SonicWALL SRA 1200/4200 manual

SonicWALL Anti-Virus Router 80 Getting Sta rted Guide Page 1 Getting Star ted Guide SonicW ALL Secure Remote A cc ess Appliances SECURE REMOTE A C CESS SRA 1200/4200 Getting Star ted Guide[...]

SonicWALL SRA 1200/4200 Gett ing Started Guide Page 1 SonicW ALL SRA 1200/4200 Getting S tarted Guide This Getting St arted Guide contains inst allation procedures and configu ra tion guidelines for deploying a SonicW ALL SRA 1200/4200 appliance into an existing or new network. This document addresse s the most common use-case scenarios a nd networ[...]

Page 2 Document C o nt ents[...]

SonicWALL SRA 1200/4200 Getting Start ed Guide Page 3 Setting Up Y our Network In this Section: This section provides pre-configu ration information. Review this section before setting up your SonicWALL SRA 1200/4200 appliance. • SRA 1200 System Requirements - page 4 • SRA 4200 System Requirements - page 5 • Selecting a Deployment Scenario - [...]

Page 4 SRA 1200 System Requirements SRA 1200 System Requirements Before you begin the se tup proc ess, veri fy that your package contains the following parts: • One SonicW ALL SRA 1200 appliance • One SonicWALL SRA 1200/4200 Getting St arted Guide • One straight-thr ough Etherne t cabl e • One serial CLI cable • One rack-mount kit • One[...]

SonicWALL SRA 1200/4200 Getting Start ed Guide Page 5 SRA 4200 System Requirements Before you begin the se tup proc ess, veri fy that your package contains the following parts: • One SonicW ALL SRA 4200 appliance • One SonicWALL SRA 1200/4200 Getting St arted Guide • One straight-thr ough Etherne t cabl e • One serial CLI cable • One rack[...]

Page 6 What You Need to Begin What Y ou Need to Begin • Administrative access to the network gateway device • A Windows, Linux, or MacOS computer to use as a management station for initial configuration of the SonicW ALL S RA 1200/4200 • A Web browser supporting Java Script and HTTP uploads (See previous pages for supported Web browsers) • [...]

SonicWALL SRA 1200/4200 Getting Start ed Guide Page 7 Selecting a Deployment Scenario The deployment scenarios described in this section are based on actual customer deployments and are SonicW AL L- recommended deployment best practice s for SRA appliances . A SonicW ALL SRA appl iance is commonly deployed in “one- arm” mode over the DMZ or Opt[...]

Page 8 Selecting a Deployment Scenario Scenario B: SRA on an Existing DMZ Scenario C: SRA on the LAN SonicW ALL SRA 120 0/4200 Deployment Sc enarios DMZ LAN WA N OPT , X2, etc X1 X0 X0 Remote Users Network Nodes SonicWALL UTM Appliance E7500 Network Security Appliance Switch Switch Router 1200 SRA Secure Remote Access X0 X1 CONSOLE PWR TEST ALARM S[...]

SonicWALL SRA 1200/4200 Getting Start ed Guide Page 9 Applying Power to the SonicW ALL SRA 1. Plug one end of the power cord into the SonicW ALL SRA 1200/4200 and the other into an appropriate power outlet. 2. T urn on the pow er switch located on the rear of the appliance next to the power cord. The 'Pwr' LED on the front panel lights up[...]

Page 10 Applying Power to th e SonicWALL SRA 4. The ‘SonicWALL SRA Management Interface Login ’ displays and prompts you to en ter your user na me and password. Enter “ ad min ” in the User Name field, “ password ” in the Password field, select “ LocalDomai n ” from the Domain drop-down list, and click the Logi n button . Y ou are n[...]

SonicWALL SRA 1200/4200 Get ting Started Gui de Page 11 Connecting Y our Appliance In this Section: This section provides procedures for conne cting your SonicW ALL SRA 1200/4200 appliance. • Configuring Y our SRA 12 00/4200 - page 12 • Connecting Y our SRA 1200/4200 - page 18 2[...]

Page 12 Configuring Your SRA 1200/42 00 Configuring Y o ur SRA 1200/4200 Once your SonicWALL SRA 1200/4200 is connected to a computer through the mana gemen t port (X0), it can be configured through the Web- based managemen t interface. Setting Y our Administrator Password 1. From the management interfa ce, select the Use rs > Local Users page. [...]

SonicWALL SRA 1200/4200 Get ting Started Gui de Page 13 Adding a Local User 1. Navigate to Use rs > Local Users pag e. 2. Click the Add User button. 3. Enter a User Name . 4. Select LocalDomain from the Group/Domain drop-do wn menu. 5. Enter a Password for the user . Confirm the new password. 6. Select User from the User T ype drop-down menu. 7.[...]

Page 14 Configuring Your SRA 1200/42 00 Configuring SRA Network Settings Y ou wil l now configure your SR A 1200/4200 network settings. Refer to the notes you took in the “Recording Configuration Information” on page 6 to complete this section. Configuring DNS / W INS 1. Navigate to the Network > DNS page in the mana gement interface. 2. Ent[...]

SonicWALL SRA 1200/4200 Get ting Started Gui de Page 15 3. In the Interface Settings dialog box, s et the IP address and subnet mask to: 4. Click OK . Note that you will l ose connection to the SRA. 5. Reset the manageme nt computer to have a static IP address in the range you just set for the X0 interface , for example, 10.1.1.20 or 192.168.200.20[...]

Page 16 Configuring Your SRA 1200/42 00 Adding a NetExtender Client Route NetExtender allows remote cli ents to have seamless access to resources on your local network. Y ou can also enable Tunnel All Mode so that, when NetExten der clien ts connect, all the traffic will be tunneled through the NetExtender conne ction. T o configure a Ne tExt ender[...]

SonicWALL SRA 1200/4200 Get ting Started Gui de Page 17 Setting Y our NetExtender Address Range The NetExtender IP range defines the IP address pool from which addresses will be assigned to remote users du ri ng NetExtender sessions. The range needs to be large enough to accommodate the maximum number of concurrent NetExtende r users you wish to su[...]

Page 18 Connecting Your SRA 1200/ 4200 Connecting Y our SRA 1200/4200 Before continuing, refe rence t he diagrams on the followi ng pages to connect the SonicW ALL SRA 1200/4200 to your network. Refer to the options in “Selecting a Deployment Scenario” on page 7 to determine the proper scenario for your networ k configuration: • Scenario A: C[...]

SonicWALL SRA 1200/4200 Get ting Started Gui de Page 19 Scenario B: Connecting Y our Network Interfaces Scenario B: SRA on an Existing DMZ T o connect the SonicWALL SRA 1200/4200 using Scenario B, perform the following steps: 1. Connect one en d of an Ethern et cable to an unused port on your DMZ , ei ther directly to the OPT or X2 on your existing[...]

Page 20 Connecting Your SRA 1200/ 4200[...]

SonicWALL SRA 1200/4200 Getting St arted Guide Page 21 Registering Y our Appliance In this Section: This section provides in structions for registering your SonicW ALL SRA 1200/4200 appl iance. • Creating a MySonicWALL Account - page 22 • Registering Y our SonicWALL SRA - page 22 • Services and Licensing - page 23 Note: Registration is an imp[...]

Page 22 Creating a MySonicWALL Account Creating a MySonicW ALL Account A MySonicW ALL account is require d fo r pro duct registration. If you already have an account, continue to the following secti on. Perform the following steps to create a MySoni cW ALL account: 1. In your browser , navi gate to www .mysoni cwall.com. 2. In the login screen, cli[...]

SonicWALL SRA 1200/4200 Getting St arted Guide Page 23 Services and Licensing This section contains the following subsectio ns: • Service Management - page 23 • Flexible Per-User Li censing - page 24 • Activating Services and Software - page 24 • T rying or Purchasin g Services - page 25 Service Management The Service Management page in MyS[...]

Page 24 Services and Licensing The following produ cts and services are available for the SonicW ALL SRA 1200/4200 appl iance: • Gateway Service Bundles : • Per-user license upgrades in flexibl e block incremen ts • Desktop and Server Software: • Virtual Assist • Web Application Firewall •V i e w P o i n t • Support Services: • Dyna[...]

SonicWALL SRA 1200/4200 Getting St arted Guide Page 25 3. In the 'Activate Service' page, type or paste your key into the Activation Key field and then click Submit . Once the service is activat ed, you will see an expirati on date or a license key string in the S tatus column on the Service Management page. T rying or Purchasing Services[...]

Page 26 Services and Licensing[...]

SonicWALL SRA 1200/4200 Getting St arted Guide Page 27 Network Configuration In this Section: This section pro v id es det ail e d ov erviews of deployment scenarios, as well as configuration instructio ns for connecting your SonicW ALL SRA to various network devices, includi ng gateway appliances. • Scenario A: SRA on a New DMZ - page 27 • Sce[...]

Page 28 Scenario A: SRA on a New DMZ Connecting to a SonicW ALL Security App liance 1. Using a computer connected to your LAN, launch your Web browser and enter the IP address of your existin g SonicW ALL security app liance in the Location or Address field. 2. When the management interfac e displays, enter your user name and password in the approp[...]

SonicWALL SRA 1200/4200 Getting St arted Guide Page 29 6. Select the Gateway A V , Intrusion Prevention Service and Anti-Spyware checkboxes. Click OK . 7. On the 'Edit Interface' window , enter the IP address for this interface in the IP Address field. (For example, “192.168.200.2”. This should be the same address you created in "[...]

Page 30 Scenario A: SRA on a New DMZ 5. On the 'Server Private Network Confi guratio n' page, enter the following , and click Next : 6. On the 'Server Public Information' page, accept the default IP addres s , or enter an IP address in your allowed public IP range. Click Next . Note: The default IP address is the WAN IP address [...]

SonicWALL SRA 1200/4200 Getting St arted Guide Page 31 6. In the 'Add Address Object' dialog box, create an address object for the X0 interface IP address of the SonicWALL SRA: 7. Click Add to create the object. Once done, click Close . 8. On the 'Network > Address Objects' page, in the ‘Address Groups’ section, click . 9[...]

Page 32 Scenario B: SRA on an Existing DMZ 13. In the 'Add Rule' window , create a rule to allow acces s to the LAN for the address group you just created: 14. Click OK to create the rule. Continue to "T esti ng Y our Remote Connection" on page 39 Scenario B: SRA on an Existing DMZ This section provides procedur es to config ure[...]

SonicWALL SRA 1200/4200 Getting St arted Guide Page 33 Allowing W AN -> DMZ Connection If you are already forwardin g HTTP or HTTPS to an internal server , and you only have a single public IP address, you will need to select different (unique ) ports of operati on for eithe r the existing servers or fo r the SonicW ALL SRA appliance, because bo[...]

Page 34 Scenario B: SRA on an Existing DMZ Allowing DMZ -> LAN C onnection When users have connected to the SRA, they need to be able to connect to resourc e s on the LAN. 1. Navigate to the Network > Address Objects page. 2. In the 'Address Objects' section, click . 3. In the 'Add Object' dialog box, create an addres s ob[...]

SonicWALL SRA 1200/4200 Getting St arted Guide Page 35 7. In the 'Add Address Object Group' dialog box, create a group for the X0 interface IP address of your SonicWALL SRA and the NetExtender IP range, then click OK . • Enter a name for the group . • In the left column, select the two group s you create d and click the arrow button .[...]

Page 36 Scenario C: SRA on the LAN Scenario C: SRA on the LAN This section pro vides proc edures to configure your ga te w a y appliance based on Scenario C. This section contains the following subsections: • Connecting to a SonicWALL Security Appliance - page 36 • Configuring SRA -> LAN Connectivity - page 36 • Setting Public Server Acces[...]

SonicWALL SRA 1200/4200 Getting St arted Guide Page 37 6. In the 'Add Object' dialog box, create an addres s ob ject for the X0 interface IP address of your SonicWALL SRA, then click OK . 7. On the 'Network > Address Ob jects' page, in the 'Address Groups' section, click . 8. In the 'Add Address Object Group&ap[...]

Page 38 Scenario C: SRA on the LAN 1 1. In the 'Add Rule' window , create a rule to allow access to the LAN for the address group you just created: 12. Click OK to finish creating the rule. Setting Public Server Access 1. Click the Wizards icon in the top right corne r of the SonicOS management interface. 2. Select the Public Server Wizar[...]

SonicWALL SRA 1200/4200 Getting St arted Guide Page 39 T esting Y our Remote Connection Y ou have now configured your SonicWALL security appliance and SonicW ALL SRA for secure SSL-VPN remote access.This section provides instructions to verify your conn ection using a remote client on the WAN. V e rifying a User Connection from the Internet 1. From[...]

Page 40 Testing Your Remote Connection[...]

SonicWALL SRA 1200/4200 Getting St arted Guide Page 41 Upgrading Y our Appliance In this Section: This section provid es procedures for up grading an exis ting SRA SSL VPN image on a SonicW ALL SRA 4200, 1200 to a newer version. • Obta ining the L atest SRA SSL VPN Image - page 42 • Exporting a Copy of Y our Configuration Settings - page 42 •[...]

Page 42 Obtaining the Latest SRA SSL VPN Imag e Obtaining the Latest SRA SSL VPN Image T o obtain a new SRA SSL VPN image file for your SonicW ALL security appliance, connect to your mysonicwall .com account at < http://www .mysonicwall.com >. Note: If you have already registered your SonicWALL SSL VPN appliance, and you selected Notify me wh[...]

SonicWALL SRA 1200/4200 Getti ng St arted Guide Page 43 Uploading a New SRA SSL VPN Image Note: SonicWALL SRA 4200/12 00 appliances do not support downgrading an image and using th e configuration settings file from a higher version. If you are downgrading to a previous version of a SRA SSL VPN image, you must select Uploaded Firmware with Factory [...]

Page 44 Resetting the Appliance Using SafeMode Resetting the Appliance Using SafeMode If you are unable to connect to the SonicWALL security appliance’s management interface, you can restart the SonicW ALL security appliance in SafeMode. Th e SafeMode feature allows you to quickly recover from uncertain configuration states with a simplified mana[...]

SonicWALL SRA 1200/4200 Getting St arted Guide Page 45 Support and T raining Options In this Section: This section pro v id es overvi ews of customer support and training options for SonicW ALL SRA appliances. • Customer Support - page 46 • Knowledge Base - page 46 • User Forums - page 47 • T ra ining - page 48 • Related Documentation - p[...]

Page 46 Customer Support Customer Support SonicW ALL ’ s custome r support Web site is where you will find featured support topics, tutorials, a nd more. If you need further assistance, SonicW ALL offers telephone, email, and Web- based support to customers with valid Wa rranty Support or a purchased support contract. Please review our Warranty S[...]

SonicWALL SRA 1200/4200 Getting St arted Guide Page 47 User Forums The SonicWALL User Forums is a resource that provides users the ability to communicate and discuss a variety of security and appliance subject ma tters. Categories include : • SSL-VPN topic s • VPN Client to pics • Continuous Data Protection topics • Email Security topics ?[...]

Page 48 Training T raining SonicW ALL offers an extensive sales and technical training curriculum for Network Administ rators, Security Experts and SonicW ALL Medallion Partners who need to enhance th eir knowledge and maximize their investment in SonicWALL Products and Security Applications. Son icW ALL T raining provides the following resources f[...]

SonicWALL SRA 1200/4200 Getting St arted Guide Page 49 Related Documentation See the following relate d documents for more information: • SonicOS SSL-VPN Administrator ’s Guide • SonicOS SSL-VPN User ’s Guide • SonicOS SSL-VPN Release Notes • SonicOS SSL-VPN Feature Modules • SonicOS Administrator ’s Guide • SonicOS Feature Module[...]

Page 50 SonicWALL Live Product Demos SonicW ALL Live Product Demos Get the most out of your appliance with the complete line of SonicW ALL products. The SonicWALL Live Demo Site provides free test drives of SonicWA LL security products and services through inte ractive live product installations: • SSL-VPN Secure Remote Access • Unified Threat [...]

SonicWALL SRA 1200/4200 Getting St arted Guide Page 51 SonicW ALL Secure W ireless Network Integrated Solutions Guide Looking to go wireless? Have questions abou t what it takes to build a truly “secure” wireless network? Check out the SonicW ALL Secure Wireless Networ k Integrated Solutions Guide. This book is the official guide to SonicWALL ?[...]

Page 52 SonicWALL Secure Wireless Networ k I ntegrated Solutions Gui de[...]

SonicWALL SRA 1200/4200 Get ting Started Gui de Page 53 Safety and Regulatory Information In this Section: This section pro vi d es safety a nd regulatory information for the SonicW ALL SRA 1200/4200 appliances. • SonicW ALL SRA 1200/4200 Appliance Reg ulatory S tatement and Safety Instructions - page 54 • Copyright Notice - page 58 • T radem[...]

Page 54 SonicWALL SRA 1200/4200 Ap pliance Regulatory Statement and Safety Instructio ns SonicW ALL SRA 1200/4200 Appliance Regulatory Statement and Safety Instructions This regulatory informatio n can also be found in the electronic file, “ SonicW ALL_SRA_Regulato ry_S t atement .p df ,” located on the SonicW ALL Web site: < http://www .son[...]

SonicWALL SRA 1200/4200 Get ting Started Gui de Page 55 W eitere Hinweise zur Montage Das SonicW ALL Modell ist für eine Montage in einem standardmäßigen 19-Zoll-Rack konzipiert. Für eine ordnungsgemäße Montage sollten die folgenden Hinweise beachtet werden: • V ergewissern Sie sich, dass das Rack für die ses Gerät geeignet ist und verwen[...]

Page 56 SonicWALL SRA 1200/4200 Ap pliance Regulatory Statement and Safety Instructio ns FCC Part 15 Class A Notice NOTE: This equipment was tested and found to comply with the limits for a Class A digit al device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful inte rference when the[...]

SonicWALL SRA 1200/4200 Get ting Started Gui de Page 57 BMSI St atement (Class A) Regula tory Information for Korea Ministry of Information and T elecommunication Certification Numbers SWL-1RK23-07C and SWL-1RK23-088 All products wit h country code “” (blank) and “A” are made in the U SA. All products with country code “B” ar e made in [...]

Page 58 Copyright Notice Copyright Notice © 2010 SonicW ALL, Inc. All rights reserved. Under the copy right laws, this manu al or the software describe d within, can not be copied, in w hole or part, without the written consent of the manufacturer , except in the normal use of the software to make a backup copy . The same proprietary and copyright[...]

SonicWALL SRA 1200/4200 Get ting Started Gui de Page 59 Notes[...]

Page 60 Notes Notes[...]

SonicWALL Anti-Virus Router 80 Getting Sta rted Guide Page 1 ©20 10 S o ni cWALL, I n c. i s a regi s tered t rad e m ar ko f S o ni cWALL, I n c. O t h er p r o du c tn a m e sm enti o ned h erein m a yb et r a d e m ar ks and /o rr e g i s tere d trad e m ar ks of t h eir re sp e c ti v e comp ani e s. S p e c i c ati o n s and de sc ri p ti [...]