SonicWALL TZ-205 User Manual

SonicWALL Network Security Appliances
NETWORK SECURITY
TZ 100 / TZ 200 Series
Getting Started Guide
SonicWALL TZ 100/200 series Getting Started Guide
This Getting Started Guide provides instructions for basic installation and configuration of the SonicWALLTZ 100/200 series appliance running SonicOS Enhanced.

Document Contents

This document contains the following sections:
1
Setting Up Your Network - page 1
2
Registering Your Appliance - page 9
3
Enabling Security Services - page 13 Advanced Network Configuration - page 21
4
Advanced Deployments - page 33
5
Support and Training Options - page 59
66
SonicWALL TZ 100/200 Series Getting Started Guide Page i
Page ii

Setting Up Your Network

1
In this Section:
This section provides pre-configuration information. Review this section before setting up your SonicWALL TZ 100/200 series appliance.
System Requirements - page 2
Recording Configuration Information - page 2
Completing the Setup Wizard - page 4
Accessing the Management Interface - page 5
Verifying WAN (Internet) Connectivity - page 6
Connecting Your Network Devices - page 6
Troubleshooting Initial Setup - page7
SonicWALL TZ 100/200 Series Getting Started Guide Page 1

System Requirements

Recording Configuration Information

Before you begin the setup process, verify that you have:
An Internet connection
A Web browser supporting Java Script and HTTP uploads. Supported browsers include the following:
Supported Browsers Browser Version
Number
Internet Explorer 6.0 or higher Firefox 2.0 or higher
Netscape 9.0 or higher Opera 9.10 or higher
for Windows
Safari 2.0 or higher
for MacOS
Record the following setup information to use during the setup process and for future reference:

Registration Information

Serial Number:
Authentication Code:
Record the serial number found on the bottom panel of your SonicWALL appliance.
Record the authentication code found on the bottom panel of your SonicWALL appliance.

Networking Information

LAN IP Address:
. . .
Subnet Mask:
. . .
Ethernet WAN IP Address: . . .
Select a static IP address for your SonicWALL appliance that is within the range of your local subnet. If you are unsure, you can use the default IP address (192.168.168.168).
Record the subnet mask for the local subnet where you are installing your SonicWALL appliance.
Select a static IP address for your Ethernet WAN. This setting only applies if
you are already using an ISP that assigns a static IP address.

Administrator Information

Admin Name:
Admin Password:
Select an administrator account name. (default is admin)
Select an administrator password. (default is password)
Page 2 System Requirements

Primary Internet Service Provider (ISP) Information

Secondary ISP Information

Record the following information about your current ISP:
If you connect via
Cable modem, DSL with a router
Home DSL PPPoE
T1/E1, Static broadband, Cable or DSL with a static IP
Dial-in to a server
You likely use
DHCP No Internet connection information is
Static IP IP Address:
PPTP
Please record
usually required, although some service providers require a host name.
Host Name:
User Name: Password:
Note: Your ISP may require your user name in the format: name@ISP.com
. . . Subnet Mask: . . . Default Gateway
(IP Address): Primary DNS: . . . Secondary DNS
(optional):
Server Address: User Name: Password:
. . .
. . .
If applicable, record the following information about your secondary ISP or WWAN service provider:
If you connect via
Cable modem, DSL with a router
Home DSL PPPoE
T1/E1, Static broadband, Cable or DSL with a static IP
Dial-in to a server
You likely use
DHCP
Static IP
PPTP
Please record
Host Name:
User Name: Password:
IP Address: Subnet Mask: . . . Default Gateway
(IP Address): Primary DNS: . . . Secondary DNS
(optional):
Server Address: User Name: Password:
. . .
. . .
. . .
SonicWALL TZ 100/200 Series Getting Started Guide Page 3

Completing the Setup Wizard

The Setup Wizard takes you through several basic steps to get your SonicWALL TZ 100/200 series appliance configured for your network. Use the Recording Configuration Information section, on page 2 to record your configuration information
as you complete the wizard.
Note: If you are having trouble accessing the Setup Wizard,
see the Troubleshooting the Setup Wizard section, on page 7 of this document.
The Setup Wizard guides you through the following steps: Change Password—Create a new password so that only you
have access to the management interface. The default password is “password.”
Change Time Zone—Select the correct time zone for proper updates and time-based functionality.
WAN Network Mode—Choose your method of connecting to the Internet. This information is provided by your Internet Service Provider (ISP).
WAN Settings—Required for some WAN modes. This information is also provided by your ISP.
LAN Settings—Enter custom local network address settings, or use the default values, which work well for most networks.
LAN DHCP Settings—Allow your SonicWALL TZ 100/200 series appliance to automatically connect other local computers by specifying a DHCP range, or use the default.
Ports Assignment—Configure the extra interfaces (X2-X5) for different network requirements.
At the end of the wizard, a configuration summary displays. It is recommended that you record this information in the Recording Configuration Information section, on page 2 of this guide.
After the Setup Wizard completes, the appliance may reboot. Please wait a few minutes while the SonicWALL appliance reboots to save the updated firmware settings, and then continue with the next section of this guide.
Page 4 Completing the Setup Wizard

Accessing the Management Interface

The computer you use to manage the SonicWALL TZ 100/200 series appliance must be set up to connect using DHCP, or with a static IP address in your chosen subnet. The default subnet for LAN zone ports is 192.168.168.x.
If your SonicWALL TZ 100/200 series appliance required a reboot after completing the Setup Wizard, wait until the LED
is no longer lit before continuing. To access the SonicOS Web-based management interface:
1. Enter the default IP address of http://192.168.168.168, or the LAN IP address you chose during the Setup Wizard, in the Location or Address field of your Web browser.
Tip: If you changed the LAN IP of your SonicWALL during
the Setup Wizard, you may need to restart your computer for changes to take effect.
2. When the SonicWALL Management Login page displays, enter your username and password (default values are “admin” for user name and “password” for password).
If the System > Status page (shown below) displays, then you have correctly configured the SonicWALL TZ 100/200 series appliance to work with the computer on your LAN.
SonicWALL TZ 100/200 Series Getting Started Guide Page 5

Verifying WAN (Internet) Connectivity

Connecting Your Network Devices

Complete the following steps to confirm your Internet connectivity:
1. In the Windows interface, launch your Web browser.
2. Enter “http://www.sonicwall.com” in the address bar and press Enter on the keyboard. The SonicWALL website displays. If you are unable to browse to a Website, see “Troubleshooting Internet Connection” on page 7.
W0 WLAN
W0 WLAN
LAN
WAN
X0 X1
Console
Wireless Clients
LAN
X0 X1
Console
Wireless Clients
X2 X3 X4 X5
WAN
X2 X3 X4 X5
X2 LAN
Connecting Directly
Good for small networks (less than 5 clients) Easy to setup Requires less equipment Each interface may be congured for a dierent zone (LAN, WAN, DMZ)
Power
X2 LAN X3 LAN X4 LAN
Desktop Clients
Connecting With a Hub/Switch
Requires extra equipment (hub/switch) Ability to connect to multiple clients through one port Zone security assignment (LAN, WAN, DMZ) can be applied to many clients on a single interface
Power
Hub/Switch
Desktop Clients
Local Server
Local Server
Page 6 Verifying WAN (Internet) Connectivity

Troubleshooting Initial Setup

This section provides troubleshooting tips for the following initial setup topics:
Troubleshooting the Setup Wizard - p a ge7
Troubleshooting Internet Connection - page 7
Configuring DHCP IP Addressing - page 8

Troubleshooting the Setup Wizard

If you see the login screen, but not the Setup Wizard:
Configure your Web browser to allow pop-ups.
Log into the security appliance using “admin” as the user name and “password” as the password. After you log in, click the Wizards button at the top right.
If you do not verify the following:
Did you correctly enter the SonicWALL TZ 210 series
appliance management IP address, 192.168.168.168, in your Web browser?
Is your computer set to accept DHCP addressing or
set to a static IP address within the 192.168.168.x subnet range? If not, see the Configuring DHCP IP Addressing section, on page 8 for instructions.
Is the Ethernet cable connected between your
computer and the LAN (X0) port on your SonicWALL?
see the login screen or the Setup Wizard,
Do you need to add the SonicWALL appliance to your list of trusted sites in your Web brow se r? Use the default IP address (192.168.168.168) for this.
Is the Test LED on the front panel of your SonicWALL appliance lit? If the Test LED stays lit for more than a few minutes after the initial power on sequence, power cycle the SonicWALL appliance.

Troubleshooting Internet Connection

If you can view the SonicWALL home page, you have configured your SonicWALL TZ 100/200 series appliance correctly. If you cannot view the SonicW ALL home page, try the following:
Renew your management station DHCP address if you changed the IP address/subnet of your network during setup.
Restart your management station to accept new network settings from the DHCP server in the SonicWALL appliance.
Restart your Internet router or modem to communicate with the DHCP client in the SonicWALL appliance.
Log into the SonicOS management interface and launch the Setup Wizard again by clicking the Wizards button in the top right corner of the interface. Ensure that all of your settings are correct.
SonicWALL TZ 100/200 Series Getting Started Guide Page 7

Configuring DHCP IP Addressing

If you are having trouble connecting to the SonicWALL TZ 100/ 200 series appliance, complete the following section based on your Windows operating system flavor. Configure your management computer to obtain an IP address using DHCP.
Windows Vista
1. From the Start menu, right-click Network and select Properties.
2. In the Tasks menu, click Manage network connections. The Network Connections windows displays.
3. Right-click on your Local Area Connection and select Properties.
4. In the list, double-click Internet Protocol Version 4 (TCP/ IP).
5. Select Obtain an IP address automatically and Obtain a DNS address automatically.
6. Click OK, and then click OK again for the settings to take effect.
Windows XP
1. From the Start menu, highlight Connect To and then select Show All Connections.
2. Right-click on your Local Area Connection and select Properties.
3. In the list, double-click Internet Protocol (TCP/IP).
4. Select Obtain an IP address automatically and Obtain a DNS address automatically.
5. Click OK, and then click OK again for the settings to take effect.
Windows 2000
1. From the Windows Start menu, select Settings.
2. Open Network and Dial-up Connections.
3. Click Properties.
4. Highlight Internet Protocol (TCP/IP) and click Properties.
5. Select Obtain an IP address automatically and Obtain a DNS address automatically.
6. Click OK for the settings to take effect.
Page 8 Troubleshooting Initial Setup

Registering Your Appliance

2
In this Section:
This section provides instructions for registering your SonicWALL TZ 100/200 series appliance.
Creating a MySonicWALL Account - page10
Registering and Licensing Your Appliance on MySonicWALL - page 10
Note: Registration is an important part of the setup process and is necessary to receive the benefits of SonicWALL security services,
firmware updates, and technical support.
SonicWALL TZ 100/200 Series Getting Started Guide Page 9

Creating a MySonicWALL Account

A MySonicWALL account is required for product registration. If you already have an account, continue to the Registering and Licensing Your Appliance on MySonicWALL section.
Perform the following steps to create a MySonicWALL account:
1. In your browser, navigate to www.mysonicwall.com.
2. In the login screen, click the Not a registered user?
3. Complete the Registration form and click Register.
4. Verify that the information is correct and click Submit.
5. In the screen confirming that your account was created, click Continue.
link.

Registering and Licensing Your Appliance on MySonicWALL

This section contains the following subsections:
Product Registration - page 10
Security Services and Software - page 11
Activating Security Services and Software - page 12
Trying or Purchasing Security Services - page 12

Product Registration

You must register your SonicWALL security appliance on MySonicWALL to enable full functionality.
1. Login to your MySonicWALL account. If you do not have an account, you can create one at www.mysonicwall.com.
2. On the main page, type the appliance serial number in the Register A Product field. Then click Ne xt.
3. On the My Products page, under Add New Product, type the friendly name for the appliance, select the Product Group if any, type th e authentication code into the appropriate text boxes, and then click Register.
4. On the Product Survey page, fill in the requested information and then click Continue.
Page 10 Creating a MySonicWALL Account

Security Services and Software

The Service Management - Associated Products page in MySonicWALL lists security services, support options, and software, such as ViewPoint, that you can purchase or try with a free trial. For details, click the Info button.
If you purchased an appliance that is pre-licensed, you may be required to enter your activation key here unless current licenses are already indicated in the Status column with either a license key or an expiration date.
The following products and services are available for the SonicWALL TZ 100/200 series appliances:
Gateway Service Bundles:
Client/Server Anti-Virus Suite
Comprehensive Gateway Security Suite
Individual Gateway Services:
Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention
Global Management System
Content Filtering: Premium Edition
High Availability Upgrade
Desktop and Server Software:
Enforced Client Anti-Virus and Anti-Spyware
Global VPN Client
Global VPN Client Enterprise
•ViewPoint
Support Services:
Dynamic Support 8x5
Dynamic Support 24x7
Software and Firmware Updates
SonicWALL TZ 100/200 Series Getting Started Guide Page 11
Loading...
+ 30 hidden pages