SonicWALL SuperMassive 9200, Getting Started Manual

Page: 35 / 73

SonicWall SuperMassive 9200/9400/9600 Getting Started Guide 35
5
Deployment Scenarios
This section provides configuration overviews, as well as deployment scenarios for your SonicWall SuperMassive appliance.
• Advanced Deployment Scenarios on page 36
• Configuring NAT Mode Gateway on page 40
• Configuring a Stateful HA Pair on page 41
• Configuring L2 Bridged Mode on page 47
TIP: Wire Mode is another deployment option for the SuperMassive, not fully covered in this guide. See the SonicOS
Administration Guide for detailed information. There are four settings for Wire Mode:
• Bypass Mode —The firewall is inserted into the physical data path without turning on inspection. Bypass Mode can
easily be reconfigured later as Inspect Mode or Secure Mode.
• Inspect Mode —Packets pass through the firewall and are also mirrored to the SonicWall ReAssembly ‐ Free Deep
Packet Inspection™ (RF ‐ DPI) engine, providing passive inspection, classification, and flow reporting.
• Secure Mode —Provides full RF ‐ DPI inspection and control of network traffic. Secure Mode affords the same level of
visibility and enforcement as conventional NAT or L2 Bridged Mode deployments, but without any L3/L4
transformations, and with no alterations of ARP or routing behavior.
• Tap Mode —A firewall interface that is configured in Tap Mode receives mirrored packets from an adjacent switch
SPAN port. Similar to Inspect Mode, but with a single port and not in the physical path of traffic.