User manual SONICWALL NSA 2400MX GETTING STARTED GUIDE

[. . . ] SonicWALL Network Security Appliances NET WORK SECURIT Y NSA 2400MX Getting Started Guide SonicWALL NSA 2400MX Getting Started Guide This Getting Started Guide provides instructions for basic installation and configuration of the SonicWALL Network Security Appliance (NSA) 2400MX running SonicOS Enhanced. Setup Step Procedure Est. Time 1 2 3 4 Pre-Configuration Tasks - page 1 Registering Your Appliance - page 5 Deployment Scenarios - page 13 Enabling Essential Security Services - page 23 Additional Configuration and Information Support and Training Options - page 29 Product Safety and Regulatory Information - page 37 SonicWALL NSA 2400MX Getting Started Guide Page i SonicWALL NSA 2400MX Front Panel Status Lights Provides dedicated LAN/WAN port status as follows: M0 module 0 is inserted M1 module 1 is inserted ALARM minor/major alarm* TEST firmware loading/booting/safemode* POWER unit is powered on LAN Port (X0) Provides LAN connectivity 10/100 Ethernet (X2-X17) Provide 10/100 Ethernet connectivity 2400MX CLI Port For connection to SonicOS command line interface 10/100/1000 Ethernet (X18-X25) Provide 10/100/1000 Ethernet connectivity USB Ports For use with SonicWALL approved modules WAN Port (X1) Provides WAN connectivity *Refer to The SonicOS LED Reference Guide for more information on ALARM and TEST lights Page ii SonicWALL NSA 2400MX Front Panel SonicWALL NSA 2400MX Rear Panel Power Switch On (I) and Off (o) power switch for the SonicWALL appliance AC Power Supply AC power connection for use with the supplied power cable PML I o M1 / M0 Expansion Bays Expansion bays for additional SonicWALL modular accessories SonicWALL NSA 2400MX Getting Started Guide Page iii Page iv SonicWALL NSA 2400MX Front Panel Pre-Configuration Tasks 1 In this Section: This section provides pre-configuration information. Review this section before setting up your SonicWALL NSA 2400MX appliance. · · · Checking NSA 2400MX Package Contents - page 2 Obtaining Configuration Information - page 3 Verifying System Requirements - page 4 SonicWALL NSA 2400MX Getting Started Guide Page 1 Checking NSA 2400MX Package Contents Before setting up your SonicWALL NSA appliance, verify that your package contains the following parts: · · · · · · NSA 2400MX Appliance Ethernet Cable DB9 -> RJ45 (CLI) Cable Rack Mounting Kit Standard Power Cord* Getting Started Guide Any Items Missing? If any items are missing from your package, please contact SonicWALL support. [. . . ] From the Diagnostic Tool list, select Check Network Settings. Select the servers you wish to test, or select all. 4. Click the Test All Selected button to test connectivity to these servers. Note: Services which are not licensed on your installation will show up as "failed" in the connectivity test. SonicWALL NSA 2400MX Getting Started Guide Page 21 Page 22 Verifying WAN (Internet) Connectivity Enabling Essential Security Services 4 In this Section: Security services are an essential component of a secure network deployment. This section provides instructions for enabling security services on your SonicWALL NSA 2400MX appliance. · · · · Activating Licenses in SonicOS - page 24 Configuring Security Services - page 24 Enforcing Security Services on Network Zones - page 28 Security Service Dashboard - page 28 SonicWALL NSA 2400MX Getting Started Guide Page 23 Activating Licenses in SonicOS After completing the registration process in SonicOS, you must perform the following tasks to activate your licenses and enable your licensed services from within the SonicOS user interface: · · · Activate licenses Enable security services Apply services to network zones To activate licenses in SonicOS: 1. Navigate to the System > Licenses page. Under Manage Security Services Online do one of the following: · Enter your MySonicWALL credentials, then click the Synchronize button to synchronize licenses with MySonicWALL. · Paste the license keyset into the Manual Upgrade Keyset field. Click Submit. To activate licensed services in SonicOS, you can enter the license keyset manually, or you can synchronize all licenses at once with MySonicWALL. The Setup Wizard automatically synchronizes all licenses with MySonicWALL if the appliance has Internet access during initial setup. If initial setup is already complete, you can synchronize licenses from the System > Licenses page. Manual upgrade using the license keyset is useful when your appliance is not connected to the Internet. The license keyset includes all license keys for services or software enabled on MySonicWALL. It is available on <http://www. sonicwall. com> at the top of the Service Management page for your SonicWALL NSA appliance. 3. Configuring Security Services SonicWALL security services are key components of threat management in SonicOS. The core security services are Gateway Anti-Virus, Intrusion Prevention Services, and AntiSpyware. You must enable each security service individually in the SonicOS user interface. Enable and configure applicable security services: · · · · · Enabling Gateway Anti-Virus - page 25 Enabling Intrusion Prevention Services - page 25 Enabling Anti-Spyware - page 26 Enabling Comprehensive Anti-Spam Service - page 26 Enabling Content Filtering Service - page 27 Page 24 Activating Licenses in SonicOS Enabling Gateway Anti-Virus To enable Gateway Anti-Virus in SonicOS: 1. Navigate to Security Services > Gateway Anti-Virus. Select the Enable Gateway Anti-Virus checkbox. Choose to Enable Inbound Inspection and Enable Outbound Inspection on the desired protocols. Enabling Intrusion Prevention Services To enable Intrusion Prevention Services in SonicOS: 1. Navigate to Security Services > Intrusion Prevention. Select the Enable Intrusion Prevention checkbox. In the Signature Groups table, select the Prevent All and Detect All checkboxes for each attack priority that you want to prevent. [. . . ] Operation of this equipment in a residential area is likely to cause harmful interference in which case the user is required to correct the interference at his own expense. Complies with EN 55022 Class A and CISPR22 Class A Warning: This is a class A product. In a domestic environment, this product may cause radio interference in which case the user may be required to take adequate measures. Caution: Modifying this equipment or using this equipment for purposes not shown in this manual without the written consent of SonicWALL, Inc. [. . . ]