COMPREHENSIVE INTERNET SECURIT Y
™
SonicWALL Content Security Manager Series
b
SonicWALL CSM 2200
Getting Started Guide
SonicWALL CSM Series Appliance Getting Started Guide Page 1
SonicWALL Content Security Manager 2200 Getting
Started Guide
Thank you for purchasing a SonicWALL Content Security Manager (CSM) series
appliance. The SonicWALL CSM is an Internet content and application filter that
enhances security and employee productivity, optimizes network bandwidth and
mitigates legal liabilities. The SonicWALL
CSM integrates into virtually any network to
provide powerful, scalable, cost-effective Internet content filtering that is easy to
implement, requiring no change to your network clients. The SonicWALL
CSM filters
HTTP traffic on any port, regardless of whether the network clients use external proxy
servers.
Note: For complete instructions, refer to the SonicOS CF 2.5 Administrator’s Guide. For
solutions using SonicWALL ADConnector, refer to the SonicWALL Content
Security Manager Integrated Solutions Guide, available on the
SonicWALL CSM Resource CD and at
<http://www.sonicwall.com/support/documentation.html>.
Contents
This getting started guide contains the following sections:
• “Before You Begin” on page 2
• “Check Package Contents” on page 3
• “What You Need to Provide” on page 4
• “Important Information You Need” on page 4
• “SonicWALL CSM 2200 Front and Back Panels Overview” on page 5
• “Configuring Your SonicWALL CSM” on page 6
1
“Applying Power to the SonicWALL CSM” on page 6
2
“Accessing the SonicWALL Management Interface” on page 7
3
“Configuring Your SonicWALL CSM Using the Setup Wizard” on page 9
4
“Connecting the SonicWALL CSM to Your Network” on page 14
5
“Registering Your SonicWALL CSM” on page 17
6
“Understanding the *Default Policy” on page 21
7
“Verifying the *Default Policy” on page 23
8
“Integrating the SonicWALL CSM with Microsoft Active Directory” on page 24
• “Advanced Configuration” on page 32
Page 2
Before You Begin
This section contains the following subsections:
• “Check Package Contents” on page 3
• “What You Need to Provide” on page 4
• “Important Information You Need” on page 4
• “SonicWALL CSM 2200 Front and Back Panels Overview” on page 5
SonicWALL CSM Series Appliance Getting Started Guide Page 3
Check Package Contents
1. One SonicWALL SonicWALL CSM appliance
2. One SonicWALL CSM Getting Started Guide
3. One SonicOS Release Note
4. One Thank You card
5. One straight-through Ethernet cable
6. One red crossover Ethernet cable
7. One power cord*
8. One SonicWALL CSM Resource CD
9. Rack mounting hardware
*The power cord is for North America use only.
* Das eingeschlossene Netzkabel ist für Gebrauch in Nordamerikas nur vorgehabt.
Für Europaïsche Union (EU) Kunden, ist ein Netzkabel nicht eingeschlossen.
Note: SonicWALL ADConnector and SonicWALL ViewPoint software for the
SonicWALL CSM are available for download from the SonicWALL Web site
<https://www.mysonicwall.com>.
.
Page 4
What You Need to Provide
• A firewall or security appliance protecting your LAN
• PC or Macintosh computer to act as an out-of-band management station for initial
configuration of the SonicWALL
CSM
• Web browser for accessing the SonicWALL CSM’s Web-based management
interface. The Web browser must support Java and HTTP uploads. Internet Explorer
5.0 or higher or Netscape Navigator 4.7 or higher are recommended.
Important Information You Need
LAN
LAN IP address range:
LAN netmask:
DNS server:
Firewall or Security Appliance
Firewall or router gateway IP address:
Firewall or security appliance management IP address:
mySonicWALL.com Account
This is sensitive information. Store this information carefully.
Username:
Password:
SonicWALL CSM Management Account
This is sensitive information. Store this information carefully.
Username: (default: admin)
Password: (default: password)
SonicWALL CSM Series Appliance Getting Started Guide Page 5
SonicWALL CSM 2200 Front and Back Panels Overview
Power Test Alarm X0 X1 X2 X3/HF-Port
Console LED LED LED Port Port Port
On/Off
Power Switch
Front Panel Feature Description
Console Provides access to command-line interface.
Power LED Indicates the SonicWALL CSM appliance is
powered on.
Test L ED Indicates the SonicWALL CSM appliance is in test mode.
Alarm LED Indicates a critical error or failure.
X0 Port Provides a connection to your LAN.
X1 Port Provides a primary (Ethernet) connection to the Internet.
X2 Port Provides a connection for out-of-band management. This
port has no network connection.
X3/HF-Port Provides an optionally configurable HF (hardware failover)
port. Note: This port is not configurable for other types of
connections.
Back Panel Feature Description
Power Provides power connection using supplied power cord.
On/Off Switch Powers the SonicWALL CSM appliance on and off.
Page 6
Configuring Your SonicWALL CSM
Configuring your SonicWALL CSM comprises the following steps:
1
“Applying Power to the SonicWALL CSM” on page 6
2
“Accessing the SonicWALL Management Interface” on page 7
3
“Configuring Your SonicWALL CSM Using the Setup Wizard” on page 9
4
“Connecting the SonicWALL CSM to Your Network” on page 14
5
“Registering Your SonicWALL CSM” on page 17
6
“Understanding the *Default Policy” on page 21
7
“Verifying the *Default Policy” on page 23
8
“Integrating the SonicWALL CSM with Microsoft Active Directory” on page 24
1
Note: After step 7, the SonicWALL CSM is fully functional, using the built-in *Default
Policy to filter content. Continue to step 8 to further customize your installation.
Applying Power to the SonicWALL CSM
To apply power to your SonicWALL CSM appliance:
1. Plug the power cord into the back panel of the SonicWALL CSM and into an
appropriate power outlet.
2. Turn on the SonicWALL CSM appliance using the On/Off switch located on the back
panel of the appliance.
The Power LED shines green when you activate the power switch. The Test LED and
Alarm LED light up and may blink while the appliance performs a series of diagnostic
tests. When the Test LED and Alarm LED are no longer lit, the SonicWALL
CSM is ready
for configuration.
2
SonicWALL CSM Series Appliance Getting Started Guide Page 7
Accessing the SonicWALL Management Interface
To access the Web-based management interface of the SonicWALL CSM, configure your
out-of-band management station (the computer you are using to manage the SonicWALL
CSM) with the following static TCP/IP address properties:
• IP address: Use an available IP address on the 192.168.168.0/24 subnet. For
example, 192.168.168.20.
• Subnet mask: 255.255.255.0
• DNS settings: You do not need to configure the default gateway or DNS
settings.
For help configuring a static IP address, refer to “Configuring Static IP” on page 33.
When you have configured the static IP address and subnet mask on your management
station, perform the following steps to access the SonicWALL CSM management
interface:
1. Connect one end of the red crossover Ethernet cable to the Ethernet port of the outof-band management station. Connect the other end of the red crossover cable to
the X2 port on the SonicWALL
CSM.
Note: The X2 port is for out-of-band management and has no network connection.
2. Start your Web browser.
Alert: Your Web browser must support Java and HTTP uploads. Internet Explorer 5.0
or higher or Netscape Navigator 4.0 or higher are recommended.
Page 8
3. Enter http://192.168.168.168 in the Location or Address field and press Enter on
your keyboard.
Note: For additional security, you may also access the appliance using HTTPS.
4. In the SonicWALL CSM authentication page, enter admin in the Name field and
password in the Password field and click Login. The Setup Wizard page is
displayed.
5. Unable to connect?
If you cannot connect to the SonicWALL CSM, verify the following configurations:
• Did you correctly enter the SonicWALL CSM X2 management IP address,
http://192.168.168.168, in your Web browser?
• Did you change the TCP/IP network settings on your computer?
• Did you use the red crossover Ethernet cable to connect your out-of-band
management station to the X2 (out-of-band management) port on your
SonicWALL CSM?
SonicWALL CSM Series Appliance Getting Started Guide Page 9
3Configuring Your SonicWALL CSM Using the Setup Wizard
The SonicWALL CSM Setup Wizard page automatically displays after the CSM is
properly powered on and configured for and connected to your management station. The
Setup Wizard allows you to configure the following components:
• Password
•Time zone
• Network setup
To configure your SonicWALL CSM using the Setup Wizard, perform the following steps:
1. The SonicWALL Setup Wizard will automatically launch.
2. The Welcome to the SonicWALL Configuration Wizard screen displays. Confirm
that the radio button next to Setup Wizard is selected and click Next> to continue.
3. In the Change Password screen, you will be prompted to create a new password.
The Old Password is pre-populated. Enter a new password in the New Password
field and re-enter it in the Confirm field. Click Next> to continue. Passwords are
case-sensitive.
Page 10
4. In the Time Zone drop down list, select the correct time zone for your location.
Check the box next to Automatically adjust clock for daylight saving time if you
live in a region that observes Daylight Saving Time. Click Next> to continue.
Note: For best performance, you need to configure the time zone to accurately reflect
geographic location. It is important that you set the time zone correctly before you
register your SonicWALL CSM appliance.
SonicWALL CSM Series Appliance Getting Started Guide Page 11
5. The Network Setup screen will prompt you for information to configure the
SonicWALL
CSM’s X0 and X1 interfaces, which will enable Internet connectivity.
Refer to the table below for a description of the Network Setup fields. After you have
entered the required information, press Next> to continue.
Alert: You must configure the network interfaces before connecting the
SonicWALL CSM to your network. If you have already connected cables to the
X0 and X1 interfaces, disconnect them before continuing this step.
Field Description
SonicWALL WAN IP Address
Enter a single, static IP address to assign to the
SonicWALL CSM appliance. Make sure this address
will not be assigned to any other device.
WAN Subnet Mask
Enter the subnet mask for your network. For example,
255.255.0.0.
Gateway
(Router) Address Enter the default gateway of your network.
DNS Server Address Enter the DNS server address for your network.
DNS Server Address #2
(optional)
Enter a secondary, back-up DNS server to use if the
first one fails.
Page 12
6. The SonicWALL Configuration Summary displays. Click Apply to confirm the
settings. After you click the Apply button, the Storing SonicWALL Configuration
screen displays. It may take up to two minutes while changes are being applied to
your SonicWALL CSM appliance.
7. When the configuration has been stored, you will see the Setup Wizard Complete
screen. Click Close to close the Wizard. Continue to
“Connecting the SonicWALL
CSM to Your Network” on page 14. Keep a hardcopy record of your IP address, user
name and password for your SonicWALL CSM appliance for administrator login.
SonicWALL CSM Series Appliance Getting Started Guide Page 13
8. Disconnect your crossover cable from your management station and the CSM
appliance and refer to
“Connecting the SonicWALL CSM to Your Network” on
page 14.
Note: After initial configuration using the X2 out-of-band management interface, you
can now perform management from the LAN (X0) interface.
Loading...