User manual SONICWALL NSA 2400MX GETTING STARTED GUIDE

[. . . ] SonicWALL Network Security Appliances NET WORK SECURIT Y NSA 2400MX Getting Started Guide SonicWALL NSA 2400MX Getting Started Guide This Getting Started Guide provides instructions for basic installation and configuration of the SonicWALL Network Security Appliance (NSA) 2400MX running SonicOS Enhanced. Setup Step Procedure Est. Time 1 2 3 4 Pre-Configuration Tasks - page 1 Registering Your Appliance - page 5 Deployment Scenarios - page 13 Enabling Essential Security Services - page 23 Additional Configuration and Information Support and Training Options - page 29 Product Safety and Regulatory Information - page 37 SonicWALL NSA 2400MX Getting Started Guide Page i SonicWALL NSA 2400MX Front Panel Status Lights Provides dedicated LAN/WAN port status as follows: M0 module 0 is inserted M1 module 1 is inserted ALARM minor/major alarm* TEST firmware loading/booting/safemode* POWER unit is powered on LAN Port (X0) Provides LAN connectivity 10/100 Ethernet (X2-X17) Provide 10/100 Ethernet connectivity 2400MX CLI Port For connection to SonicOS command line interface 10/100/1000 Ethernet (X18-X25) Provide 10/100/1000 Ethernet connectivity USB Ports For use with SonicWALL approved modules WAN Port (X1) Provides WAN connectivity *Refer to The SonicOS LED Reference Guide for more information on ALARM and TEST lights Page ii SonicWALL NSA 2400MX Front Panel SonicWALL NSA 2400MX Rear Panel Power Switch On (I) and Off (o) power switch for the SonicWALL appliance AC Power Supply AC power connection for use with the supplied power cable PML I o M1 / M0 Expansion Bays Expansion bays for additional SonicWALL modular accessories SonicWALL NSA 2400MX Getting Started Guide Page iii Page iv SonicWALL NSA 2400MX Front Panel Pre-Configuration Tasks 1 In this Section: This section provides pre-configuration information. Review this section before setting up your SonicWALL NSA 2400MX appliance. · · · Checking NSA 2400MX Package Contents - page 2 Obtaining Configuration Information - page 3 Verifying System Requirements - page 4 SonicWALL NSA 2400MX Getting Started Guide Page 1 Checking NSA 2400MX Package Contents Before setting up your SonicWALL NSA appliance, verify that your package contains the following parts: · · · · · · NSA 2400MX Appliance Ethernet Cable DB9 -> RJ45 (CLI) Cable Rack Mounting Kit Standard Power Cord* Getting Started Guide Any Items Missing? If any items are missing from your package, please contact SonicWALL support. [. . . ] Configure management options (HTTP, HTTPS, Ping, SNMP, SSH, User logins, or HTTP redirects). Continue to Verifying WAN (Internet) Connectivity page 21. Page 20 Setup for Layer 2 Bridge Mode Verifying WAN (Internet) Connectivity To confirm connectivity to gateway, DNS, and other servers: 1. In the SonicOS interface, navigate to the System > Diagnostics page. Select the servers you wish to test, or select all. 4. Click the Test All Selected button to test connectivity to these servers. Note: Services which are not licensed on your installation will show up as "failed" in the connectivity test. SonicWALL NSA 2400MX Getting Started Guide Page 21 Page 22 Verifying WAN (Internet) Connectivity Enabling Essential Security Services 4 In this Section: Security services are an essential component of a secure network deployment. This section provides instructions for enabling security services on your SonicWALL NSA 2400MX appliance. · · · · Activating Licenses in SonicOS - page 24 Configuring Security Services - page 24 Enforcing Security Services on Network Zones - page 28 Security Service Dashboard - page 28 SonicWALL NSA 2400MX Getting Started Guide Page 23 Activating Licenses in SonicOS After completing the registration process in SonicOS, you must perform the following tasks to activate your licenses and enable your licensed services from within the SonicOS user interface: · · · Activate licenses Enable security services Apply services to network zones To activate licenses in SonicOS: 1. Under Manage Security Services Online do one of the following: · Enter your MySonicWALL credentials, then click the Synchronize button to synchronize licenses with MySonicWALL. · Paste the license keyset into the Manual Upgrade Keyset field. Click Submit. To activate licensed services in SonicOS, you can enter the license keyset manually, or you can synchronize all licenses at once with MySonicWALL. The Setup Wizard automatically synchronizes all licenses with MySonicWALL if the appliance has Internet access during initial setup. If initial setup is already complete, you can synchronize licenses from the System > Licenses page. Manual upgrade using the license keyset is useful when your appliance is not connected to the Internet. The license keyset includes all license keys for services or software enabled on MySonicWALL. It is available on <http://www. sonicwall. com> at the top of the Service Management page for your SonicWALL NSA appliance. 3. Configuring Security Services SonicWALL security services are key components of threat management in SonicOS. The core security services are Gateway Anti-Virus, Intrusion Prevention Services, and AntiSpyware. You must enable each security service individually in the SonicOS user interface. Enable and configure applicable security services: · · · · · Enabling Gateway Anti-Virus - page 25 Enabling Intrusion Prevention Services - page 25 Enabling Anti-Spyware - page 26 Enabling Comprehensive Anti-Spam Service - page 26 Enabling Content Filtering Service - page 27 Page 24 Activating Licenses in SonicOS Enabling Gateway Anti-Virus To enable Gateway Anti-Virus in SonicOS: 1. Choose to Enable Inbound Inspection and Enable Outbound Inspection on the desired protocols. Enabling Intrusion Prevention Services To enable Intrusion Prevention Services in SonicOS: 1. In the Signature Groups table, select the Prevent All and Detect All checkboxes for each attack priority that you want to prevent. Selecting the Prevent All and Detect All check boxes for High Priority Attacks and Medium Priority Attacks protects your network against the most dangerous and disruptive attacks. 4. Click the Accept button. 4. Click the Accept button. SonicWALL NSA 2400MX Getting Started Guide Page 25 Enabling Anti-Spyware To enable Anti-Spyware in SonicOS: 1. Select the Prevent All and Detect All checkboxes for each spyware danger level that you want to prevent. Select the Enable Inspection of Outbound Spyware Communication checkbox to enforce signature inspection on outbound traffic. Enabling Comprehensive Anti-Spam Service To enable Anti-Spam in SonicOS: 1. [. . . ] Schließen Sie an die Anschlüsse der SonicWALL keine Kabel an, die aus dem Gebäude in dem sich das Gerät befindet , herausgeführt werden. · · · · · SonicWALL NSA 2400MX Getting Started Guide Page 39 FCC Part 15 Class A Notice NOTE: This equipment was tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy. And if not installed and used in accordance with the instruction manual, the device may cause harmful interference to radio communications. [. . . ]