SonicWALL 4000 manual Scenario a Allowing WAN DMZ Connection in SonicOS Standard

Page 23

Scenario A: Configuring a DMZ or OPT Port in SonicOS Standard

1.Select the Network > Settings page.

2.Click Configure button for the DMZ or OPT interface.

Select the DMZ in NAT Mode radio button.

3.Enter 192.168.200.2 in the DMZ Private Address field.

4.Enter 255.255.255.0 in the DMZ Subnet Mask field.

5.Click the OK button.

Scenario A: Allowing WAN -> DMZ Connection in SonicOS Standard

Follow this procedure if you are connecting the SonicWALL SSL VPN 4000 to a SonicWALL UTM appliance running SonicOS Standard. If your SonicWALL UTM appliance is running SonicOS Enhanced, skip to “Scenario A: Allowing WAN -> SSL VPN Connection in SonicOS Enhanced” on page 29

9Tip: Leave the default rule to deny any access from WAN to DMZ in place, and use the Public Server Rule Wizard to create an access rule to allow HTTP and HTTPS specifically to the SonicWALL SSL VPN appliance. As you add different servers to the DMZ, you can use the wizard to create access to the new servers while still restricting all other traffic.

Note: If you are allowing HTTP access to your SonicWALL SSL VPN appliance as well as HTTPS access, you need to run the wizard twice to create public server access rules for both HTTP and HTTPS.

Create a public server access rule for HTTPS traffic:

1.Select the Firewall > Access Rules page.

2.Click .

3.In the Welcome to the SonicWALL Network Access Rules Wizard page, click Next.

Page 22

Image 23

Contents SonicWALL SSL VPN Getting Started Guide SonicWALL Sslvpn 4000 Appliance Getting Started Guide SonicWALL Sslvpn 4000 Configuration StepsWhat You Need to Begin Check Package Contents Any Items Missing?Before You Begin Other Information Network Configuration InformationScenario C SSL VPN on the LAN Selecting a SonicWALL Recommended Deployment ScenarioScenario a SSL VPN on a New DMZ Scenario BPower LED Test LED Alarm LED 2 Applying Power to the SonicWALL Sslvpn Accessing the Management Interface If You Cannot Login to the SSL VPN Configuring Your SonicWALL Sslvpn Select Users Local Users Setting Your Administrator PasswordAdding a Local User Select the Users Local UsersConfiguring DNS / Wins Setting Time ZoneConfiguring SSL VPN Network Settings Select the Network Interfaces Configuring the X0 IP address for Scenario B and Scenario CPage Select the NetExtender Client Routes Configuring a Default RouteAdding a NetExtender Client Route Select the Network Routes192.168.200.100 to Setting your NetExtender Address RangeRoute Destination Network Subnet Mask Scenario aScenario C Select the NetExtender Client SettingsPage Scenario a Connecting the SonicWALL Sslvpn Connecting the SonicWALL SslvpnScenario B Configuring Your Network Interface Scenario C Configuring Your Network Interface Scenario B Connecting the SonicWALL SslvpnScenario C Connecting the SonicWALL Sslvpn Scenario a SSL VPN on a New DMZ Configuring Your Gateway DeviceScenario a Connecting to the SonicWALL UTM Appliance Scenario a Allowing WAN DMZ Connection in SonicOS Standard Select the Network SettingsSelect the Firewall Access Rules Public Server page, perform the following selections Scenario a Allowing DMZ LAN Connection in SonicOS Standard Interface Congratulations page, click Apply to create the access rule Create access to the LAN for NetExtender Select the Network Interfaces Add Service Group dialog box should display Server Private Network Configuration page, enter Click Next SSL VPN Click OK to create the object Click Add to create the rule Scenario B Allowing WAN DMZ Connection in SonicOS Standard Scenario B Connecting to the SonicWALL UTM ApplianceScenario B SSL VPN on Existing DMZ Public Server page, perform the following selections Scenario B Allowing DMZ LAN Connection in SonicOS Standard IP Address Begin Congratulations page, click Apply to create the access rule Continue to Step Scenario B Allowing WAN DMZ Connection in SonicOS Enhanced Server Private Network Configuration page, enter SonicWALL SSL VPN 4000 Getting Started Guide Scenario B Allowing DMZ LAN Connection in SonicOS Enhanced Click OK to create the object Click OK to create the rule Scenario C SSL VPN on the LAN Scenario C Connecting to the SonicWALL UTM ApplianceScenario C Configuring SSL VPN LAN Connectivity Select Public Server Rule Scenario C Setting Public Server Access in SonicOS StandardEnter SSL VPN in the Server Name field Scenario C Setting Public Server Access in SonicOS EnhancedVerifying a User Connection from the Internet Testing Your SSL VPN ConnectionContinue to Step Creating a MySonicWALL Account from System Licenses Registering Your SonicWALL SslvpnBefore You Register Registering with MySonicWALLSonicWALL SSL VPN 4000 Getting Started Guide Click Continue CongratulationsConfiguring Dynamic DNS Page SonicWALL SSL VPN 4000 Getting Started Guide Windows Configuring a Static IP AddressWindows XP Select Specify an IP Address Windows NTOpen Network Mounting Guidelines Glossary of Networking Terms Page Cable Connections Lithium Battery WarningTrademarks Copyright NoticeSonicWALL SSL VPN 4000 Getting Started Guide Page SonicWALL, Inc