User manual SONICWALL AVENTAIL 10.5.2 GETTING STARTED GUIDE

[. . . ] SonicWALL / Aventail Secure Remote Access 10. 5. 2 Getting Started Guide Thank You For Selecting SonicWALL® Protection. SonicWALL offers a wide range of high performance network security, content security for Web and e-mail security, secure remote access, continuous data protection, and management and reporting solutions. To take a deeper look at all the SonicWALL solutions please visit http://www. sonicwall. com/products/. To ensure the optimal performance and operation, visit https://www. mysonicwall. com to register your appliance and download the latest firmware, product documentation, and release notes. E-Class Support 24x7 In case you need assistance, contact our Global Support Center at the numbers listed here: http://www. sonicwall. com/us/support/contact. html. Have the serial number of your appliance available so that we can validate your contract and begin resolving any issues you may have. If you are located in the Americas or Asia Pacific: Call our toll-free Enterprise Support phone number at 1-866-360-1949 (your call will be transferred to SonicWALL's E-Class Technical Support team), or contact us at E-ClassSupport@SonicWALL. com. If you are located in Europe, the Middle East, or Africa: Call the phone number listed for your country, and then select the "Enterprise Support" option when prompted so that your call is transferred to our Enterprise Technical Support team. SonicWALL Aventail E-Class SRA Getting Started Guide | i Table of Contents Registering and Licensing Your Appliance . [. . . ] The assumption in this scenario is that you have Advanced EPC, which is included in an evaluation license and with the EX7000 and EX-2500 appliances, and is otherwise licensed separately. First we'll lay the foundation for this sample VPN, configuring the items that you'll make use of later when you set up access for the two communities: VPN building block Create an authentication realm Description Set up a Microsoft Active Directory (AD) authentication server. See "Establishing an Authentication Realm" on page 45. 44 | Chapter 4 - Common VPN Configurations VPN building block Identify users Description Add a few test users with names that match ones on your AD server. For this test scenario we'll identify two of them as employees, and two of them as partners. See "Identifying Users" on page 47. Add resources Define just a few resources. See "Adding Resources" on page 47. End Point Control Create two Standard zones of trust: a trusted one for members of the Employees community, and a less trusted one for Partners. Also create a quarantine zone, for devices that don't fit into either community. We'll modify the default style and layout and use it for the employees community, and then create a different look for the partner community. See "Customizing WorkPlace" on page 51. Create WorkPlace styles and layouts The next step is to put it all together, using the VPN "building blocks" you created, and configure two communities: See "Creating an Employee Community" on page 54 See "Creating a Partner Community" on page 57 The steps for configuring a community are similar for both: Setting up communities Members Access methods End Point Control Description Identify the members for each community. Create zones of trust: a trusted one for members of the Employees community, and a less trusted one for Partners. Use different WorkPlace styles and layouts for the two communities. WorkPlace appearance SonicWALL Aventail E-Class SRA Getting Started Guide | 45 Setting up communities Access control rule Description Create rules for what resources can be accessed by which users. See "Access Control Lists" on page 58. Throughout these procedures, remember to click Pending Changes in the upper-right corner in AMC, and then click Apply Changes to save your configuration changes. Establishing an Authentication Realm In order to authenticate your users, you must first define an authentication realm, which is the combination of an existing company directory and an authentication method. From the main navigation menu, click Realms, and then click New realm. For example, Company Directory. 46 | Chapter 4 - Common VPN Configurations 6. In the Primary domain controller box, type the host name (assuming you've already configured DNS) or IP address for the authentication server. 7. To perform Active Directory searches, the appliance must be able to log on to the authentication server. In the Password box, type the password that corresponds with the login name. Click the Test button to validate that the connection is properly configured and that the authentication server is accessible from the appliance. Resources sometimes require NTLM credentials to be forwarded to backend Web servers; Outlook is often set up this way. Expand the Advanced settings, and then scroll down to the NTLM authentication forwarding area to specify how the domain name portion of the credentials will be forwarded. You will be returned to the Configure Realm page. SonicWALL Aventail E-Class SRA Getting Started Guide | 47 12. From the Authentication server drop-down list, select the authentication server you just configured (Company Directory). [. . . ] Das Gerät muss komplett mit Gleichstrom oder Wechselstrom konfiguriert sein. Die Gleichstrom Konfiguration beinhaltet einen Anschlusskabel mit Erdung (Grün-Gelbes Kabel). Ein angemessen dimensionierter und geprüfte Sicherung, sollte Bestandteil der Haus-Installation sein. Bitte folgen die den lokalen Richtlinien beim Einkauf von Material oder Komponenten. [. . . ]