User manual SONICWALL INTERNET SECURITY APPLIANCE

[. . . ] SONICWALL Internet Security Appliances Contents Copyright Notice . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 About this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 SonicWALL Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 1 Introduction Your SonicWALL Internet Security Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] Intranet firewalling is achieved by connecting the SonicWALL between an unprotected and a protected segment, as shown below. Installation 1. Connect the LAN Ethernet port on the back of the SonicWALL to the network segment to be protected against unauthorized access. Connect the WAN Ethernet port on the back of the SonicWALL to the rest of the network. Note: Devices connected to the WAN port do not have firewall protection. It is recommended that you use another SonicWALL Internet security appliance to protect computers on the WAN. 3. For SonicWALL PRO 200 and SonicWALL PRO 300, press the Power Switch to the ON position. Page 98 SonicWALL Internet Security Appliance User's Guide Intranet Configuration Click Advanced on the left side of the browser window, and then click the Intranet tab. To enable an Intranet firewall, you must specify which machines are located on the LAN, or you must specify which machines are located on the WAN. It is best to select the network area with the least number of machines. For example, if only one or two machines are connected to the WAN, select Specified address ranges are attached to the WAN link. That way, you only have to enter one or two IP addresses in the Add Range section. Intranet Settings Select one of the following four options: · SonicWALL WAN link is connected directly to the Internet router Select this option if the SonicWALL is protecting your entire network. · Specified address ranges are attached to the LAN link Select this option if it is easier to specify the devices on your LAN. If you do not include all computers on your LAN, the computers not included will be unable to send or receive data through the SonicWALL. Advanced Features Page 99 · Specified address ranges are attached to the WAN link Select this option if it is easier to specify the devices on your WAN. Computers connected to the WAN port that are not included are inaccessible to users on your LAN. · Add Range To add a range of addresses, such as "199. 2. 23. 50" to "199. 2. 23. 54", enter the starting address in the From Address field and the ending address in the To Address field. An individual IP address should be entered in the From Address field only. Note: Up to 64 address ranges can be entered. Click Update. Once the SonicWALL has been updated, a message confirming the update is displayed at the bottom of the browser window. Routes If you have routers on your Local Area Network, you have to configure the Static Routes section of the SonicWALL. Click Advanced on the left side of the browser window, and then click the Routes tab. The SonicWALL LAN IP Address, LAN Subnet Mask, WAN IP Address and WAN/DMZ Subnet Mask are displayed in the Current Network Settings section. Refer to these settings when configuring your Static Routes. Page 100 SonicWALL Internet Security Appliance User's Guide To add Static Route entries, complete the following instructions: 1. The destination network is the IP address subnet of the remote network segment. Note: If the destination network uses IP addresses ranging from "192. 168. 1. 1" to "192. 168. 1. 255", enter "192. 168. 1. 0" in the Dest. Enter the subnet mask of the remote network segment in the Subnet mask field. If your router is located on the SonicWALL LAN, the Gateway address should be in the same subnet as the SonicWALL LAN IP Address. Select the port on the SonicWALL that the router is connected to either the LAN, the WAN, or the DMZ, from the Link list. Once the SonicWALL has been updated, a message confirming the update is displayed at the bottom of the Web browser window. Restart the SonicWALL for the change to take effect. Note: The SonicWALL can support up to 64 static route entries. DMZ Addresses (SonicWALL PRO 100, PRO 200, and PRO 300 Only) The SonicWALL provides security by preventing Internet users from accessing machines on the LAN. [. . . ] Log back into the SonicWALL at the default IP address, "http://192. 168. 168. 168". Make sure that the Management Station's IP address is in the same subnet as the SonicWALL--for example, "192. 168. 168. 200". The SonicWALL Management Interface displays a message stating that the firmware has been erased. Click the Browse button to locate the SonicWALL firmware file on the Management Station hard drive. [. . . ]