User manual SONICWALL SRA 1200 GETTING STARTED GUIDE

[. . . ] SonicWALL Secure Remote Access Appliances SECURE REMOTE ACCESS SRA 1200/4200 Getting Started Guide Getting Started Guide SonicWALL SRA 1200/4200 Getting Started Guide This Getting Started Guide contains installation procedures and configuration guidelines for deploying a SonicWALL SRA 1200/4200 appliance into an existing or new network. This document addresses the most common use-case scenarios and network topologies in which the SonicWALL SRA 1200/4200 appliance can be deployed. Document Contents This document contains the following sections: 1 2 3 4 5 6 Setting Up Your Network - page 3 Connecting Your Appliance - page 11 Registering Your Appliance - page 21 Network Configuration - page 27 Support and Training Options - page 41 Safety and Regulatory Information - page 49 SonicWALL SRA 1200/4200 Getting Started Guide Page 1 Page 2 Document Contents Setting Up Your Network 1 In this Section: This section provides pre-configuration information. Review this section before setting up your SonicWALL SRA 1200/4200 appliance. · · · · SRA 1200 System Requirements - page 4 SRA 4200 System Requirements - page 5 Selecting a Deployment Scenario - page 7 Applying Power to the SonicWALL SRA - page 9 SonicWALL SRA 1200/4200 Getting Started Guide Page 3 SRA 1200 System Requirements Before you begin the setup process, verify that your package contains the following parts: · · · · · · · One SonicWALL SRA 1200 appliance One SonicWALL SRA 1200/4200 Getting Started Guide One straight-through Ethernet cable One serial CLI cable One rack-mount kit One power cord* A Web browser supporting Java Script and HTTP uploads. [. . . ] Click Next. Note: The default IP address is the WAN IP address of your SonicWALL security appliance. If you accept this default, all HTTP and HTTPS traffic to this IP address will be routed to your SonicWALL SRA. The 'Public Server Configuration Summary' page displays all the configuration actions that will be performed to create the public server. Click Apply to create the configuration and allow access from the WAN to the SRA on the DMZ. 5. Zone Assignment Type IP Address Click Add to create the object. Click again to create an address object for the NetExtender range. Page 30 Scenario A: SRA on a New DMZ 6. In the 'Add Address Object' dialog box, create an address object for the X0 interface IP address of the SonicWALL SRA: Name Zone Assignment Type Starting IP Address Name for NetExtender SRA Range Start of the NetExtender IP address range, 192. 168. 200. 100 by default End of the NetExtender IP address range, 192. 168. 200. 200 by default 11. On the 'Firewall > Access Rules' page, in the matrix view, click the SRA > LAN icon. Ending IP Address 7. On the 'Network > Address Objects' page, in the `Address Groups' section, click . In the 'Add Address Object Group' dialog box, create a group for the X0 interface IP address of your SonicWALL SRA and the NetExtender IP range: · Enter a name for the group. · In the left column, select the two groups you created and click the right arrow button · . 12. On the resulting 'Firewall > Access Rules' page, click . Click OK to create the group when both objects are in the right column. In the administrative interface, navigate to the Firewall > Access Rules page. SonicWALL SRA 1200/4200 Getting Started Guide Page 31 13. In the 'Add Rule' window, create a rule to allow access to the LAN for the address group you just created: Action From Zone To Zone Service Source Allow SRA LAN Any The address group you just created, such as SonicWALL_SRA_Group Any All Always on Selected Selected Scenario B: SRA on an Existing DMZ This section provides procedures to configure your gateway appliance based on Scenario B. This section contains the following subsections: Prerequisites · Connecting to a SonicWALL Security Appliance - page 32 · Allowing WAN -> DMZ Connection - page 33 · Allowing DMZ -> LAN Connection - page 34 Destination Users Allowed Schedule Enable Logging Allow Fragmented Packets Connecting to a SonicWALL Security Appliance 1. Using a computer connected to your LAN, launch your Web browser, and enter the IP address of your existing SonicWALL security appliance in the Location or Address field. When the management interface displays, enter your User Name and Password in the appropriate fields and click Login. 2. 14. Continue to "Testing Your Remote Connection" on page 39 Note: Remember that you are logging into your SonicWALL firewall, not the SonicWALL SRA. Page 32 Scenario B: SRA on an Existing DMZ Allowing WAN -> DMZ Connection If you are already forwarding HTTP or HTTPS to an internal server, and you only have a single public IP address, you will need to select different (unique) ports of operation for either the existing servers or for the SonicWALL SRA appliance, because both cannot concurrently use the same IP address and port combinations. On the 'Welcome' page, select the Public Server Wizard and then click Next. On the 'Public Server Type' page, select: Server Type Services Other Create new group 6. On the 'Server Private Network Configuration' page, enter the following and click Next: Server Name Server Private IP Address Name for the SonicWALL SRA 'X0' IP address of the SRA appliance within your DMZ range, such as 10. 1. 1. 200 Brief description of the server Server Comment 7. On the 'Server Public Information' page, accept the default IP address or enter an IP address in your allowed public IP range. Click Next. Note: The default IP address is the WAN IP address of your SonicWALL firewall. If you accept this default, all HTTP and HTTPS traffic to this IP address will be routed to your SonicWALL SRA. The 'Public Server Configuration Summary' page displays all configuration actions that will be performed to create the public server. [. . . ] These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy. And if not installed and used in accordance with the instruction manual, the device may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user is required to correct the interference at his own expense. [. . . ]