User manual SONICWALL NSA E8500 GETTING STARTED GUIDE

[. . . ] NSA E8500 Getting Started Guide SonicWALL NSA E8500 Getting Started Guide Welcome to Dynamic Security for the Global NetworkTM. The SonicWALL® E-Class Network Security Appliance (NSA) E8500 is designed to be the most scalable, reliable, and best performing multifunction threat appliance in its class. This Getting Started Guide provides instructions for basic installation and configuration of the SonicWALL NSA E8500. Setup Step Procedure Est. Time 1 2 3 4 5 Pre-Configuration Tasks - page 3 Registering Your Appliance - page 13 Deployment Scenarios - page 19 Additional Deployment Configuration - page 41 Rack Mounting Instructions - page 59 Additional Configuration and Information · · Support and Training Options - page 51 Product Safety and Regulatory Information - page 65 SonicWALL NSA E8500 Getting Started Guide Page 1 SonicWALL NSA E8500 Network Security Appliance E8500 I o I o Note: Always observe proper safety and regulatory guidelines when removing administrator-serviceable parts from the SonicWALL NSA E8500. [. . . ] When the Dynamic Route Hold-Down Time duration expires, it deletes the old routes and implements the new routes it has learned from RIP or OSPF. In large or complex networks, a larger value may improve network stability during a failover. Click the Include Certificates/Keys checkbox to have the appliances synchronize all certificates and keys. Click Synchronize Settings to synchronize the settings between the Primary and Backup appliances. 10. Click Synchronize Firmware if you previously uploaded new firmware to your Primary unit while the Secondary unit was offline, and it is now online and ready to upgrade to the new firmware. Synchronize Firmware is typically used after taking your Secondary appliance offline while you test a new firmware version on the Primary unit before upgrading both units to it. Click Apply to retain the settings on this screen. Page 34 Configuring a State Sync Pair in NAT/Route Mode Synchronizing Settings Once you have configured the HA setting on the Primary SonicWALL security appliance, click the Synchronize Settings button. You should see a HA Peer Firewall has been updated message at the bottom of the management interface page. Also note that the management interface displays Logged Into: Primary SonicWALL Status: (green ball) Active in the upperright-hand corner. This specifies that Certificates, CRLs and associated settings (such as CRL auto-import URLs and OCSP settings) are synchronized between the Primary and Backup units. When Local Certificates are copied to the Backup unit, the associated Private Keys are also copied. Because the connection between the Primary and Backup units is typically protected, this is generally not a security concern. To verify that Primary and Backup SonicWALL security appliances are functioning correctly, wait a few minutes, then power off the Primary SonicWALL device. From your management workstation, test connectivity through the Backup SonicWALL by accessing a site on the public Internet ­ note that the Backup SonicWALL, when active, assumes the complete identity of the Primary, including its IP addresses and Ethernet MAC addresses. The management interface should now display Logged Into: Backup SonicWALL Status: (green ball) Active in the upperright-hand corner. Now, power the Primary SonicWALL back on, wait a few minutes, then log back into the management interface. If stateful synchronization is enabled (automatically disabling preempt mode), the management GUI should still display Logged Into: Backup SonicWALL Status: (green ball) Active in the upper-right-hand corner. If you are using the Monitor Interfaces feature, experiment with disconnecting each monitored link to ensure correct configuration. Tip: A compromise between the convenience of synchronizing Certificates and the added security of not synchronizing Certificates is to temporarily enable the Include Certificate/Keys setting and manually synchronize the settings, and then disable Include Certificate/Keys. SonicWALL NSA E8500 Getting Started Guide Page 35 Adjusting High Availability Settings On the High Availability > Settings page, there are four userconfigurable timers that can be adjusted to suit your network's needs: · Heartbeat Interval (seconds) ­ This timer is the length of time between status checks. By default this timer is set to 5 seconds; using a longer interval will result in the SonicWALL taking more time to detect when/if failures have occurred. Failover Trigger Level (missed heart beats) ­ This timer is the number of heartbeats the SonicWALL will miss before failing over. By default, this time is set to 5 missed heart beats. This timer is linked to the Heartbeat Interval timer ­ for example, if you set the Heartbeat Interval to 10 seconds, and the Failover Trigger Level timer to 5, it will be 50 seconds before the SonicWALL fails over. Path monitoring sends pings to specified IP addresses to monitor that the network critical path is still reachable. The default is 20 seconds, and the allowed range is from 5 to 255 seconds. [. . . ] Dort wird die Batterie durch denselben oder entsprechenden, vom Hersteller empfohlenen Batterietyp ersetzt. Beachten Sie bei einer Entsorgung der Batterie oder der SonicWALL Internet Security Appliance die diesbezüglichen Anweisungen des Herstellers. Kabelverbindungen Alle Ethernet- und RS232-C-Kabel eignen sich für die Verbindung von Geräten in Innenräumen. Schließen Sie an die Anschlüsse der SonicWALL keine Kabel an, die aus dem Gebäude in dem sich das Gerät befindet , herausgeführt werden. SonicWALL NSA E8500 Getting Started Guide Page 67 FCC Part 15 Class A Notice NOTE: This equipment was tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. [. . . ]