SonicWALL Content Security Manager 2200 User Manual

COMPREHENSIVE INTERNET SECURIT Y

™

SonicWALL Content Security Manager Series

SonicWALL CSM 2200

Getting Started Guide

SonicWALL Content Security Manager 2200 Getting

Started Guide

Thank you for purchasing a SonicWALL Content Security Manager (CSM) series appliance. The SonicWALL CSM is an Internet content and application filter that enhances security and employee productivity, optimizes network bandwidth and mitigates legal liabilities. The SonicWALL provide powerful, scalable, cost-effective Internet content filtering that is easy to implement, requiring no change to your network clients. The SonicWALL HTTP traffic on any port, regardless of whether the network clients use external proxy servers.

Note: For complete instructions, refer to the SonicOS CF 2.5 Administrator’s Guide. For

This getting started guide contains the following sections:

• “Before You Begin” on page 2

• “Check Package Contents” on page 3

• “What You Need to Provide” on page 4

• “Important Information You Need” on page 4

• “SonicWALL CSM 2200 Front and Back Panels Overview” on page 5

• “Configuring Your SonicWALL CSM” on page 6

• “Advanced Configuration” on page 32

solutions using SonicWALL ADConnector, refer to the SonicWALL Content Security Manager Integrated Solutions Guide, available on the SonicWALL CSM Resource CD and at

<http://www.sonicwall.com/support/documentation.html>.

“Applying Power to the SonicWALL CSM” on page 6 “Accessing the SonicWALL Management Interface” on page 7 “Configuring Your SonicWALL CSM Using the Setup Wizard” on page 9 “Connecting the SonicWALL CSM to Your Network” on page 14 “Registering Your SonicWALL CSM” on page 17 “Understanding the *Default Policy” on page 21 “Verifying the *Default Policy” on page 23 “Integrating the SonicWALL CSM with Microsoft Active Directory” on page 24

CSM integrates into virtually any network to

CSM filters

SonicWALL CSM Series Appliance Getting Started Guide Page 1

Before You Begin

This section contains the following subsections:

• “Check Package Contents” on page 3

• “What You Need to Provide” on page 4

• “Important Information You Need” on page 4

• “SonicWALL CSM 2200 Front and Back Panels Overview” on page 5

Page 2

Check Package Contents

1. One SonicWALL SonicWALL CSM appliance

2. One SonicWALL CSM Getting Started Guide

3. One SonicOS Release Note

4. One Thank You card

5. One straight-through Ethernet cable

6. One red crossover Ethernet cable

7. One power cord*

8. One SonicWALL CSM Resource CD

9. Rack mounting hardware

*The power cord is for North America use only.

* Das eingeschlossene Netzkabel ist für Gebrauch in Nordamerikas nur vorgehabt.

Für Europaïsche Union (EU) Kunden, ist ein Netzkabel nicht eingeschlossen.

Note: SonicWALL ADConnector and SonicWALL ViewPoint software for the

SonicWALL CSM are available for download from the SonicWALL Web site

<https://www.mysonicwall.com>.

SonicWALL CSM Series Appliance Getting Started Guide Page 3

What You Need to Provide

• A firewall or security appliance protecting your LAN

• PC or Macintosh computer to act as an out-of-band management station for initial configuration of the SonicWALL

• Web browser for accessing the SonicWALL CSM’s Web-based management interface. The Web browser must support Java and HTTP uploads. Internet Explorer

5.0 or higher or Netscape Navigator 4.7 or higher are recommended.

CSM

Important Information You Need

LAN

LAN IP address range:

LAN netmask:

DNS server:

Firewall or Security Appliance

Firewall or router gateway IP address:

Firewall or security appliance management IP address:

mySonicWALL.com Account This is sensitive information. Store this information carefully.

Username:

Page 4

Password:

SonicWALL CSM Management Account This is sensitive information. Store this information carefully.

Username: (default: admin)

Password: (default: password)

SonicWALL CSM 2200 Front and Back Panels Overview

Power Test Alarm X0 X1 X2 X3/HF-Port Console LED LED LED Port Port Port

Front Panel Feature Description

Console Provides access to command-line interface.

Power LED Indicates the SonicWALL CSM appliance is

powered on.

Test LED Indicates the SonicWALL CSM appliance is in test mode.

Alarm LED Indicates a critical error or failure.

X0 Port Provides a connection to your LAN.

X1 Port Provides a primary (Ethernet) connection to the Internet.

X2 Port Provides a connection for out-of-band management. This

port has no network connection.

X3/HF-Port Provides an optionally configurable HF (hardware failover)

port. Note: This port is not configurable for other types of connections.

On/Off Power Switch

Back Panel Feature Description

Power Provides power connection using supplied power cord.

On/Off Switch Powers the SonicWALL CSM appliance on and off.

SonicWALL CSM Series Appliance Getting Started Guide Page 5

Configuring Your SonicWALL CSM

Configuring your SonicWALL CSM comprises the following steps:

“Applying Power to the SonicWALL CSM” on page 6

“Accessing the SonicWALL Management Interface” on page 7

“Configuring Your SonicWALL CSM Using the Setup Wizard” on page 9

“Connecting the SonicWALL CSM to Your Network” on page 14

“Registering Your SonicWALL CSM” on page 17

“Understanding the *Default Policy” on page 21

“Verifying the *Default Policy” on page 23

“Integrating the SonicWALL CSM with Microsoft Active Directory” on page 24

Note: After step 7, the SonicWALL CSM is fully functional, using the built-in *Default

Policy to filter content. Continue to step 8 to further customize your installation.

Applying Power to the SonicWALL CSM

To apply power to your SonicWALL CSM appliance:

1. Plug the power cord into the back panel of the SonicWALL CSM and into an appropriate power outlet.

2. Turn on the SonicWALL CSM appliance using the On/Off switch located on the back panel of the appliance.

Page 6

The Power LED shines green when you activate the power switch. The Test LED and Alarm LED light up and may blink while the appliance performs a series of diagnostic tests. When the Test LED and Alarm LED are no longer lit, the SonicWALL

CSM is ready

for configuration.

Accessing the SonicWALL Management Interface

To access the Web-based management interface of the SonicWALL CSM, configure your out-of-band management station (the computer you are using to manage the SonicWALL CSM) with the following static TCP/IP address properties:

• IP address: Use an available IP address on the 192.168.168.0/24 subnet. For example, 192.168.168.20.

• Subnet mask: 255.255.255.0

• DNS settings: You do not need to configure the default gateway or DNS

settings.

For help configuring a static IP address, refer to “Configuring Static IP” on page 33.

When you have configured the static IP address and subnet mask on your management station, perform the following steps to access the SonicWALL CSM management interface:

1. Connect one end of the red crossover Ethernet cable to the Ethernet port of the outof-band management station. Connect the other end of the red crossover cable to the X2 port on the SonicWALL

CSM.

Note: The X2 port is for out-of-band management and has no network connection.

2. Start your Web browser.

Alert: Your Web browser must support Java and HTTP uploads. Internet Explorer 5.0

or higher or Netscape Navigator 4.0 or higher are recommended.

SonicWALL CSM Series Appliance Getting Started Guide Page 7

3. Enter http://192.168.168.168 in the Location or Address field and press Enter on your keyboard.

Note: For additional security, you may also access the appliance using HTTPS.

4. In the SonicWALL CSM authentication page, enter admin in the Name field and

password in the Password field and click Login. The Setup Wizard page is

displayed.

5. Unable to connect?

If you cannot connect to the SonicWALL CSM, verify the following configurations:

• Did you correctly enter the SonicWALL CSM X2 management IP address, http://192.168.168.168, in your Web browser?

• Did you change the TCP/IP network settings on your computer?

• Did you use the red crossover Ethernet cable to connect your out-of-band management station to the X2 (out-of-band management) port on your SonicWALL CSM?

Page 8

3Configuring Your SonicWALL CSM Using the Setup Wizard

The SonicWALL CSM Setup Wizard page automatically displays after the CSM is properly powered on and configured for and connected to your management station. The Setup Wizard allows you to configure the following components:

• Password

•Time zone

• Network setup

To configure your SonicWALL CSM using the Setup Wizard, perform the following steps:

1. The SonicWALL Setup Wizard will automatically launch.

2. The Welcome to the SonicWALL Configuration Wizard screen displays. Confirm that the radio button next to Setup Wizard is selected and click Next> to continue.

3. In the Change Password screen, you will be prompted to create a new password. The Old Password is pre-populated. Enter a new password in the New Password field and re-enter it in the Confirm field. Click Next> to continue. Passwords are case-sensitive.

SonicWALL CSM Series Appliance Getting Started Guide Page 9

4. In the Time Zone drop down list, select the correct time zone for your location. Check the box next to Automatically adjust clock for daylight saving time if you live in a region that observes Daylight Saving Time. Click Next> to continue.

Note: For best performance, you need to configure the time zone to accurately reflect

geographic location. It is important that you set the time zone correctly before you register your SonicWALL CSM appliance.

Page 10

5. The Network Setup screen will prompt you for information to configure the SonicWALL Refer to the table below for a description of the Network Setup fields. After you have entered the required information, press Next> to continue.

CSM’s X0 and X1 interfaces, which will enable Internet connectivity.

Alert: You must configure the network interfaces before connecting the

SonicWALL CSM to your network. If you have already connected cables to the X0 and X1 interfaces, disconnect them before continuing this step.

Field Description

SonicWALL WAN IP Address

WAN Subnet Mask

Gateway

DNS Server Address Enter the DNS server address for your network.

DNS Server Address #2 (optional)

(Router) Address Enter the default gateway of your network.

Enter a single, static IP address to assign to the SonicWALL CSM appliance. Make sure this address will not be assigned to any other device.

Enter the subnet mask for your network. For example,

255.255.0.0.

Enter a secondary, back-up DNS server to use if the first one fails.

SonicWALL CSM Series Appliance Getting Started Guide Page 11

6. The SonicWALL Configuration Summary displays. Click Apply to confirm the settings. After you click the Apply button, the Storing SonicWALL Configuration screen displays. It may take up to two minutes while changes are being applied to your SonicWALL CSM appliance.

7. When the configuration has been stored, you will see the Setup Wizard Complete screen. Click Close to close the Wizard. Continue to

“Connecting the SonicWALL CSM to Your Network” on page 14. Keep a hardcopy record of your IP address, user name and password for your SonicWALL CSM appliance for administrator login.

Page 12

8. Disconnect your crossover cable from your management station and the CSM appliance and refer to page 14.

Note: After initial configuration using the X2 out-of-band management interface, you

can now perform management from the LAN (X0) interface.

“Connecting the SonicWALL CSM to Your Network” on

SonicWALL CSM Series Appliance Getting Started Guide Page 13

+ 30 hidden pages