SonicWALL SSL-VPN 4000, Руководство по началу работы

Страница: 5 / 62

Page 4
Selecting a SonicWALL Recommended
Deployment Scenario
The deployment scenarios described in this section are based on actual customer
deployments and are SonicWALL-recommended deployment best practices. This
section describes three common deployments of the SonicWALL SSL-VPN 4000.
In Table 1, select the scenario that most closely matches your deployment.
1
Table 1: SonicWALL SSL-VPN 4000 Deployment Scenarios
Gateway Device SonicWALL Recommended
Deployment Scenarios Conditions or Requirements
SonicOS Standard 3.1 or higher:
TZ 170
PRO 1260
PRO 2040
PRO 3060 Scenario A: SSL-VPN on a New DMZ • OPT or X2 interface is unused
• A new DMZ configured for either NAT or
Transparent Mode operation.
• (Optional) Plan to provide SonicWALL deep
packet inspection security services such as
GAV, IPS, and Anti-Spyware.
Scenario B: SSL-VPN on Existing DMZ • OPT or X2 interface is in use with an
existing DMZ
• (Optional) Plan to provide SonicWALL deep
packet inspection security services such as
GAV, IPS, and Anti-Spyware.
SonicOS Enhanced 3.1 or higher:
TZ 170 Series
PRO 1260
PRO 2040
PRO 3060
PRO 4060
PRO 4100
PRO 5060 Scenario A: SSL-VPN on a New DMZ • OPT or unused interface
• A new DMZ configured for either NAT or
Transparent Mode operation.
Scenario B: SSL-VPN on Existing DMZ • No unused interfaces
• One dedicated interface in use as an
existing DMZ
Scenario C: SSL-VPN on the LAN • No unused interfaces
• No dedicated interface for a DMZ
SonicOS Standard 3.1 or higher:
TZ 150 Series
TZ 170 Wireless
TZ 170 SP
SonicWALL devices running
legacy firmware
Third-Party Gateway Device
Scenario C: SSL-VPN on the LAN • Not planning to use SonicWALL deep
packet inspection security services such as
GAV, IPS, and Anti-Spyware.
• Interoperability with a third-party gateway
device
Gateway
Device
Switch/
Hub
SonicWALL
SSL-VPN 4000
on LAN
Remote Users
in Internet Zone
SonicWALL
SSL-VPN 4000
on Existing DMZ
SonicWALL
UTM Appliance
LAN
Resources
Router
Switch/
Hub
Switch/
Hub
Remote Users
in Internet Zone
SonicWALL
UTM Appliance
SonicWALL
SSL-VPN 4000
on DMZ
LAN
Resources
Router
Switch/
Hub
Remote Users
in Internet Zone
Scenario A
SSL-VPN on a New DMZ
Scenario B Scenario C
SSL-VPN on an Existing DMZ SSL-VPN on the LAN