SonicWALL 4000 manual Scenario B Allowing WAN DMZ Connection in SonicOS Enhanced

Page 42

Scenario B: Allowing WAN -> DMZ Connection in SonicOS Enhanced

Follow this procedure if you are connecting your SonicWALL SSL VPN 4000 to a SonicWALL UTM appliance running SonicOS Enhanced. If your SonicWALL UTM appliance is running SonicOS Standard, refer to “Scenario A: Allowing WAN -> DMZ Connection in SonicOS Standard” on page 22.

Create a public server access rule for HTTP and HTTPS traffic:

Note: If you are already forwarding HTTP or HTTPS to an internal server, and you only have a single public IP address, you will need to select different (unique) ports of operation for either the existing servers or for the SonicWALL SSL VPN appliance, because both cannot concurrently use the same IP address and port combinations.

1.Select the Firewall > Access Rules page.

2.Click .

3.In the Welcome to the SonicWALL Public Server Wizard page, click Next.

4.In the Step 1: Public Server Type page, select:.

Server Type	Other

Services	Create new group

The Add Service Group dialog box should display.

SonicWALL SSL VPN 4000 Getting Started Guide

Page 41

Image 42

Contents SonicWALL SSL VPN Getting Started Guide SonicWALL Sslvpn 4000 Configuration Steps SonicWALL Sslvpn 4000 Appliance Getting Started GuideCheck Package Contents Any Items Missing? Before You BeginWhat You Need to Begin Network Configuration Information Other InformationScenario B Selecting a SonicWALL Recommended Deployment ScenarioScenario a SSL VPN on a New DMZ Scenario C SSL VPN on the LAN2 Applying Power to the SonicWALL Sslvpn Power LED Test LED Alarm LED Accessing the Management Interface If You Cannot Login to the SSL VPN Configuring Your SonicWALL Sslvpn Select the Users Local Users Setting Your Administrator PasswordAdding a Local User Select Users Local UsersSetting Time Zone Configuring SSL VPN Network SettingsConfiguring DNS / Wins Configuring the X0 IP address for Scenario B and Scenario C Select the Network InterfacesPage Select the Network Routes Configuring a Default RouteAdding a NetExtender Client Route Select the NetExtender Client RoutesScenario a Setting your NetExtender Address RangeRoute Destination Network Subnet Mask 192.168.200.100 toSelect the NetExtender Client Settings Scenario CPage Connecting the SonicWALL Sslvpn Scenario a Connecting the SonicWALL SslvpnScenario B Configuring Your Network Interface Scenario B Connecting the SonicWALL Sslvpn Scenario C Configuring Your Network InterfaceScenario C Connecting the SonicWALL Sslvpn Configuring Your Gateway Device Scenario a Connecting to the SonicWALL UTM ApplianceScenario a SSL VPN on a New DMZ Select the Network Settings Select the Firewall Access RulesScenario a Allowing WAN DMZ Connection in SonicOS Standard Public Server page, perform the following selections Scenario a Allowing DMZ LAN Connection in SonicOS Standard Interface Congratulations page, click Apply to create the access rule Create access to the LAN for NetExtender Select the Network Interfaces Add Service Group dialog box should display Server Private Network Configuration page, enter Click Next SSL VPN Click OK to create the object Click Add to create the rule Scenario B Connecting to the SonicWALL UTM Appliance Scenario B SSL VPN on Existing DMZScenario B Allowing WAN DMZ Connection in SonicOS Standard Public Server page, perform the following selections Scenario B Allowing DMZ LAN Connection in SonicOS Standard IP Address Begin Congratulations page, click Apply to create the access rule Continue to Step Scenario B Allowing WAN DMZ Connection in SonicOS Enhanced Server Private Network Configuration page, enter SonicWALL SSL VPN 4000 Getting Started Guide Scenario B Allowing DMZ LAN Connection in SonicOS Enhanced Click OK to create the object Click OK to create the rule Scenario C Connecting to the SonicWALL UTM Appliance Scenario C Configuring SSL VPN LAN ConnectivityScenario C SSL VPN on the LAN Scenario C Setting Public Server Access in SonicOS Standard Select Public Server RuleScenario C Setting Public Server Access in SonicOS Enhanced Enter SSL VPN in the Server Name field Testing Your SSL VPN Connection Verifying a User Connection from the InternetContinue to Step Registering with MySonicWALL Registering Your SonicWALL SslvpnBefore You Register Creating a MySonicWALL Account from System LicensesSonicWALL SSL VPN 4000 Getting Started Guide Congratulations Click ContinueConfiguring Dynamic DNS Page SonicWALL SSL VPN 4000 Getting Started Guide Configuring a Static IP Address Windows XPWindows Windows NT Open NetworkSelect Specify an IP Address Mounting Guidelines Glossary of Networking Terms Page Lithium Battery Warning Cable ConnectionsCopyright Notice TrademarksSonicWALL SSL VPN 4000 Getting Started Guide Page SonicWALL, Inc