMS 6.0. Note: You must disable the User Account Co ntro l (UAC) feature on Windows b efore running the SonicWA LL GM[...]

SonicWALL GMS 7.0 Get ting Started Guide Page 9 2. In the Introduction screen, click Next . 3. In the License Agreement screen, select the radio button n ext to I acc ept th e te rms of the License Agreement . Click Next .[...]

Page 10 4. Select the path to the folde r where you wo uld like to install the files. Y ou can accept the default path, C:GMSVP , type in a new path, or click the Choose button to navigate to the selected folder . When you are finished, click Next . Alert: Do not include spaces in the installation path. 5. In the Sonic W ALL Univers al Management [...]

SonicWALL GMS 7.0 Getting St arted Guide Page 11 8. If you see a Windows Security Alert for Java, click Unblock . 9. The installer displa ys a progress bar as the file s are installed. Wait a few minutes for the installer to fini sh installing. 10. After th e files are insta lled, whether or not the system has a Personal Fire wall such as Windows F[...]

Page 12 This screen also provides information abou t registration. T o register a SonicW ALL GMS installation, use the 12-char acter serial number that you rece ived when you purchased this product. Click Next . 12. In the Installation Comp lete screen, select Y es, rest a rt my system to rest art your system immediately , or select No, I will rest[...]

SonicWALL GMS 7.0 Getting St arted Guide Page 13 Note: In a distribu ted environm ent, stop all G MS services o n all GMS server s before performing an upgrade. You must up grade all GMS se rvers in your deploymen t to the same ve rsion of Soni cWALL GMS 7. 0. You cann ot have some servers running versio n 6. 0 and others run nin g 7.0. It is highl[...]

Page 14 R egistering and Licensing Son icWALL GMS All instances of SonicW ALL GMS must be registered and licensed before use. This requirement applie s to both single server deployme nts or distr ibuted deployment s on multiple servers, to fresh or upgraded inst allations, and to softwa re inst allations on Windows servers or to SonicW ALL UMA appl[...]

SonicWALL GMS 7.0 Getting St arted Guide Page 15 2. The login p age loads by default in English, type admin in the User field, and p assword in the Password field and then click Submit . SonicW ALL GMS includes language support for Engl ish, Japanese, Simplified Chinese, T raditional Chinese. Click the language of yo ur choice at the bottom of this[...]

Page 16 6. On the License Management p age, type your MySonicW ALL user name and password into the appropriate fields and th en click Submit . Note: If you do not have a MySonicWALL account, you mu st cr eate one before continuing. Click here in the senten ce, If you do not have a mySonicWall account, please click here to create one. 7. On the seco[...]

SonicWALL GMS 7.0 Getting St arted Guide Page 17 R egistering Associa ted Server s i n a Distributed De ployment When you have a distributed SonicW ALL GM S deployment involving more than one SonicW ALL UMA EM5000 appliance or software inst ance of Soni cW ALL GMS, you can associate these co mponents during the regist ration process. A MySonicW ALL[...]

Page 18 Selecting the R ole for a So nicWALL GMS Serv er The role that you assign to your SonicW ALL GMS defines the SonicW ALL Universal Management Suite services that it will provid e. Sonic W ALL GMS uses these services to perform management, monitor ing, and reporting tasks. Y our SonicW ALL GMS can be deployed in any of the following roles: ?[...]

SonicWALL GMS 7.0 Getting St arted Guide Page 19 The initial Deployment > Role page is shown be low: Using the R ole Configur a tion T ool The Role Configu ratio n T ool is a wizar d th at gu id es you th ro ug h the pr oc ess of defining the deployment role for SonicW ALL GMS. Y our system must be registered and licensed for SonicW ALL GMS to r[...]

Page 20 T o use the Role Configuration T ool, perform the following step s: 1. Log into the appliance manageme nt interface and navigate to the System > St a tu s pag e. 2. Click the Click here link at the top of the page. 3. In the Introduction page of the Role Config uration T ool, click Next . 4. In the Setup T ype page, select Ye s if you ar[...]

SonicWALL GMS 7.0 Getting St arted Guide Page 21 If you selected a role that does not include the MySQL da tabase, you have the option of configurin g the use of a SQL S erver database in this screen . • Note the following when selecting value s for these fields: • Dat abase User – Do not use any special characters, and do not use 'sa&ap[...]

Page 22 1 1. In the Summary page, verify that all parameters are correct. Click Back to make changes on a previous screen, or click Apply to accept the settings. 12. W ait for the settings to be a pplied. The screen displays a progre ss bar until it finishes, and then displays the st atus. This phase can t ake up to 10 minutes, especially if the da[...]

SonicWALL GMS 7.0 Getting St arted Guide Page 23 Configuring the All In One R ole All In One depl oyments ar e ideal for managin g a small number of SonicW ALL appliances or for test environm en ts. However , SonicW ALL recommends that you use a multi- system, distributed depl oyment in production environment s, with the dat abase on a dedicated se[...]

Page 24 Config uring the Database Only R o le The Database Only role is used in a multi- server SonicW ALL GMS deployment. In this role, the server is config ured to run only th e dat aba se service . SonicW ALL recommends that one of the servers in a multi-server GMS deploymen t is assigned a Database On ly role. Only the SonicW ALL Universal Mana[...]

SonicWALL GMS 7.0 Getting St arted Guide Page 25 T o deploy your SonicWALL GMS server in th e Console role, p erform the following steps: 1. Log into your UMH syst em in terface and navigate to the Deployment > Role page. 2. Under Host Role Configuration , select the Console radio button. 3. If this SonicWALL GMS server will connec t to managed [...]

Page 26 • Syslog Collector • Web Service Server T o deploy your SonicWALL GMS server in the Agent r ole, perform the following step s in the UMH system interface: 1. Navigate to the Deployment > Ro le page. Und er Host Role Configuration , select the Agent radio button. 2. If this SonicWALL GMS server will connec t to managed applia nces thr[...]

SonicWALL GMS 7.0 Getting St arted Guide Page 27 Config uring the Monitor Role The Monitor role is used to dedicate the SonicW ALL GMS server to monitoring appliances and applications in a multi-serve r SonicW ALL GMS deployment. The monitoring is ba sed on ICMP probe s, TCP probes and SNMP OID retrievals. Only the SonicW ALL Universal Manag ement [...]

Page 28 T o deploy your SonicWALL GMS server in the Syslog Collector ro le, perform the following steps in t he UMH system interfac e: 1. Navigate to the Deployment > Ro le page. Und er Host Role Configuration , select the Syslog Collector radio button. 2. If this SonicWALL GMS server listens for syslog messages on a non-standard port, type the [...]

SonicWALL GMS 7.0 Getting St arted Guide Page 29 drop-down list. This field is not edit able if you previously selected Include Dat abase (MYSQL) or if the selected role is All In One or Database Only . 4. In the Database Host field, type in the IP address of the dat abase se rver or accept the default, localhost , if this SonicW ALL GMS server inc[...]

Page 30 Config uring Web P ort Setti ngs Web port settings co nfiguration is largely th e same on any role. T o change the Web port settings, perform the following step s: 1. On the Deployment > Settings page und er Web Port Configuration , to use a differ ent port for HTTP access to the SonicW ALL GMS server , type the port number into the HTTP[...]

SonicWALL GMS 7.0 Getting St arted Guide Page 31 T o configure the SMTP settings, perform the following step s: 1. On the Deployment > Settings p a ge under SMTP Configuration , enter the IP address of the SMTP ser ver into the SMTP s erver field. 2. Select the Use Authentication checkbox, and enter your SMTP server username and password. 3. In [...]

Page 32 Intr oduction to the Manag ement Interf aces This section describes the two SonicW ALL GMS management interfaces. An almost identical URL is used when accessing eith er the GMS management interface or the Universal Management Host system interface, but the URL is modified t o specify either sgms or appliance . See the following sections: ?[...]

SonicWALL GMS 7.0 Getting St arted Guide Page 33 Switc hing Between Mana g ement Interfaces On systems deployed in the All In One or Co nsole role, the “su peradmin” user can ea sily switch between th e UM H syste m man age m en t inte r fac e an d the Son icWALL GMS management interf ace. The SuperAdmin is the master admini strator for the ent[...]

Page 34 SonicWALL GMS Manag ement Interface Intr oduction SonicW ALL GMS is a W eb-based application fo r configurin g, managing, mon itoring and gathering report s from thousands of SonicW ALL Internet security appliances and non- SonicW ALL appliance s , all from a central location. This section provides an intr oduction to the main element s of [...]

SonicWALL GMS 7.0 Getting St arted Guide Page 35 The Dashboard tab also provides administrat ors with a centralized location to create Universal Scheduled Reports for Firewall, SRA, CDP , and Email Security reporting solutions. For more information on configurin g the Un iversal Dashboard and Universal Scheduled Report s, re fer to the “Using the[...]

Page 36 Manag ement Interface The SonicWALL GMS management interface is the m ain control panel for So nicW ALL GMS. The management interface a llows you to add and modify applian ces, perform monitoring and repo rting tasks, set policies for managed appliances, and co nfigure SonicW ALL GMS settings. The SonicW ALL GMS management interface has fou[...]

SonicWALL GMS 7.0 Getting St arted Guide Page 37 Navigation T abs The SonicW ALL GMS manageme nt interface navi gation tabs are locat ed a t the top of the management interf ace. The seven navigation t abs are Dashboard, Firewall , SRA , CDP , ES, Monitor , and Console . The Monitor tab provides real- time monitoring at the glo bal, group or applia[...]

Page 38 The current selection in th e center pa ne is indicated by the highlighted item. Fo r example, the figure to the left displays the current selection Log > Log Settings . The center pane option s change based on the navigational t ab and lef t pane selectio ns, and selections in the cente r pane mo dify the display in the ri ght pan e. Fo[...]

SonicWALL GMS 7.0 Getting St arted Guide Page 39 Description of Managed Appliance St ates This section describ es th e me a nin g of icons that appear next to managed appliances listed in the left p ane of the SonicW ALL GMS management interface. Appliance Stat us Descriptio n One blue box indicates that the appliance is operating normally . The ap[...]

Page 40 Next Ste ps After inst allation, r egistration, and r ole conf iguration , the next steps in setting up yo ur SonicW ALL GMS deplo yment are performed in the SonicW ALL GMS management interface. See the SonicWALL GMS 7.0 Administrator’s Guide for complete information about configuring Son icW ALL GMS device management and reporting. This [...]

SonicWALL GMS 7.0 Getting St arted Guide Page 41 Copyright Notice © 2012 SonicW ALL, Inc. All rights re served. Under the copyright laws, this manua l or the software described within, cannot be copied, in whole or p art, without the written consent of the man ufacturer , except in the normal use of the software to make a backup cop y . The same p[...]

Page 42 R ela ted T ec hnical Documentat ion SonicW ALL user guid e reference docu ment ation is available at th e Son icW ALL T echnical Documentation Online Library: < http://www .sonicwall. com/us/Suppor t.html >. The SonicW ALL GMS 7.0 documentation set includes the fo llowing user guides: • SonicWAL L GMS 7.0 Release Notes • SonicWAL[...]

SonicWALL GMS 7.0 Getting St arted Guide Page 43 SonicWALL Live Pr oduct Demos Get the mo st out of your Global M ana gement System with the complete line of SonicW ALL products. The SonicW ALL Live Demo Site provides free test d rives of SonicW ALL security products and services through intera ctive live product inst a llations: • UTM/Firewall/V[...]

Page 44 Notes[...]

SonicWA LL, Inc. 2001 Logic Drive T +1 4 0 8 . 745. 9 6 0 0 w w w. s o n i c w a l l. c o m San Jose CA 95124 -3452 F +1 4 0 8 . 745 .9 3 0 0 PN: 232-00 0758 -00 Rev B 2 / 1 2 desc ript ions su bjec t to ch ange w itho ut not ice. 20 1 2 DYNAMIC SECURITY FOR THE GLOBAL NETWORK ™[...]