SonicWALL Security Appliance 3 User Manual

COMPREHENSIVE INTERNET SECURITY™ SSSS SSo n i c WALL Security Ap p l i a n c e SonicOS Standard 3.0 Administrator's Guide

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDEixConfiguring SonicWALL Network Anti-Virus . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE81Network > One-to-One NATCHAPTER10Chapter 10: Configuring One-to-One NATNetwork > One-to-On

82SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 10: Configuring One-to-One NAT4Enter the beginning IP address of the valid address range

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE83Network > One-to-One NAT10Configure the following settings:• Allow • Service - HTTP • Source

84SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 10: Configuring One-to-One NAT

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE85Network > Web ProxyCHAPTER11Chapter 11: Configuring Web Proxy SettingsNetwork > Web ProxyA

86SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 11: Configuring Web Proxy SettingsConfiguring Automatic Web Proxy ForwardingSAlert: The

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE87Network > IntranetCHAPTER12Chapter 12: Configuring Intranet SettingsNetwork > IntranetThe

88SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 12: Configuring Intranet SettingsInstallation1Connect the LAN Ethernet port on the back

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE89Network > RoutingCHAPTER13Chapter 13: Configuring Static RoutesNetwork > RoutingIf you hav

90SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 13: Configuring Static RoutesStatic RoutesStatic Routes are configured when network traf

xSONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDETable of ContentsAppendix A:Using the SonicSetup Diagnostic and Recovery Tool . . . . . . . 313So

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE91Network > RoutingIf you have an Internal (LAN) router on your network with the IP address of

92SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 13: Configuring Static Routes2Select one of the following types of RIP Advertisements: 

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE93Network > ARPCHAPTER14Chapter 14: Configuring Address ResolutionProtocol SettingsNetwork >

94SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 14: Configuring Address Resolution Protocol SettingsStatic ARP EntriesThe Static ARP fea

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE95Network > ARPConsider the following network example:With SonicOS Standard, although it is not

96SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 14: Configuring Address Resolution Protocol SettingsNavigate to the Network > Routing

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE97Network > ARPAfter adding the static ARP entry for the router, mark the checkbox next to the

98SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 14: Configuring Address Resolution Protocol Settings

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE99Network > DHCP ServerCHAPTER15Chapter 15: Configuring the DHCP ServerNetwork > DHCP Server

100SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 15: Configuring the DHCP ServerDHCP Server Lease ScopesThe DHCP Server Lease Scopes tab

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDExiChapter :Chapter : PrefaceCopyright Notice© 2004 SonicWALL, Inc.All rights reserved.Under the co

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE101Network > DHCP Server10Click the DNS/WINS tab to continue configuring the DHCP server. 11If

102SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 15: Configuring the DHCP Server4Enter the device IP address in the Static IP Address fi

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE103Network > Dynamic DNSCHAPTER16Chapter 16: Configuring Dynamic DNSNetwork > Dynamic DNSDyn

104SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 16: Configuring Dynamic DNSAdditional Services offered by Dynamic DNS ProvidersSome com

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE105Network > Dynamic DNSConfiguring Dynamic DNSUsing any Dynamic DNS service begins with settin

106SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 16: Configuring Dynamic DNSSpecify IP Address manually - Allows for the IP address to b

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE107Network > Dynamic DNSDynamic DNS Settings TableThe Dynamic DNS Settings table provides a tab

108SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 16: Configuring Dynamic DNS

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE109PART4Part 4Modem

110SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE

xiiSONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDEPrefaceLimited WarrantySonicWALL, Inc. warrants that commencing from the delivery date to Custo

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE111Modem > StatusCHAPTER17Chapter 17: Viewing Modem StatusModem > StatusThe Status page disp

112SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 17: Viewing Modem StatusModem StatusIn the Modem Status section, the current active net

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE113Modem > SettingsCHAPTER18Chapter 18: Configuring Modem SettingsModem > SettingsThe Modem

114SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 18: Configuring Modem SettingsConfiguring Profile and Modem SettingsTo configure the So

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE115Modem > FailoverCHAPTER19Chapter 19: Configuring Modem FailoverModem > FailoverTo improve

116SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 19: Configuring Modem FailoverBefore you configure your Modem Failover Settings, create

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE117Modem > AdvancedCHAPTER20Chapter 20: Configuring Advanced ModemSettingsModem > AdvancedTh

118SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 20: Configuring Advanced Modem Settings

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE119Modem > Dialup ProfilesCHAPTER21Chapter 21: Configuring Modem DialupPropertiesModem > Dia

120SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 21: Configuring Modem Dialup PropertiesConfiguring a Dialup ProfileIn the Modem > Di

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDExiiiAbout this GuideAbout this GuideWelcome to the SonicWALL SonicOS Standard 3.0 Administrator’s

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE121Modem > Dialup Profiles > Modem Profile Configuration8Click the ISP Address tab.9In the I

122SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 21: Configuring Modem Dialup Properties• Dial on Data - Using Dial on Data requires tha

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE123Modem > Dialup Profiles > Modem Profile Configuration20Click on the Schedule tab.21Select

124SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 21: Configuring Modem Dialup PropertiesThe next line has OK as the expected string, and

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE125PART5Part 5Wireless

126SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE127CHAPTER22Chapter 22: Setting Up the WLAN Using theWireless Wizard and MonitoringYour WLANThe So

128SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 22: Setting Up the WLAN Using the Wireless Wizard and Monitoring Your WLANConsideration

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE129Optimal Wireless Performance RecommendationsOptimal Wireless Performance Recommendations• Place

130SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 22: Setting Up the WLAN Using the Wireless Wizard and Monitoring Your WLANWireless Node

xivSONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDEPrefaceOrganization of this GuideThe SonicOS Standard 3.0 Administrator’s Guide organization is

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE131Using the Wireless WizardUsing the Wireless WizardYou can use the Wireless Wizard to quickly an

132SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 22: Setting Up the WLAN Using the Wireless Wizard and Monitoring Your WLANWLAN 802.11b

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE133Using the Wireless WizardWiFiSec - VPN Client User Authentication5Create a new user with VPN Cl

134SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 22: Setting Up the WLAN Using the Wireless Wizard and Monitoring Your WLANWireless Conf

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE135Wireless > StatusCongratulations9Congratulations! You have successfully completed configurat

136SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 22: Setting Up the WLAN Using the Wireless Wizard and Monitoring Your WLANWLAN Settings

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE137Wireless > StatusWLAN StatisticsStation StatusThe Station Status table displays information

138SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 22: Setting Up the WLAN Using the Wireless Wizard and Monitoring Your WLAN• Associated

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE139Wireless > SettingsCHAPTER23Chapter 23: Configuring Wireless SettingsWireless > SettingsT

140SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 23: Configuring Wireless SettingsNote: WPA support is only available in Access Point M

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDExvAbout this GuidePart 9 UsersThis part explains how to create and manage a user database on the S

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE141Wireless > Settings• 802.11g Only - If your wireless network consists only of 802.11g client

142SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 23: Configuring Wireless SettingsConfiguring a Secure Wireless BridgeWhen switching fro

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE143Wireless > SettingsNetwork Settings for the Example NetworkWireless Bridging (without WiFiSe

144SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 23: Configuring Wireless SettingsReferring to our example network, the Access Point TZ

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE145Wireless > Settings7Click OK to close the window, and then click Apply for the settings to t

146SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 23: Configuring Wireless Settings

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE147Wireless > WEP/WPA EncryptionCHAPTER24Chapter 24: Configuring WEP and WPAEncryptionWireless

148SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 24: Configuring WEP and WPA EncryptionWEP Encryption SettingsOpen-system authentication

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE149Wireless > WEP/WPA EncryptionWPA-PSK SettingsEncryption Mode: In the Authentication Type fie

150SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 24: Configuring WEP and WPA EncryptionWPA Settings: • Cypher Type: select TKIP. Tempora

xviSONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDEPrefaceGuide ConventionsThe following Conventions used in this guide are as follows:Icons Used

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE151Wireless > AdvancedCHAPTER25Chapter 25: Configuring Advanced WirelessSettingsWireless > A

152SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 25: Configuring Advanced Wireless SettingsWireless Client Communications1Enter the numb

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE153Wireless > Advancedantenna should then be connected to the RP-TNC type connector near the po

154SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 25: Configuring Advanced Wireless Settings

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE155Wireless > MAC Filter ListCHAPTER26Chapter 26: Configuring the MAC Filter ListWireless >

156SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 26: Configuring the MAC Filter List5Click OK to add the MAC address. Once the MAC addre

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE157Wireless > IDSCHAPTER27Chapter 27: Configuring Wireless IDSWireless > IDSWireless Intrusi

158SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 27: Configuring Wireless IDSAccess Point IDSWhen the Radio Role of the TZ 50 Wireless/T

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE159Wireless > IDSActive scanning occurs when the TZ 50 Wireless/TZ 150 Wireless/TZ 170 Wireless

160SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 27: Configuring Wireless IDS

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDExviiSonicWALL Technical SupportSonicWALL Technical SupportFor timely resolution of technical suppo

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE161PART6Part 6Wireless Guest Services

162SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE163WGS > StatusCHAPTER28Chapter 28: Viewing Wireless Guest ServicesStatusWireless Guest Service

164SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 28: Viewing Wireless Guest Services Status

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE165WGS > SettingsCHAPTER29Chapter 29: ConfiguringWireless Guest ServicesWireless Guest Services

166SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 29: Configuring Wireless Guest ServicesBypass Guest AuthenticationBypass Guest Authenti

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE167WGS > SettingsEnable SMTP RedirectEnable SMTP Redirect causes SMTP traffic coming in from a

168SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 29: Configuring Wireless Guest Servicessupernetting (e.g. entering 192.168.0.0/255.255.

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE169WGS > Settings4Select Specify URLs for custom content if you have graphics or text available

170SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 29: Configuring Wireless Guest Services Enable Account: Check this for all guest accou

xviiiSONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDEPrefaceCurrent DocumentationCheck the SonicWALL documentation Web site for that latest versio

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE171WGS > AccountsCHAPTER30Chapter 30: Managing Wireless GuestAccountsWireless Guest Services (W

172SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 30: Managing Wireless Guest AccountsAutomatically Generating Guest AccountsYou can gene

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE173WGS > AccountsManually Configuring Wireless GuestsTo configure new wireless guest accounts,

174SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 30: Managing Wireless Guest AccountsFlexible Default RoutePreviously, network traffic f

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE175WGS > AccountsTo configure routing on the TZ 50 Wireless/TZ 150 Wireless/TZ 170 Wireless to

176SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 30: Managing Wireless Guest AccountsThe example above describes a moderately complex ne

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE177PART7Part 7Firewall

178SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE179Network Access Rules OverviewCHAPTER31Chapter 31: Configuring Network AccessRulesNetwork Access

180SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 31: Configuring Network Access RulesUsing Bandwidth Management with Access RulesBandwid

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDEiChapter : Table of ContentsTable of Contents . . . . . . . . . . . . . . . . . . . . . . . . . .

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE1PART1Part 1Introduction

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE181Firewall > Access RulesNavigating and Sorting the Access Rules Table EntriesThe Access Rules

182SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 31: Configuring Network Access Rules3You can add an optional text in the Comment field.

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE183Firewall > Access Rules5Select Allow action to allow the service to the network, or select D

184SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 31: Configuring Network Access Rulesaddress, enter “*” in the IP Address Begin field. B

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE185Firewall > Access Rules5If you want to define the source IP addresses that are affected by t

186SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 31: Configuring Network Access Rules14Click the Bandwidth tab. 15Select Bandwidth Manag

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE187Firewall > Access RulesRule ExamplesThe following examples illustrate methods for creating N

188SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 31: Configuring Network Access Rules

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE189Access Rules > AdvancedCHAPTER32Chapter 32: Configuring Advanced RuleOptionsAccess Rules >

190SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 32: Configuring Advanced Rule OptionsDetection PreventionEnable Stealth ModeBy default,

2SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE191Firewall > ServicesCHAPTER33Chapter 33: Configuring Custom ServicesFirewall > ServicesSer

192SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 33: Configuring Custom Services1Click Add. The Add Service window is displayed.2Enter t

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE193Firewall > VoIPCHAPTER34Chapter 34: Configuring VoIPFirewall > VoIPThe SonicWALL security

194SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 34: Configuring VoIPH.323 H.323 is a comprehensive suite of protocols for voice, video,

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE195Firewall > VoIPConfiguring the VoIP SettingsThe SonicWALL security appliance allows VoIP pho

196SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 34: Configuring VoIP

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE197Firewall > Connections MonitorCHAPTER35Chapter 35: Monitoring Active FirewallConnectionsFire

198SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 35: Monitoring Active Firewall ConnectionsSetting Filter LogicBy default, the SonicOS f

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE199PART8Part 8VPN

200SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE

3SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER1Chapter 1: IntroductionWhat’s New in SonicOS Standard 3.0• Real-time Gateway Anti Virus (

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE201SonicWALL VPN Options OverviewCHAPTER36Chapter 36: Configuring VPN SettingsSonicWALL VPN Option

202SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 36: Configuring VPN SettingsVPN > SettingsThe VPN > Settings page provides the So

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE203Configuring GroupVPN Policy on the SonicWALLNavigating and Sorting the VPN Policies EntriesThe

204SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 36: Configuring VPN SettingsConfiguring IKE Preshared SecretTo edit the default setting

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE205Configuring GroupVPN Policy on the SonicWALLIn the IKE (Phase 1) Proposal section, select the f

206SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 36: Configuring VPN Settings Forward Packets to Remote VPNs - allows the remote VPN tu

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE207Configuring GroupVPN Policy on the SonicWALL Single Session - The user will be prompted for us

208SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 36: Configuring VPN SettingsConfiguring GroupVPN with IKE 3rd Party CertificatesTo conf

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE209Configuring GroupVPN Policy on the SonicWALL6Click on the Proposals tab.7In the IKE (Phase 1) P

210SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 36: Configuring VPN Settings9Click on the Advanced tab and select any of the following

4SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 1: IntroductionNote: Registration Admission Status (RAS) and Internet Locator Service (I

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE211Configuring GroupVPN Policy on the SonicWALL VPN Terminated at the LAN, OPT/DMZ/WLAN, or LAN/O

212SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 36: Configuring VPN Settings DHCP Lease or Manual Configuration - When the GVC connect

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE213Site to Site VPN ConfigurationsExport a GroupVPN Client PolicyIf you want to export the Global

214SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 36: Configuring VPN Settings• Branch Office (Gateway to Gateway) - A SonicWALL is confi

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE215Site to Site VPN ConfigurationsIf Preshared Secret, Shared Secret:___________________Phase 1 DH

216SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 36: Configuring VPN SettingsCreating a Typical IKE Preshared Secret VPN PolicyYou can c

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE217Site to Site VPN ConfigurationsQualified Domain Name of the remote destination in the IPSec Gat

218SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 36: Configuring VPN SettingsQualified Domain Name of the remote destination in the IPSe

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE219Site to Site VPN ConfigurationsQualified Domain Name of the remote destination in the IPSec Gat

220SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 36: Configuring VPN SettingsSelect an encryption method from the Encryption list for th

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE5SonicWALL Management InterfaceNavigating the Management InterfaceNavigating the SonicWALL managem

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE221Site to Site VPN ConfigurationsConfiguring a VPN Policy IKE with Preshared SecretTo manually co

222SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 36: Configuring VPN Settings8Click the Proposals tab.9In the IKE (Phase 1) Proposal sec

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE223Site to Site VPN Configurations11Click the Advanced tab. Select any optional configuration opti

224SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 36: Configuring VPN SettingsVPNs check box.Traffic can travel from a branch office to a

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE225Site to Site VPN Configurationscan be used as a valid key. If this key is used, it must also be

226SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 36: Configuring VPN Settings3Type a Name for the Security Association in the Name field

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE227Site to Site VPN Configurations11Click the Advanced tab. Select any optional configuration opti

228SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 36: Configuring VPN Settings

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE229VPN > AdvancedCHAPTER37Chapter 37: Configuring Advanced VPNSettingsVPN > AdvancedThe VPN

230SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 37: Configuring Advanced VPN Settingskeep alive that acts as a “heartbeat” sent by the

6SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 1: IntroductionStatus BarThe Status bar at the bottom of the management interface window

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE231VPN > AdvancedVPN Bandwidth ManagementBandwidth management is a means of allocating bandwidt

232SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 37: Configuring Advanced VPN Settings

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE233VPN > DHCP over VPNCHAPTER38Chapter 38: Configuring DHCP Over VPNVPN > DHCP over VPNThe V

234SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 38: Configuring DHCP Over VPNConfiguring the Central Gateway for DHCP Over VPNTo config

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE235VPN > DHCP over VPNConfiguring DHCP over VPN Remote Gateway1Select Remote Gateway from the D

236SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 38: Configuring DHCP Over VPNDevice Configuration 1To configure devices on your LAN, cl

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE237VPN > L2TP ServerCHAPTER39Chapter 39: Configuring L2TP Server SettingsVPN > L2TP ServerYo

238SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 39: Configuring L2TP Server SettingsTo enable L2TP Server functionality on the SonicWAL

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE239VPN > L2TP ServerCurrently Active L2TP Sessions• User Name - the user name assigned in the l

240SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 39: Configuring L2TP Server Settings

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE7SonicWALL Management InterfaceThe table navigation bar includes buttons for moving through table

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE241Digital Certificates OverviewCHAPTER40Chapter 40: Managing CertificatesDigital Certificates Ove

242SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 40: Managing CertificatesVPN > Local CertificatesAfter a certificate is signed by th

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE243VPN > Local CertificatesDelete This CertificateTo delete the certificate, click Delete This

244SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 40: Managing CertificatesVPN > CA CertificatesImporting CA Certificates into the Son

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE245VPN > CA CertificatesCertificate Revocation List (CRL)A Certificate Revocation List (CRL) is

246SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 40: Managing Certificates

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE247PART9Part 9Users

248SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE249User Level Authentication OverviewCHAPTER41Chapter 41: Viewing User Status andConfiguring User

250SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 41: Viewing User Status and Configuring User AuthenticationActive User SessionsThe Acti

8SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 1: Introduction

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE251Users > SettingsGlobal User SettingsThe settings listed below apply to all users when authen

252SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 41: Viewing User Status and Configuring User Authenticationfield, then click Add. To ad

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE253Users > SettingsConfiguring RADIUS AuthenticationTo enable the SonicWALL security appliance

254SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 41: Viewing User Status and Configuring User Authentication11Click the RADIUS Users tab

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE255Users > Settings14Type in a valid user name in the User field, and the password in the Passw

256SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 41: Viewing User Status and Configuring User Authentication

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE257Users > Local UsersCHAPTER42Chapter 42: Configuring Local UsersUsers > Local UsersAdd loc

258SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 42: Configuring Local UsersAdding a Local User1Create a user name and type it in the Us

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE259PART10Part 10Security Services

260SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE

9SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER2Chapter 2: Basic SonicWALL SecurityAppliance SetupSonicWALL Security Appliance Configurat

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE261SonicWALL Security ServicesCHAPTER43Chapter 43: Managing SonicWALL SecurityServicesSonicWALL Se

262SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 43: Managing SonicWALL Security ServicesmySonicWALL.commySonicWALL.com delivers a conve

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE263Security Services > SummarySecurity Services > SummaryThe Security Services > Summary

264SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 43: Managing SonicWALL Security ServicesIf Your SonicWALL Security Appliance is Not Reg

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE265SonicWALL Content Filtering ServiceCHAPTER44Chapter 44: Configuring SonicWALL ContentFiltering

266SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 44: Configuring SonicWALL Content Filtering ServiceSecurity Services > Content Filte

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE267Security Services > Content Filter1Click the SonicWALL Content Filtering Subscription link o

268SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 44: Configuring SonicWALL Content Filtering ServiceContent Filter TypeThere are three t

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE269Configuring SonicWALL Filter PropertiesTrusted DomainsTrusted Domains can be added to enable co

270SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 44: Configuring SonicWALL Content Filtering ServiceCustom ListThe Custom List page allo

10SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 2: Basic SonicWALL Security Appliance SetupIf You Have DSLYour ISP is probably using PPP

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE271Configuring SonicWALL Filter PropertiesDisable all Web traffic except for Allowed Domains When

272SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 44: Configuring SonicWALL Content Filtering ServiceConsentThe Consent tab allows you to

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE273Configuring SonicWALL Filter PropertiesMandatory Filtered IP AddressesConsent Page URL (mandato

274SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 44: Configuring SonicWALL Content Filtering Service

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE275SonicWALL Network Anti-Virus OverviewCHAPTER45Chapter 45: Managing SonicWALL NetworkAnti-Virus

276SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 45: Managing SonicWALL Network Anti-Virus and E-Mail Filter ServicesSecurity Services &

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE277Security Services > Anti-VirusSAlert: You must have a mySonicWALL.com account and your Sonic

278SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 45: Managing SonicWALL Network Anti-Virus and E-Mail Filter ServicesSecurity Services &

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE279SonicWALL Gateway Anti-Virus OverviewCHAPTER46Chapter 46: Managing SonicWALLGateway Anti-Virus

280SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 46: Managing SonicWALL Gateway Anti-Virus ServiceSonicWALL Gateway Anti-Virus/Intrusion

iiSONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDETable of ContentsRegistering Your SonicWALL Security Appliance . . . . . . . . . . . . . . . .

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE11Accessing the SonicWALL Security Appliance Management InterfaceAccessing the SonicWALL Security

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE281SonicWALL Gateway Anti-Virus OverviewActivating SonicWALL Gateway Anti-VirusIf you do not have

282SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 46: Managing SonicWALL Gateway Anti-Virus ServiceActivating SonicWALL Gateway Anti-Viru

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE283Configuring SonicWALL Gateway Anti-VirusConfiguring SonicWALL Gateway Anti-VirusAfter activatin

284SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 46: Managing SonicWALL Gateway Anti-Virus Service

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE285SonicWALL Intrusion Prevention ServiceCHAPTER47Chapter 47: Managing SonicWALLIntrusion Preventi

286SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 47: Managing SonicWALL Intrusion Prevention Servicemaintains a current and robust signa

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE287SonicWALL Intrusion Prevention ServiceHow SonicWALL’s Deep Packet Inspection Architecture Works

288SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 47: Managing SonicWALL Intrusion Prevention ServiceSecurity Services > Intrusion Pre

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE289Security Services > Intrusion PreventionActivating the SonicWALL IPS FREE TRIALTo try a FREE

290SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 47: Managing SonicWALL Intrusion Prevention Service

12SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 2: Basic SonicWALL Security Appliance SetupSonicWALL TZ 50 Wireless/TZ 150 Wireless/TZ 1

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE291SonicWALL Global Security ClientCHAPTER48Chapter 48: Managing SonicWALLGlobal Security ClientSo

292SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 48: Managing SonicWALL Global Security ClientGlobal Security Client Features• Multi-Pro

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE293SonicWALL Global Security ClientActivating SonicWALL Global Security ClientIf you have an Activ

294SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 48: Managing SonicWALL Global Security Client

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE295PART11Part 11Log

296SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE297SonicOS Log Event Messages OverviewCHAPTER49Chapter 49: Viewing Log EventsSonicOS Log Event Mes

298SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 49: Viewing Log EventsLog > ViewThe SonicWALL security appliance maintains an Event

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE299Log > ViewSonicOS Log EntriesEach log entry contains the date and time of the event and a br

300SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 49: Viewing Log Events

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE13Using the SonicWALL Setup Wizard4Choose Static IP and click Next.5Enter the information provided

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE301Log > CategoriesCHAPTER50Chapter 50: Specifying Log CategoriesLog > CategoriesYou can def

302SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 50: Specifying Log CategoriesLogs Java, ActiveX, and Cookies blocked by the SonicWALL s

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE303Log > AutomationCHAPTER51Chapter 51: Configuring Log AutomationLog > AutomationClick Log,

304SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 51: Configuring Log AutomationE-mail• Mail Server - to e-mail log or alert messages, en

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE305Log > AutomationSyslog Event Redundancy Filter (seconds) - The Syslog Event Redundancy Filte

306SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 51: Configuring Log Automation

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE307Log > Name ResolutionCHAPTER52Chapter 52: Configuring Name ResolutionLog > Name Resolutio

308SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 52: Configuring Name ResolutionSelecting Name Resolution SettingsThe security appliance

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE309Log > ReportsCHAPTER53Chapter 53: Generating and ViewingLog ReportsLog > ReportsThe Sonic

310SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 53: Generating and Viewing Log ReportsClick Reset Data to clear the report statistics a

14SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 2: Basic SonicWALL Security Appliance Setup9Tip: The SonicWALL security appliance LAN IP

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE311Log > ViewPointLog > ViewPointSonicWALL ViewPointSonicWALL ViewPoint is a software soluti

312SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 53: Generating and Viewing Log Reports

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE313SonicSetupAPPENDIXAAppendix BAUsing the SonicSetup Diagnosticand Recovery ToolSonicSetupSonicSe

314SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDEAPPENDIX A: Using the SonicSetup Diagnostic and Recovery ToolIntroduction and DiscoveryAfter es

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE315DiagnosticsDiagnosticsDiagnostics include hardware and software components, and it runs in two

316SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDEAPPENDIX A: Using the SonicSetup Diagnostic and Recovery ToolDiagnostic ResultsAfter the diagno

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE317SonicOS RecoveryIf the SonicROM image fails to transfer, a failure notification page is display

318SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDEAPPENDIX A: Using the SonicSetup Diagnostic and Recovery ToolRestoring Factory DefaultsIf the S

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE319Address SynchronizationAddress SynchronizationThe SonicWALL should be fully operational at this

320SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDEAPPENDIX A: Using the SonicSetup Diagnostic and Recovery Tool

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE15Using the SonicWALL Setup Wizard3Select your local time zone from the Time Zone menu. Click Next

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE321SonicWALL SafeModeAPPENDIXBAppendix BAResetting the SonicWALL SecurityAppliance Using SafeModeS

322SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDEAPPENDIX B: Resetting the SonicWALL Security Appliance Using SafeMode3The Test light starts bli

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE323Upgrading SonicOS FirmwareUpgrading SonicOS FirmwareIn SafeMode, you can upload newer versions

324SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDEAPPENDIX B: Resetting the SonicWALL Security Appliance Using SafeMode

325SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDEChapter C: IndexNumerics802.11g 127Aaccess point status 136access rulesbandwidth management 180

Index326SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDEupdating firmware 48flexible default route 174fragmentation threshold 153fragments 137GGat

Index SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE327secure access point 18, 20secure wireless bridge 18security servicesactivating a free tri

Index328SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDEhexadecimal. 148WEP key mode 148WGS, see wireless guest servicesWiFiSec 127, 136WiFiSec en

© 2004 SonicWALL, I n c . SonicWALL is a registered trademark of SonicWALL, I n c . Other product and company names mentioned herein may bet r ademark

16SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 2: Basic SonicWALL Security Appliance Setup3Select your local time from the Time Zone me

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE17Using the SonicWALL Setup WizardConfiguring the TZ 170 SP using the Setup WizardConfiguring the

18SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 2: Basic SonicWALL Security Appliance SetupConfiguring the TZ 50 Wireless/TZ 150 Wireles

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE19Using the SonicWALL Setup WizardConfiguring WAN Settings7If you selected Static IP address, you

20SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 2: Basic SonicWALL Security Appliance SetupConfiguring the TZ 50 Wireless/TZ 150 Wireles

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDEiiiPing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE21Using the SonicWALL Setup WizardConfiguring WiFiSec - VPN Client User Authentication8WiFiSec and

22SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 2: Basic SonicWALL Security Appliance Setup PPPoE, if your ISP provided you with client

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE23Using the SonicWALL Setup WizardChanging the Password3Type a new password in the New Password fi

24SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 2: Basic SonicWALL Security Appliance SetupCongratulations!When the settings are applied

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE25Registering Your SonicWALL Security Appliance1In the Security Services section on the System >

26SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 2: Basic SonicWALL Security Appliance Setup Network Anti-Virus - protects computers on

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE27PART2Part 2System

28SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE29System > StatusCHAPTER3Chapter 3: Viewing System StatusInformationSystem > StatusThe Statu

30SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 3: Viewing System Status InformationWizardsThe Wizards button on the System > Status

ivSONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDETable of ContentsChapter 13:Configuring Static Routes. . . . . . . . . . . . . . . . . . . . . .

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE31System > Status• Registration Code - the registration code is generated when your SonicWALL s

32SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 3: Viewing System Status InformationNetwork InterfacesThe Network Interfaces displays th

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE33System > LicensesCHAPTER4Chapter 4: System > LicensesSystem > LicensesThe System > L

34SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 4: System > LicensesNode License StatusNode licensing can be monitored and controlled

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE35System > LicensesYou can clicking on the icon in the Exclude column of the Currently Licensed

36SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 4: System > LicensesManage Security Services OnlineTo activate, upgrade, or renew ser

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE37System > LicensesFrom a Computer Connected to the Internet1Make sure you have an account at h

38SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 4: System > Licenses

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE39System > AdministrationCHAPTER5Chapter 5: Using System AdministrationSystem > Administrati

40SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 5: Using System AdministrationFirewall NameThe Firewall Name uniquely identifies the Son

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDEvPART 5: WirelessChapter 22:Setting Up the WLAN Using the Wireless Wizard and Monitoring Your WLAN

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE41System > AdministrationWeb Management SettingsThe SonicWALL security appliance can be managed

42SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 5: Using System AdministrationAdvanced ManagementEnable SNMPSNMP (Simple Network Managem

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE43System > AdministrationEnable Management Using SonicWALL GMSTo enable the SonicWALL security

44SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 5: Using System Administration

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE45System > TimeCHAPTER6Chapter 6: Setting System TimeSystem > TimeThe System > Time page

46SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 6: Setting System TimeSetting the SonicWALL Security Appliance TimeTo select your time z

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE47System > SettingsCHAPTER7Chapter 7: Configuring System SettingsSystem > SettingsThe System

48SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 7: Configuring System SettingsExport Settings To export configuration settings from the

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE49System > SettingsFirmware Management SettingsThe Firmware Management table has the following

50SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 7: Configuring System SettingsFirmware ManagementThe Firmware Management table has the f

viSONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDETable of ContentsCustomize Login Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE51System > DiagnosticsCHAPTER8Chapter 8: Performing Diagnostic Testsand Restarting the SonicWAL

52SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 8: Performing Diagnostic Tests and Restarting the SonicWALL Security ApplianceTech Suppo

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE53System > DiagnosticsDiagnostic ToolsYou select the diagnostic tool from the Diagnostic Tools

54SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 8: Performing Diagnostic Tests and Restarting the SonicWALL Security ApplianceCheck the

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE55System > Diagnostics2The SonicWALL security appliance queries the DNS Server and displays the

56SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 8: Performing Diagnostic Tests and Restarting the SonicWALL Security ApplianceTo 204.71.

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE57System > DiagnosticsPingThe Ping test bounces a packet off a machine on the Internet and retu

58SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 8: Performing Diagnostic Tests and Restarting the SonicWALL Security ApplianceSystem >

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE59PART3Part 3Network

60SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDEviiVPN > Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE61Network > SettingsCHAPTER9Chapter 9: Configuring Network SettingsNetwork > SettingsThe Net

62SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 9: Configuring Network SettingsSetup WizardThe Setup Wizard button accesses the SonicWAL

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE63Network > SettingsInterface Options by SonicWALL Security ApplianceDNS SettingsDNS (Domain Na

64SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 9: Configuring Network SettingsConfiguring the WAN InterfaceThe Mode menu in the Interfa

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE65Configuring the WAN InterfaceConfiguration ExampleYour ISP has given you a public IP address of

66SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 9: Configuring Network SettingsConfiguring NAT EnabledIf your ISP provides a static IP a

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE67Configuring the WAN InterfaceConfiguring NAT with PPPoE ClientThe SonicWALL security appliance c

68SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 9: Configuring Network SettingsConfiguring NAT with PPTP Client If your Internet connect

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE69Configuring the WAN InterfaceThe WAN Interface Settings information at the top of the Ethernet p

70SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 9: Configuring Network SettingsConfiguring the LAN InterfaceBasic LAN Configuration1Clic

viiiSONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDETable of ContentsPART 9: UsersChapter 41:Viewing User Status and Configuring User Authenticati

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE71Configuring the OPT InterfaceConfiguring Ethernet SettingsThe Ethernet tab in the LAN Properties

72SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 9: Configuring Network SettingsConfiguring Transparent ModeTransparent Mode requires val

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE73Configuring the DMZ InterfaceConfiguring NAT ModeNAT Enabled mode gives the OPT interface a sing

74SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 9: Configuring Network SettingsConfiguring Transparent ModeTransparent Mode requires val

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE75Configuring the Modem Interface (TZ 170 SP)Configuring NAT ModeNAT Mode gives the DMZ interface

76SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 9: Configuring Network SettingsSettingsModem SettingsSpeaker Volume - choose On or Off f

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE77Configuring the Modem Interface (TZ 170 SP)FailoverThe Failover page in the Modem Setting window

78SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 9: Configuring Network Settingsvalue. In this case, the WAN failover only occurs when lo

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE79Configuring WLAN Properties (TZ 50 Wireless/TZ 150 Wireless/TZ 170 Wireless)Configuring WLAN Pro

80SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDECHAPTER 9: Configuring Network Settings• SSID: Enter a recognizable string for the SSID for the