manualshive.com logo in svg

Dell SonicWALL NSA E6500, Getting Started Manual

Share
Download
Dell SonicWALL NSA E6500 Getting Started Manual Download Page 54

  54

Deployment Configuration Reference Checklist

Use this checklist to find more information about various deployment tasks within the 

SonicOS Administrator’s Guide

. 

For this Task...

See this Chapter...

Inspecting the rule base for inbound and outbound rules

Configuring Access Rules

Setting logging levels

Configuring Log Categories (“Logging Level” section)

Configuring threat prevention on all used zones

Configuring Zones
(“Enabling Dell SonicWALL Security Services on Zones“ section)

Configuring Web filtering protection

Configuring Dell SonicWALL Content Filtering Service

Changing administrator login

Configuring Administration Settings 
("Administrator Name & Password“ section)

Setting administrator email

Configuring Log Automation (“Email Log Automation“ section)

Disabling HTTP and ping access

Configuring Interfaces 
(“Configuring Advanced Settings for the Interfaces“ section)

Disabling or enabling DHCP

Setting Up the DHCP Server

Configuring user management

Managing Users and Authentication Settings

Configuring VPN policies

Configuring VPN Policies

Securing wireless access 

Managing SonicPoints

Summary of Contents for SonicWALL NSA E6500

Page 1: ...Getting Started Guide Dell SonicWALL E Class NSA Appliances NETWORK SECURITY NSA E6500 ...

Page 2: ...ows Internet Explorer and Active Directory are trademarks or registered trademarks of Microsoft Corporation Other product and company names mentioned herein may be trademarks and or registered trademarks of their respective companies and are the sole property of their respective manufacturers 2013 03 P N 232 001051 54 Rev A NOTE A NOTE indicates important information that helps you make better use...

Page 3: ...re Internet access Dell SonicWALL NSA E6500 Note Always observe proper safety and regulatory guidelines when removing administrator serviceable parts from the Dell SonicWALL NSA E6500 Proper guidelines can be found in the Product Safety and Regulatory Information on page 68 I o PML Front Back 1U rack mountable 17 x 16 75 x 1 75 in 43 18 x 42 54 x 4 44 cm 17 30 lbs 7 9 kg 17 30 lbs 7 9 kg E5500 Net...

Page 4: ... Bezel Configuration Example page 16 Chapter 2 Sections Include Registering the Appliance page 18 Before You Register page 19 Creating a MySonicWALL Account page 20 Registering and Licensing the Appliance on MySonicWALL page 20 Chapter 3 Sections Include Deployment Scenarios page 24 Selecting a Deployment Scenario page 25 Initial Setup page 29 Configuring a Stateful HA Pair page 37 Configuring L2 ...

Page 5: ... page 55 Chapter 5 Sections Include Support and Training Options page 56 Customer Support page 57 Knowledge Portal page 57 User Forums page 58 Training page 59 Related Documentation page 60 Dynamic Tooltips page 61 Dell SonicWALL Live Product Demos page 61 Chapter 6 Sections Include Rack Mounting Instructions page 62 Rack Mounting Instructions page 63 Chapter 7 Sections Include Product Safety and ...

Page 6: ...n information Review this section before setting up your Dell SonicWALL NSA E6500 Check Package Contents page 7 Obtain Configuration Information page 8 The Front Panel page 10 The Back Panel page 11 Front Bezel Control Features page 12 Front Bezel Configuration Example page 16 1 ...

Page 7: ... for use only in specific countries or regions Before using a power cord verify that it is rated and approved for use in your location The power cords are for AC mains installation only Missing Items If any items are missing from your package contact Dell SonicWALL Support Web http www sonicwall com us Support html Email customer_service sonicwall com 1 3 4 2 5 7 6 Getting Started Guide Dell Sonic...

Page 8: ... IP Address Select a static IP address for your SonicWALL appliance that is within the range of your local subnet If you are unsure you can use the default IP address 192 168 168 168 Subnet Mask Record the subnet mask for the local subnet where you are installing your SonicWALL appliance Ethernet WAN IP Address Select a static IP address for your Ethernet WAN This setting only applies if you are a...

Page 9: ...not using one of the network configurations above refer to the SonicOS Administrator s Guide http www sonicwall com us support html If You connect using Please record DHCP No information is usually required Some providers may require a Host name Static IP IP Address Subnet Mask Default Gateway Primary DNS DNS 2 optional DNS 3 optional ...

Page 10: ...sion Reset Button Press and hold the button for a few seconds to manually reset the appliance LED from left to right Power LED Indicates the Dell SonicWALL NSA E6500 is powered on Test LED Flickering Indicates the appliance is initializing Steady blinking Indicates the appliance is in SafeMode Solid Indicates that the appliance is in test mode Alarm LED Indicates an alarm condition HD LED Future e...

Page 11: ...apply Please read the Safety Instructions before use See the Product Safety and Regulatory Information on page 68 Icon Feature Description Expansion Bay Future extension Fans 2 The Dell SonicWALL NSA E6500 includes two fans for system temperature control Power Supply The Dell SonicWALL NSA E6500 power supply I o PML A B C ...

Page 12: ...a D pad consisting of four buttons Up Down Left Right The table below describes the functions of the buttons Icon Feature Description LCD Screen Displays the front panel bezel interface which can be used to display status information perform basic configurations restart the appliance or boot the appliance in SafeMode Control Buttons Up Down Left and Right buttons used to navigate the LCD menu syst...

Page 13: ...atistical readings Current number of connections Interface X0 X1 network settings Interface X0 X1 data transfer statistics The X1 DNS1 3 entries will only be displayed if they have been set from the Configure menu If their value is still 0 0 0 0 default value they will not appear in the Status List Contains basic status values including system resources connections and port configuration values Al...

Page 14: ... from 0 to 9 Press the Right button to confirm your PIN and enter the Configuration Menu The appliance allows the user to navigate in and out of the Configuration Menu without having to re enter the PIN However once the appliance enters Screen Saver Mode whether from the 6 second time out or from pressing the Left button from the Main Menu the PIN number must be re entered again to access the Conf...

Page 15: ...l prompt the user for confirmation before effecting the change Restart This option allows you to safely restart without resorting to power cycling the appliance Once selected the LCD will display a confirmation prompt Select Y for yes and press the Right button to confirm The appliance will reboot SafeMode This option will set the appliance to SafeMode Once selected the LCD will display a confirma...

Page 16: ...he cursor displays 6 press Right 7 Press Up or Down until the cursor displays 6 press Right 8 Press Up or Down until the cursor displays 4 press Right 9 Press Up or Down until the cursor displays 2 press Right 10 Press Right 11 Press Down until X1 IP is selected four times 12 Press Right to configure X1 IP 13 Edit X1 IP press Right ten times to select the tenth digit 14 Press UP or Down until the ...

Page 17: ......

Page 18: ...500 Before You Register page 19 Creating a MySonicWALL Account page 20 Registering and Licensing Your Appliance on MySonicWALL page 20 Note Registration is an important part of the setup process and is necessary in order to receive the benefits of Dell SonicWALL security services firmware updates and technical support 2 ...

Page 19: ...llows you to prepare for your deployment before making any changes to your existing network For a High Availability configuration you must use MySonicWALL to associate a secondary unit that can share the Security Services licenses with your primary appliance Note Your NSA E6500 does not need to be powered on during account creation or during the MySonicWALL registration and licensing process Note ...

Page 20: ... and Software page 21 Registering a Second Appliance as a Backup page 22 Registration Next Steps page 23 Product Registration You must register your Dell SonicWALL security appliance on MySonicWALL to enable full functionality 1 Login to your MySonicWALL account If you do not have an account you can create one at www mysonicwall com See Creating a MySonicWALL Account on page 20 2 On the main page ...

Page 21: ...er Support Services Dynamic Support 24x7 Software and Firmware Updates Consulting Services Implementation Service GMS Preventive Maintenance Service To manage your licenses perform the following tasks 1 In the MySonicWALL Service Management Associated Products page check the Applicable Services table for services that your appliance is already licensed for Your initial purchase may have included s...

Page 22: ...es to your appliance Registering a Second Appliance as a Backup To ensure that your network stays protected if your Dell SonicWALL NSA E6500 has an unexpected failure you can associate a second appliance with the first in a high availability HA pair You can associate the two appliances as part of the registration process on MySonicWALL The second appliance will automatically share the Security Ser...

Page 23: ...an be shared with the HA Primary unit you must purchase a separate Analyzer license for the secondary unit This will ensure that you do not miss any reporting data in the event of a failover You must also purchase a separate support license for the secondary unit Under DESKTOP SERVER SOFTWARE click Buy Now for Analyzer Follow the instructions to complete the purchase To return to the Service Manag...

Page 24: ...or connecting your Dell SonicWALL NSA E6500 Selecting a Deployment Scenario page 25 Initial Setup page 29 Configuring a Stateful HA Pair page 36 Configuring L2 Bridge Mode page 42 Tip Before completing this section fill out the information in Obtain Configuration Information on page 8 You will need to enter this information during the Setup Wizard 3 ...

Page 25: ...le NSA appliance as a primary gateway A NAT Route Mode Gateway Pair of NSA appliances for high availability B NAT with State Sync Pair Existing Internet gateway appliance NSA appliance as replacement for an existing gateway appliance A NAT Route Mode Gateway NSA appliance in addition to an existing gateway appliance C L2 Bridge Mode Existing Dell SonicWALL gateway appliance NSA appliance in additi...

Page 26: ...liance for load balancing and failover purposes Because only a single appliance is deployed the added benefits of high availability with a stateful synchronized pair are not available To set up this scenario follow the steps covered in Initial Setup on page 29 If you have completed setup procedures in that section continue to Additional Deployment Configuration on page 46 to complete configuration...

Page 27: ...loses connectivity Note Active Active pair functionality is also available for high availability deployments For more information on the benefits and setup instruction for Active Active pair see the SonicOS Active Active Feature Module at http www sonicwall com us support html To set up this scenario follow the steps covered in Initial Setup on page 29 and Configuring a Stateful HA Pair on page 36...

Page 28: ...ppliance integration Using L2 Bridge Mode a Dell SonicWALL security appliance can be non disruptively added to any Ethernet network to provide in line deep packet inspection for all traversing IPv4 TCP and UDP traffic L2 Bridge Mode can pass all traffic types including IEEE 802 1q VLANs Spanning Tree Protocol multicast broadcast and IPv6 To set up this scenario follow the steps covered in Initial ...

Page 29: ...vating Licenses in SonicOS page 33 Upgrading Firmware on Your Dell SonicWALL Appliance page 33 System Requirements Before you begin the setup process check to verify that you have An Internet connection A Web browser supporting Java Script and HTTP uploads Connecting the WAN Port 1 Connect one end of an Ethernet cable to your Internet connection 2 Connect the other end of the cable to the X1 WAN p...

Page 30: ...hile the appliance performs a series of diagnostic tests When the Power LEDs are lit and the Test LED is no longer lit the NSA E6500 is ready for configuration This typically occurs within a few minutes of applying power to the appliance Warning When disconnecting power be sure to remove both power cords from the unit Note If the Test or Alarm LEDs remain lit after the NSA E6500 has booted restart...

Page 31: ... Area Connection settings on your computer set to use DHCP or set to a static IP address on the 192 168 168 x 24 subnet Do you have the Ethernet cable connected to your computer and to the X0 LAN port on your appliance Is the connector clip on your network cable properly seated in the port of the security appliance Some browsers may not launch the Setup Wizard automatically In this case Log into t...

Page 32: ... Setup Wizard the login page reappears Log back into the Management Interface and verify your IP and WAN connection 2 Ping a site outside of your local network such as http www sonicwall com 3 Open another Web browser and navigate to http www sonicwall com If you can view the Dell SonicWALL home page you have configured your Dell SonicWALL NSA E6500 correctly If you cannot view the Dell SonicWALL ...

Page 33: ... license keyset is useful when your appliance is not connected to the Internet The license keyset includes all license keys for services or software enabled on MySonicWALL It is available on MySonicWALL at the top of the Service Management page for your SonicWALL appliance To activate licenses in SonicOS 1 Navigate to the System Licenses page 2 Under Manage Security Services Online do one of the f...

Page 34: ...tem Backup entry is displayed in the Firmware Management table 2 To export your settings to a local file click Export Settings A popup window displays the name of the saved file Upgrading the Firmware Perform the following steps to upload new firmware to your Dell SonicWALL appliance and use your current configuration settings upon startup Note The appliance must be properly registered before it c...

Page 35: ...LCD control buttons on the front bezel to set the appliance to SafeMode Once selected the LCD displays a confirmation prompt Select Y and press the Right button to confirm The Dell SonicWALL appliance changes to SafeMode The Test light starts blinking when the Dell SonicWALL appliance has rebooted into SafeMode 3 Point the Web browser on your computer to 192 168 168 168 The SafeMode management int...

Page 36: ...lity Setup page 37 Configuring High Availability page 37 Configuring Advanced HA Settings page 38 Configuring HA Monitoring Settings page 39 Synchronizing Settings page 40 HA License Configuration Overview page 41 Associating Pre Registered Appliances page 42 Configuring L2 Bridge Mode page 42 If You Are Following Scenario Proceed to section A NAT Route Mode Gateway Additional Deployment Configura...

Page 37: ...ated 100Mbps hub switch is also valid Power up the primary appliance and then power up the secondary appliance Do not make any configuration changes to the primary s HA interface the High Availability configuration in an upcoming step takes care of this issue When done disconnect the workstation Configuring High Availability The first task in setting up HA after initial setup is configuring the Hi...

Page 38: ...value is 1000 milliseconds Using a longer interval will result in the appliance taking more time to detect when if failures have occurred Less than this may cause unnecessary failovers especially when the appliance is under a heavy load 7 Set the Probe Interval for the interval in seconds between communication with upstream or downstream systems This timer controls the path monitoring speed Path m...

Page 39: ...chronize Settings to synchronize the settings between the primary and secondary appliances 12 Click Synchronize Firmware if you previously uploaded new firmware to your Primary unit while the Secondary unit was offline and it is now online and ready to upgrade to the new firmware Synchronize Firmware is typically used after taking your Secondary appliance offline while you test a new firmware vers...

Page 40: ... as CRL auto import URLs and OCSP settings are synchronized between the primary and secondary units When Local Certificates are copied to the secondary unit the associated Private Keys are also copied Because the connection between the primary and secondary units is typically protected this is generally not a security concern Note A compromise between the convenience of synchronizing Certificates ...

Page 41: ...ingle set of security services licenses for the HA primary appliance To use Stateful HA you must first activate the Stateful High Availability Upgrade license for the primary unit in SonicOS This is automatic if your appliance is connected to the Internet See Registering and Licensing Your Appliance on MySonicWALL on page 20 License synchronization is used during HA so that the secondary appliance...

Page 42: ...vice Management Associated Products page scroll down to the Associated Products section 5 Under Associated Products click HF Secondary 6 On the My Product Associated Products page in the text boxes under Associate New Products type the serial number and the friendly name of the appliance that you want to associate as the child secondary secondary unit 7 Select the group from the Product Group drop...

Page 43: ...secondary bridge Note The primary bridge interface must have a static IP assignment Configuring the Secondary Bridge Interface Complete the following steps to configure the secondary bridge interface on the NSA E6500 1 Navigate to the Network Interfaces page from the navigation panel 2 Click the Configure icon in the right column of the X0 LAN interface 3 In the IP Assignment drop down select Laye...

Page 44: ...at all packets entering the L2 Bridge remain on the L2 Bridge segments You may optionally enable the Block all non IPv4 traffic setting to prevent the L2 bridge from passing non IPv4 traffic If You Are Following Scenario Proceed to Section C L2 Bridge Mode Additional Deployment Configuration page 46 ...

Page 45: ......

Page 46: ...his section also contains several SonicOS diagnostic tools and a deployment configuration reference checklist An Introduction to Zones and Interfaces page 47 Creating a NAT Policy page 48 Enabling Security Services in SonicOS page 51 Applying Security Services to Zones page 52 Troubleshooting Diagnostic Tools page 52 Deployment Configuration Reference Checklist page 54 4 ...

Page 47: ... X1 or X2 on the Dell SonicWALL appliance The X1 and X0 interfaces are preconfigured as WAN and LAN respectively The remaining ports can be configured to meet the needs of your network either by using basic zone types WAN LAN WLAN DMZ VPN or configuring a custom zone type to fit your network requirements for example Gaming Console Zone Wireless Printer Zone Wireless Ticket Scanner Zone A Zone is a...

Page 48: ...ress User Service and Schedule in SonicOS These Address Objects allow for entities to be defined one time and to be re used in multiple referential instances throughout the SonicOS interface For example take an internal Web server with an IP address of 67 115 118 80 Rather than repeatedly typing in the IP address when constructing Access Rules or NAT Policies Address Objects allow you to create a ...

Page 49: ...Dell SonicWALL appliance To add an Address Object 1 Navigate to the Network Address Objects page 2 Below the Address Objects table click Add 3 In the Add Address Object dialog box enter a name for the Address Object in the Name field 4 Select the zone to assign to the Address Object from the Zone Assignment drop down list 5 Select Host Range Network MAC or FQDN from the Type menu If you selected H...

Page 50: ...urations see the SonicOS Administrator s Guide An example configuration illustrates the use of the fields in the Add NAT Policy procedure To add a One to One NAT policy that allows all Internet traffic to be routed through a public IP address two policies are needed one for the outbound traffic and one for the inbound traffic To add both parts of a One to One NAT policy perform the following steps...

Page 51: ...ally in the SonicOS user interface See the following procedures to enable and configure the following three basic security services Gateway Anti Virus Intrusion Prevention Anti Spyware For more information on configuring your security services refer to the SonicOS Administrator s Guide ...

Page 52: ...vices to network zones 1 Navigate to the Network Zones page 2 In the Zone Settings table click the Configure icon for the zone where you want to apply security services 3 In the Edit Zone dialog box on the General tab select the checkboxes for the security services to enable on this zone 4 On the Edit Zone page select the checkboxes for the security services that you want to enable 5 Click OK 6 To...

Page 53: ...ns matching certain criteria You can filter by Source IP Destination IP Destination Port Protocol Src Interface and Dst Interface Enter your filter criteria in the Active Connections Monitor Settings table The fields you enter values into are combined into a search string with a logical AND Select the Group Filters box next to any two or more criteria to combine them with a logical OR Using Log Vi...

Page 54: ...curity Services on Zones section Configuring Web filtering protection Configuring Dell SonicWALL Content Filtering Service Changing administrator login Configuring Administration Settings Administrator Name Password section Setting administrator email Configuring Log Automation Email Log Automation section Disabling HTTP and ping access Configuring Interfaces Configuring Advanced Settings for the ...

Page 55: ......

Page 56: ...overviews of customer support and training options for the Dell SonicWALL NSA E6500 Customer Support page 57 Knowledge Portal page 57 User Forums page 58 Training page 59 Related Documentation page 60 Dynamic Tooltips page 61 Dell SonicWALL Live Product Demos page 61 5 ...

Page 57: ...ices to meet your needs from our innovative implementation services to traditional statement of work based services For further information visit http www sonicwall com us support contact html Knowledge Portal The Knowledge Portal is a resource which allows users to search for Dell SonicWALL documents based on the following types of search tools Browse Search for keywords Full text search For furt...

Page 58: ...urity Manager topics Continuous Data Protection topics Email Security related topics Firewall related topics Network Anti Virus related topics Security Services and Content Filtering topics GMS and Analyzer related topics SonicPoint and Wireless related topics SSL VPN related topics TZ 190 Wireless WAN 3G Capability VPN Client related topics VPN site to site and interoperability topics For further...

Page 59: ...need to enhance their knowledge and maximize their investment in Dell SonicWALL Products and Security Applications Dell SonicWALL Training provides the following resources for its customers E Training Instructor Led Training Custom Training Technical Certification Authorized Training Partners For further information visit http www sonicwall com us support training html ...

Page 60: ...oad Balancing Packet Capture RF Management Single Sign On SSL Control Virtual Access Points Dell SonicWALL GVC Administrator s Guide Dell SonicWALL Analyzer Administrator s Guide Dell SonicWALL GAV Administrator s Guide Dell SonicWALL IPS Administrator s Guide Dell SonicWALL Anti Spyware Administrator s Guide Dell SonicWALL CFS Administrator s Guide For further information visit http www sonicwall...

Page 61: ...LL Live Product Demos The Dell SonicWALL Live Demo Site provides free test drives of Dell SonicWALL security products and services through interactive live product installations Unified Threat Management Platform Secure Cellular Wireless Continuous Data Protection SSL VPN Secure Remote Access Content Filtering Secure Wireless Solutions Email Security GMS and Analyzer For further information visit ...

Page 62: ...Rack Mounting Instructions In this Section This section provides illustrated rack mounting instructions for the Dell SonicWALL NSA E6500 Rack Mounting Instructions page 63 6 ...

Page 63: ...Rack Mounting Instructions M4 SCREW 8 WASHERS 8 Fasten 4 screws to the rail Assemble the Slide Rail 1 1 A B A B ...

Page 64: ...M5 SCREW 8 M5 Nut 8 Assemble the Slide Rail Fasten two sided screws to the rail 2 C C ...

Page 65: ...Assemble Inner Rail to Chassis Fasten 6 screws to attach the inner channel onto the chassis M4 SCREW 6 3 D D ...

Page 66: ...Insert Chassis to Frame 4 Push hook down to separate Slide inner channel into rails ...

Page 67: ......

Page 68: ...d Regulatory Information In this Section This section provides regulatory along with trademark and copyright information Safety and Regulatory Information page 69 Warranty Information page 73 Copyright Notice page 73 7 ...

Page 69: ...de when purchasing materials or components Consideration must be given to the connection of the equipment to the supply circuit Appropriate consideration of equipment nameplate ratings must be used when addressing this concern Do not overload the circuit Reliable grounding of rack mounted equipment must be maintained Particular attention must be given to power supply connections other than direct ...

Page 70: ... Sie den Anschluss des Geräts an die Stromversorgung damit der Überstromschutz sowie die elektrische Leitung nicht von einer eventuellen Überlastung der Stromversorgung beeinflusst werden Prüfen Sie dabei sorgfältig die Angaben auf dem Aufkleber des Geräts Überlasten Sie nicht den Stromkreis Eine sichere Erdung der Geräte im Rack muss gewährleistet sein Insbesondere muss auf nicht direkte Anschlüs...

Page 71: ...險狀況 必須使用四顆與機架設計相容的安裝螺釘 並用手鎖緊螺釘 確定安裝牢固 選擇一個安裝位置 將四個裝載洞孔對齊 19 吋架設機櫃的安裝桿 應當提供一個合適額定值並且已被認可的分支電路斷路器作 為安裝該裝置的一部分 在購買材料或部件時 應遵循當地安 全代碼 必須留心裝置與電源電路的連接問題 電路過載對過電流保 護與電路電線的影響需降至最低 解決這個問題時 需正確考 慮裝置銘牌額定值 不要過載電路 必須維護可靠的機架裝載設備接地 必須特別留意電源供應 器連線 而不是直接連接到電源板之類的分支電路 從工廠運出時 這個戴爾 SonicWALL 產品包括為後備交流電 源和增加可靠性而附帶的兩個電源 要斷開交流電源 兩條電源線都必須被拔除 隨附的電源線僅限於特定的國家或地區使用 使用前 請確 認電源線的額定值且已被認可在你的地區上使用 這個型號出貨時附帶的交流電源 是標準三芯器具耦合器的 配置 切勿...

Page 72: ...his manual without the written consent of Dell Inc could void the user s authority to operate this equipment BMSI Statement 警告使用者 此為甲類資訊技術設備 於居住環境中使用時 可能會造成射 頻擾動 在此種情況下 使用者會被要求採取某些適當的對策 VCCI Statement この装置は クラスＡ情報技術装置です この装置を家庭環境 で使用すると電波妨害を引き起こすことがあります この場合 には使用者が適切な対策を講ずるよう要求 されることがあります VCCI A Canadian Radio Frequency Emissions Statement This Class A digital apparatus complies with Canadian ICES...

Page 73: ... 2013 Dell Inc All rights reserved Under the copyright laws this manual or the software described within cannot be copied in whole or part without the written consent of the manufacturer except in the normal use of the software to make a backup copy The same proprietary and copyright notices must be affixed to any permitted copies as were affixed to the original This exception does not allow copie...

Page 74: ......

Reviews:

No comments

Brands by name

Popular brands

Load more brands