SonicWALL SuperMassive 9800, Руководство по началу работы

Страница: 40 / 76

40 SonicWall SuperMassive 9800 Getting Started Guide
Scenario C: Wire Mode
For network installations where the SonicWall SuperMassive
9800 is running in tandem with an existing network gateway.
In this scenario, the original gateway is maintained. The
SuperMassive 9800 is integrated seamlessly into the existing
network, providing the benefits of deep packet inspection and
comprehensive security services on all network traffic.
These are the Wire Mode deployments supported on the
SonicWall SuperMassive 9800 appliance:
• Bypass Mode – The firewall is inserted into the physical
data path without turning on inspection. Bypass Mode
can easily be reconfigured later as Inspect Mode or
Secure Mode.
• Inspect Mode – Packets pass through the firewall and
are also mirrored to the SonicWall ReAssembly ‐ Free RF ‐
DPI engine, providing passive inspection, classification,
and flow reporting.
• Secure Mode – Provides full Deep Packet Inspection™
(RF ‐ DPI) inspection and control of network traffic.
Secure Mode affords the same level of visibility and
enforcement as conventional NAT or L2 Bridged Mode
deployments, but without any L3/L4 transformations,
and with no alterations of ARP or routing behavior.
• Tap Mode – A firewall interface that is configured in Tap
Mode receives mirrored packets from an adjacent
switch SPAN port. Similar to Inspect Mode, but with a
single port and not in the physical path of traffic.
To set up this scenario, see Configuring Wire Mode on page 49 .
C
SonicWall SuperMassive
Third Party Gateway
Custom Zone
(WAN)
Wire Link
SonicWall SuperMassive 9800
CONSOLE
SDHC
MGMT X23 X21
X20 X6 X4
1GE 10GE
X2 X0
X1 X3 X5 X7
X22
B0
B1
ALARM
TEST
PWR 1 PWR 2
X14 X12 X18 X16 X10 X8
X9 X11 X13 X15 X17 X19
80GB
SSD
80GB
SSD
Internet