Inhaltszusammenfassung zur Seite Nr. 1
SonicWALL Network Security Appliances
NETWORK SECURITY
NSA 5000/4500/3500
Getting Started Guide
Inhaltszusammenfassung zur Seite Nr. 2
SonicWALL NSA Getting Started Guide This Getting Started Guide provides instructions for basic installation and configuration of the SonicWALL Network Security Appliance (NSA) 5000/4500/3500 running SonicOS Enhanced. After you complete this guide, computers on your Local Area Network (LAN) will have secure Internet access. Document Contents This document contains the following sections: 1 Pre-Configuration Tasks - page 3 2 Registering Your Appliance on mysonicwall.com - page 9 Deployment Sc
Inhaltszusammenfassung zur Seite Nr. 3
SonicWALL NSA Series Front Network Security Appliance NSA Form Factor 1U rack-mountable Dimensions 17 x 13.25 x 1.75 in 43.18 x 33.65 x 4.44 cm Back Weight 11.30 lbs/5.14 kg WEEE Weight 11.30 lbs/5.14 kg PML I o Note: Always observe proper safety and regulatory guidelines when removing administrator-serviceable parts from the SonicWALL NSA appliance. Proper guidelines can be found in the Safety and Regulatory Information section, on page 66 of this guide. Page 2 SonicWALL NSA Series
Inhaltszusammenfassung zur Seite Nr. 4
1 Pre-Configuration Tasks In this Section: This section provides pre-configuration information. Review this section before setting up your SonicWALL NSA Series appliance. • Check Package Contents - page 4 • Obtain Configuration Information - page 5 • The Front Panel - page 6 • The Back Panel - page 7 SonicWALL NSA 5000/4500/3500 Getting Started Guide Page 3
Inhaltszusammenfassung zur Seite Nr. 5
Check Package Contents Before setting up your SonicWALL NSA appliance, verify that your package contains the following parts: Any Items Missing? If any items are missing from your package, please contact SonicWALL support. 1 6 NSA Appliance Release Notes A listing of the most current support options is available online at: 2 7 DB9 -> RJ45 (CLI) Cable Global Support Services Guide 3 8 Standard Power Cord* Thank You Card 4 999 Ethernet Cable Getting S
Inhaltszusammenfassung zur Seite Nr. 6
Administrator Information Obtain Configuration Information Please record and keep for future reference the following setup Admin Name: Select an administrator account name. information: (default is admin) Registration Information Admin Password: Select an administrator password. Serial Number: Record the serial number found on the (default is password) bottom panel of your SonicWALL
Inhaltszusammenfassung zur Seite Nr. 7
The Front Panel Network Security Appliance A A B D C E Icon Feature Description Console Port Used to access the SonicOS Command Line Interface (CLI) via the DB9 -> RJ45 cable. USB Ports (2) Future extension. Reset Button Press and hold the button for a few seconds to manually reset the appliance using SafeMode. LED (from left to right) -Power LED: Indicates the SonicWALL NSA appliance is powered on. -Test LED: Flickering: Indicates the appliance is initializing. Steady blinking: Indicates the
Inhaltszusammenfassung zur Seite Nr. 8
The Back Panel I o A B Icon Feature Description Fans (2) The SonicWALL NSA Series includes two fans for system temperature control. Power Supply The SonicWALL NSA Series power supply. SonicWALL NSA 5000/4500/3500 Getting Started Guide Page 7
Inhaltszusammenfassung zur Seite Nr. 9
Page 8 The Back Panel
Inhaltszusammenfassung zur Seite Nr. 10
2 Registering Your Appliance on mysonicwall.com In this Section: This section provides instructions for registering your SonicWALL NSA Series appliance. • Before You Register - page 10 • Creating a mysonicwall.com Account - page 11 • Registering and Licensing Your Appliance on mysonicwall.com - page 11 • Licensing Security Services and Software - page 12 • Registering a Second Appliance as a Backup - page 14 Note: Registration is an important part of the setup process and is necessary in order t
Inhaltszusammenfassung zur Seite Nr. 11
Before You Register Note: After registering a new SonicWALL appliance on You need a mysonicwall.com account to register the mysonicwall.com, you must also register the appliance SonicWALL NSA appliance. You can create a new from the SonicOS management interface. This allows mysonicwall.com account on www.mysonicwall.com or directly the unit to synchronize with the SonicWALL License from the SonicWALL management interface. This section Server and to share licenses with the associated des
Inhaltszusammenfassung zur Seite Nr. 12
Creating a mysonicwall.com Account Registering and Licensing Your Appliance on mysonicwall.com To create a mysonicwall.com account, perform the following steps: This section contains the following subsections: 1. In your browser, navigate to www.mysonicwall.com. • Product Registration - page 11 2. In the login screen, If you are not a registered user, click Not a registered user? • Licensing Security Services and Software - page 12 • Registering a Second Appliance as a Backup - page 14 • Regi
Inhaltszusammenfassung zur Seite Nr. 13
• Support Services: Licensing Security Services and Software • Dynamic Support 8x5 The Service Management - Associated Products page in • Dynamic Support 24x7 www.mysonicwall.com lists security services, support options, • Software and Firmware Updates and software such as ViewPoint that you can purchase or try with a free trial. For details, click the Info button. Your current licenses are indicated in the Status column with either a license key or an expiration date. You can purchase addi
Inhaltszusammenfassung zur Seite Nr. 14
To manage your licenses, perform the following tasks: 4. To license a product of service, do one of the following: • To try a Free Trial of a service, click Try in the Service 1. In the mysonicwall.com Service Management - Associated Management page. A 30-day free trial is immediately Products page, check the Applicable Services table for activated. The Status page displays relevant services that your SonicWALL appliance is already licensed for. Your initial purchase may have included inf
Inhaltszusammenfassung zur Seite Nr. 15
6. On the Service Management - Associated Products page, Registering a Second Appliance as a Backup scroll down to the Associated Products section to verify To ensure that your network stays protected if your SonicWALL that your product registered successfully. You should see appliance has an unexpected failure, you can associate a the HA Primary unit listed in the Parent Product section, as well as a Status value of 0 in the Associated Products / second SonicWALL of the same model as the
Inhaltszusammenfassung zur Seite Nr. 16
3 Deployment Scenarios In this Section: This section provides detailed overviews of advanced deployment scenarios as well as configuration instructions for connecting your SonicWALL NSA Series. • Selecting a Deployment Scenario - page 16 • Scenario A: NAT/Route Mode Gateway - page 17 • Scenario B: State Sync Pair in NAT/Route Mode - page 18 • Scenario C: L2 Bridge Mode - page 19 • Initial Setup - page 20 • Upgrading Firmware on Your SonicWALL - page 25 • Configuring a State Sync Pair in NAT/Rou
Inhaltszusammenfassung zur Seite Nr. 17
Selecting a Deployment Scenario Before continuing, select a deployment scenario that best fits your network scheme. Reference the table below and the diagrams on the pages for help in choosing a scenario. Current Gateway Configuration New Gateway Configuration Use Scenario No gateway appliance Single SonicWALL NSA as a primary gateway. A - NAT/Route Mode Gateway Pair of SonicWALL NSA appliances for high B - NAT with State Sync Pair availability. Existing Internet gateway appliance SonicWALL NSA
Inhaltszusammenfassung zur Seite Nr. 18
Scenario A: NAT/Route Mode Gateway For new network installations or installations where the SonicWALL NSA Series is replacing the existing network A gateway. SonicWALL NSA In this scenario, the SonicWALL NSA Series is configured in Network Security Appliance NSA ISP 1 Internet NAT/Route mode to operate as a single network gateway. Two Internet sources may be routed through the SonicWALL appliance for load balancing and failover purposes. Because only a single SonicWALL appliance is deploye
Inhaltszusammenfassung zur Seite Nr. 19
Scenario B: State Sync Pair in NAT/Route Mode For network installations with two SonicWALL NSA Series appliances of the same model configured as a stateful B SonicWALL NSA 2 SonicWALL synchronized pair for redundant high-availability networking. HA / Failover Pair NSA In this scenario, one SonicWALL NSA Series operates as the HA Link primary gateway device and the other SonicWALL NSA Series SonicWALL NSA 1 is in passive mode. All network connection information is Network Security Applianc
Inhaltszusammenfassung zur Seite Nr. 20
Scenario C: L2 Bridge Mode Third Party Gateway For network installations where the SonicWALL NSA Series is C running in tandem with an existing network gateway. Internet or L2 Bridge Link LAN Segment 2 In this scenario, the original gateway is maintained. The SonicWALL NSA SonicWALL NSA Series is integrated seamlessly into the Network Security Appliance NSA existing network, providing the benefits of deep packet inspection and comprehensive security services on all network traffic. L2 B