SonicWall Network Security Manager on KVM Getting Started Guide
Network Security Manager
on KVM
Getting Started Guide
Contents
Overview 3
About NSM 3
System Requirements 3
Browsers Levels 4
Firewall Types and Firmware 4
Deploying NSM on KVM 6
Prerequisites 6
Preparing to Install KVM 6
Installing KVM 7
Deploying the NSM VM in the Virtual Machine Manager 7
Creating a Virtual Machine via Command Line 8
Creating a Virtual Machine via virt-manager 8
Related Documents 15
SonicWall Support 16
About This Document 17
Network Security Manager Getting Started Guide
Contents
2
Overview
SonicWall’s Network Security Manager is a web-based application that centralizes management for the
SonicWall family of network security appliances.
Topics:
l About NSM
l System Requirements
l Conventions
About NSM
1
SonicWallNetwork Security Manager (NSM) is the next generation firewall management application that
provides a holistic approach to security management. The approach is grounded in the principles of
simplifying and automating various tasks to achieve better security operation and decision-making, while
reducing the complexity and time required. NSM gives you everything you need for firewall management; it
provides comprehensive visibility, granular control and the capacity to govern the entire SonicWall network
security operations with greater clarity, precision and speed. This is all managed from a single, functionpacked interface that can be accessed from any location using a browser-enable device. Firewalls can be
centrally managed to provision all of the network security services with a single-pane-of-glass experience.
NSM offers many salient features:
l On-boarding hundreds of devices with Zero-Touch Deployment easily
l Group devices based on geographic location, business functions or customers with Device Groups
l Enforce consistent security across all your devices with Device Templates
l Make informed decision and policy actions to any threat, quickly and in real time, with detailed
reporting and powerful analytics
System Requirements
Your infrastructure must meet certain minimum requirements for the following:
l Browsers Levels
l Firewall Types and Firmware
Network Security Manager Getting Started Guide
Overview
3
Browsers Levels
NSM is a cloud service that can be accessed over the internet by using one of these supported browsers:
Browser
Supported
Google
Chrome
Apple
Safari
Microsoft
Edge
Mozilla
Firefox
Notes
Latest version
NOTE: This is the preferred browser for the real-time graphics display on the
Dashboard.
Latest version
Latest version
Latest version
Firewall Types and Firmware
The following firewall models can be managed by the Network Security Manager services.
Management Reporting Analytics
Entry Level
Firewalls
SOHO W
TZ Series
SOHO W
TZ Series
SOHO W
TZ Series
NSv 10-100
Mid Range
Firewalls
High-End Firewalls SuperMassive 9000
Zero Touch
Deployment
NSa 2500-6600
NSa 2650-6650
NSv 200-400
12K Series
NSa 9250-9650
NSv 800-1600
SOHO-W with
firmware 6.5.2 or later
TZ Series, NSA
Series, NSa Series
with firmware 6.5.1.1
or later
Not supported for
SOHO, NSv Series or
SuperMassive Series
NSv 10-100
NSa 2500-6600
NSa 2650-6650
NSv 200-400
On-Premises Analytics can
store the logs locally and
with management in CSCMA.
NSv 10-100
NSa 2500-6600
NSa 2650-6650
NSv 200-400
On-Premises Analytics can
store the logs locally and with
management in CSC-MA.
Network Security Manager Getting Started Guide
Overview
4
Additional requirements include:
l Each firewall needs to be licensed with the Comprehensive/Advanced Gateway Security Suite
(CGSS/AGSS).
l The firewalls in the configuration must be a part of a tenant.
l Each firewall must have HTTPS management enabled.
IMPORTANT: For manually added firewalls, if a firewall is behind a NAT device, the HTTPS
management port must be opened to communicate with the firewall. This does not apply to firewalls
that use Zero Touch Deployment.
Network Security Manager Getting Started Guide
Overview
5
Deploying NSM on KVM
Topics:
l Prerequisites
l Preparing to Install KVM
l Installing KVM
l Deploying the NSM VM in the Virtual Machine Manager
Prerequisites
You have to make sure your Linux machine (hardware) supports KVM and download/copy the image file
(e.g. SonicWall_NSM_On-Prem__For_QEMU_VM.img) to your Linux machine.
2
Preparing to Install KVM
Before installing KVM on Ubuntu, you have to verify if the hardware supports KVM. Availability of CPU
virtualization extensions such as AMD-V and Intel-VT is the minimum requirement for installing KVM.
To check whether the Ubuntu system supports virtualization, run the following command. If the outcome is
greater than 0, then it implies that virtualization is supported:
$ egrep -c '(vmx|svm)' /proc/cpuinfo
To check if your system supports KVM virtualization, execute the following command:
$ sudo kvm-ok
If the “kvm-ok” utility is not present on your server, you can install it by running the following command:
$ sudo apt install cpu-checker
Now execute the “kvm-ok” command to probe your system:
$ sudo kvm-ok
INFO: /dev/kvm exists
KVM acceleration can be used
The output clearly indicates that you are ready to proceed with the installation of KVM.
Network Security Manager Getting Started Guide
Deploying NSM on KVM
6
Loading...