User manual SONICWALL NSA E8500 GETTING STARTED GUIDE

[. . . ] NSA E8500 Getting Started Guide SonicWALL NSA E8500 Getting Started Guide Welcome to Dynamic Security for the Global NetworkTM. The SonicWALL® E-Class Network Security Appliance (NSA) E8500 is designed to be the most scalable, reliable, and best performing multifunction threat appliance in its class. This Getting Started Guide provides instructions for basic installation and configuration of the SonicWALL NSA E8500. Setup Step Procedure Est. Time 1 2 3 4 5 Pre-Configuration Tasks - page 3 Registering Your Appliance - page 13 Deployment Scenarios - page 19 Additional Deployment Configuration - page 41 Rack Mounting Instructions - page 59 Additional Configuration and Information · · Support and Training Options - page 51 Product Safety and Regulatory Information - page 65 SonicWALL NSA E8500 Getting Started Guide Page 1 SonicWALL NSA E8500 Network Security Appliance E8500 I o I o Note: Always observe proper safety and regulatory guidelines when removing administrator-serviceable parts from the SonicWALL NSA E8500. [. . . ] Set the Probe Level for the interval in seconds between communication with upstream or downstream systems. SonicWALL recommends that you set the interval for at 3. 4. You can find the serial number on the back of the SonicWALL security appliance, or in the System > Status screen of the backup unit. The serial number for the Primary SonicWALL is automatically populated. 5. 6. SonicWALL NSA E8500 Getting Started Guide Page 33 7. 8. You can set the Probe IP Address(es) on the High Availability > Monitoring screen. Typically, SonicWALL recommends leaving the Failover Trigger Level (missed heart beats), Election Delay Time (seconds), and Dynamic Route Hold-Down Time fields to their default settings. These fields can be tuned later as necessary for your specific network environment. - The Failover Trigger Level sets the number of heartbeats that can be missed before failing over. - The Election Delay Time is the number of seconds allowed for internal processing between the two units in the HA pair before one of them takes the primary role. - The Dynamic Route Hold-Down Time setting is used when a failover occurs on a HA pair that is using either RIP or OSPF dynamic routing. When a failover occurs, Dynamic Route Hold-Down Time is the number of seconds the newly-active appliance keeps the dynamic routes it had previously learned in its route table. During this time, the newly-active appliance relearns the dynamic routes in the network. When the Dynamic Route Hold-Down Time duration expires, it deletes the old routes and implements the new routes it has learned from RIP or OSPF. In large or complex networks, a larger value may improve network stability during a failover. Click the Include Certificates/Keys checkbox to have the appliances synchronize all certificates and keys. Click Synchronize Settings to synchronize the settings between the Primary and Backup appliances. 10. Click Synchronize Firmware if you previously uploaded new firmware to your Primary unit while the Secondary unit was offline, and it is now online and ready to upgrade to the new firmware. Synchronize Firmware is typically used after taking your Secondary appliance offline while you test a new firmware version on the Primary unit before upgrading both units to it. Click Apply to retain the settings on this screen. Page 34 Configuring a State Sync Pair in NAT/Route Mode Synchronizing Settings Once you have configured the HA setting on the Primary SonicWALL security appliance, click the Synchronize Settings button. You should see a HA Peer Firewall has been updated message at the bottom of the management interface page. Also note that the management interface displays Logged Into: Primary SonicWALL Status: (green ball) Active in the upperright-hand corner. [. . . ] These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy. And if not installed and used in accordance with the instruction manual, the device may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user is required to correct the interference at his own expense. [. . . ]