User manual SONICWALL SRA 4200 GETTING STARTED GUIDE

[. . . ] SonicWALL Secure Remote Access Appliances SECURE REMOTE ACCESS SRA 1200/4200 Getting Started Guide Getting Started Guide SonicWALL SRA 1200/4200 Getting Started Guide This Getting Started Guide contains installation procedures and configuration guidelines for deploying a SonicWALL SRA 1200/4200 appliance into an existing or new network. This document addresses the most common use-case scenarios and network topologies in which the SonicWALL SRA 1200/4200 appliance can be deployed. Document Contents This document contains the following sections: 1 2 3 4 5 6 Setting Up Your Network - page 3 Connecting Your Appliance - page 11 Registering Your Appliance - page 21 Network Configuration - page 27 Support and Training Options - page 41 Safety and Regulatory Information - page 49 SonicWALL SRA 1200/4200 Getting Started Guide Page 1 Page 2 Document Contents Setting Up Your Network 1 In this Section: This section provides pre-configuration information. Review this section before setting up your SonicWALL SRA 1200/4200 appliance. · · · · SRA 1200 System Requirements - page 4 SRA 4200 System Requirements - page 5 Selecting a Deployment Scenario - page 7 Applying Power to the SonicWALL SRA - page 9 SonicWALL SRA 1200/4200 Getting Started Guide Page 3 SRA 1200 System Requirements Before you begin the setup process, verify that your package contains the following parts: · · · · · · · One SonicWALL SRA 1200 appliance One SonicWALL SRA 1200/4200 Getting Started Guide One straight-through Ethernet cable One serial CLI cable One rack-mount kit One power cord* A Web browser supporting Java Script and HTTP uploads. [. . . ] In the 'Address Objects' section, click . In the 'Add Address Object' dialog box, create an address object for the X0 interface IP address of your SonicWALL SRA: Name Name for the SonicWALL SRA SRA Host SonicWALL SRA's 'X0' IP address, 192. 168. 200. 1 by default 6. On the 'Server Public Information' page, accept the default IP address, or enter an IP address in your allowed public IP range. Click Next. Note: The default IP address is the WAN IP address of your SonicWALL security appliance. If you accept this default, all HTTP and HTTPS traffic to this IP address will be routed to your SonicWALL SRA. The 'Public Server Configuration Summary' page displays all the configuration actions that will be performed to create the public server. Click Apply to create the configuration and allow access from the WAN to the SRA on the DMZ. 5. Zone Assignment Type IP Address Click Add to create the object. Click again to create an address object for the NetExtender range. Page 30 Scenario A: SRA on a New DMZ 6. In the 'Add Address Object' dialog box, create an address object for the X0 interface IP address of the SonicWALL SRA: Name Zone Assignment Type Starting IP Address Name for NetExtender SRA Range Start of the NetExtender IP address range, 192. 168. 200. 100 by default End of the NetExtender IP address range, 192. 168. 200. 200 by default 11. On the 'Firewall > Access Rules' page, in the matrix view, click the SRA > LAN icon. Ending IP Address 7. On the 'Network > Address Objects' page, in the `Address Groups' section, click . In the 'Add Address Object Group' dialog box, create a group for the X0 interface IP address of your SonicWALL SRA and the NetExtender IP range: · Enter a name for the group. · In the left column, select the two groups you created and click the right arrow button · . 12. On the resulting 'Firewall > Access Rules' page, click . Click OK to create the group when both objects are in the right column. In the administrative interface, navigate to the Firewall > Access Rules page. SonicWALL SRA 1200/4200 Getting Started Guide Page 31 13. In the 'Add Rule' window, create a rule to allow access to the LAN for the address group you just created: Action From Zone To Zone Service Source Allow SRA LAN Any The address group you just created, such as SonicWALL_SRA_Group Any All Always on Selected Selected Scenario B: SRA on an Existing DMZ This section provides procedures to configure your gateway appliance based on Scenario B. This section contains the following subsections: Prerequisites · Connecting to a SonicWALL Security Appliance - page 32 · Allowing WAN -> DMZ Connection - page 33 · Allowing DMZ -> LAN Connection - page 34 Destination Users Allowed Schedule Enable Logging Allow Fragmented Packets Connecting to a SonicWALL Security Appliance 1. Using a computer connected to your LAN, launch your Web browser, and enter the IP address of your existing SonicWALL security appliance in the Location or Address field. When the management interface displays, enter your User Name and Password in the appropriate fields and click Login. 2. 14. Continue to "Testing Your Remote Connection" on page 39 Note: Remember that you are logging into your SonicWALL firewall, not the SonicWALL SRA. Page 32 Scenario B: SRA on an Existing DMZ Allowing WAN -> DMZ Connection If you are already forwarding HTTP or HTTPS to an internal server, and you only have a single public IP address, you will need to select different (unique) ports of operation for either the existing servers or for the SonicWALL SRA appliance, because both cannot concurrently use the same IP address and port combinations. To create a public server access rule for HTTPS traffic: 1. Click the Wizards icon at the top right of the interface. On the 'Welcome' page, select the Public Server Wizard and then click Next. [. . . ] Canadian Radio Frequency Emissions Statement This Class A digital apparatus complies with Canadian ICES003. Cet appareil numérique de la classe A conforme à toute la norme NMB-003 du Canada. Complies with EN 55022 Class A and CISPR22 Class A Warning: This is a class A product. In a domestic environment, this product may cause radio interference in which case the user may be required to take adequate measures. [. . . ]