User manual SONICWALL AVENTAIL 10.5.1 INSTALLATION AND ADMINISTRATION GUIDE

[. . . ] SonicWALL / Aventail Secure Remote Access 10. 5. 1 Installation and Administration Guide SonicWALL Aventail E-Class SRA Installation and Administration Guide | i Table of Contents Chapter 1 Introduction . 46 Avoiding Configuration File Conflicts with Multiple Administrators . 57 ii | Table of Contents Viewing Fully Qualified Domain Names and Custom Ports . 179 SonicWALL Aventail E-Class SRA Installation and Administration Guide | iii Changing the Order of Communities Listed in a Realm . [. . . ] Click OK on the Export page. Saving the Current Configuration on the Appliance In contrast to exporting, saving configuration data stores it on your appliance (up to 20 saved configurations can be stored). You cannot save a partial configuration, and only changes that have been applied are included. Describe this configuration in the Description box and (if there are multiple administrators) it is a good practice to identify who is saving it. For example, an entry might read as follows: Saved by MIS before adding access control rules for mobile devices. The current configuration data is stored on the appliance and added to the Saved Configurations list. If your appliance is set up to receive configuration data from another appliance, its configuration data is automatically saved before replication occurs. For more information, see "Replicating Configuration Data" on page 227. 226 | Chapter 7 - System Administration Importing Configuration Data Exporting always involves the complete set of configuration data, but it is possible to do just a partial import (for example, if you want to import only policy and WorkPlace settings). The following table describes the types of data that you can import into an existing AMC configuration: Type of configuration data Partial configuration Description Access policy: Includes rules, resources, users and groups, and EPC device profiles and zones. Aventail WorkPlace customization: Includes general appearance settings, custom content, shortcuts, and custom templates. CA certificates: Includes the CA certificates that are used to secure authentication server connections, or back-end Web resources, with SSL. End Point Control: If you use client certificates in device profiles, a partial configuration includes the CA that issued them to your users. SSL certificates: Includes certificates for AMC and the appliance, along with private keys and passwords. Node-specific and network-specific settings: Includes host names, IP addresses, default route information, DNS settings, administrator accounts, and cluster settings. In the File name box, type the path of the appropriate file (AventailSSLVPN-<date><nnn>. aea), or click Browse to locate it. Click Partial configuration if you want to import just the items listed in the table above. See "Applying Configuration Changes" on page 52 for more information. Notes If an import fails, you can view details in the Management message log file. If you import a configuration while other configuration changes are pending in AMC, the pending changes are overwritten. You can import the policy from an older SonicWALL appliance, provided the older appliance predates the newer one by no more than three versions. For example, you can import the policy configuration from your v9. 0. 0 to your v10. 0. 1 appliance. You cannot import a configuration from a single node onto a high-availability cluster, or from a cluster configuration onto a single node. Restoring or Exporting Configuration Data Stored on the Appliance Follow these steps to restore a configuration file that is stored on the appliance. (To specify configuration data that is stored on a local machine instead of the appliance, use the import feature. [. . . ] See "Administering a High-Availability Cluster" on page 385 for more information. Overview of Clustering Clustering allows you to increase the capacity of the SonicWALL VPN solution by installing up to eight nodes behind an external load balancer. The SonicWALL appliances also provide support for health checks from external load balancers, which allows the load balancer to know which services are running on the appliance so that traffic can be failed over to another system in the event of maintenance or failure. Notes For high availability and system redundancy, you can cluster two identical appliances behind one virtual IP address. See "Administering a High-Availability Cluster" on page 385 for more information. Cluster Management When configured to interoperate with an external load balancer, all appliance nodes in the cluster are peers, and there is no centralized management capability for synchronizing the node configuration across the cluster. [. . . ]