SonicWALL SRA 1200/4200 manual Scenario B SRA on an Existing DMZ

Page 9

Scenario B: SRA on an Existing DMZ

SonicWALL UTM Appliance

X1		E7500
X1	OPT, X2, etc	X0
	OPT, X2, etc
Router	Switch	Switch
Remote Users	X0		Network Nodes
	X0
		SRA 1200
	SRA Appliance
WAN		DMZ	LAN
Scenario C: SRA on the LAN
	Existing Gateway Device
	or Switch / Hub
		LAN Port
Internet
Router
Remote Users		X0
		X0
		SRA 1200
	SRA Appliance
WAN			LAN

SonicWALL SRA 1200/4200 Deployment Scenarios

	Gateway	Deployment		Conditions or
	Device	Scenario		Requirements

SonicOS Enhanced		SRA on a New DMZ	•	OPT or unused interface
3.1 or higher:			•	New DMZ configured for
•	TZ Series			NAT or Transparent Mode
•	PRO Series
•	NSA E-Class	SRA on Existing	•	No unused interfaces
	(SonicOS	DMZ	•	One dedicated interface in
	5.0+)			use as an existing DMZ
•	NSA Series			use as an existing DMZ
•	NSA Series
	(SonicOS	SRA on the LAN	•	No unused interfaces
	5.0+)		•	No dedicated interface for
				a DMZ

SonicOS Standard		SRA on a New DMZ	•	Open OPT or X2 interface
3.1 or higher:			•	New DMZ configured for
•	TZ Series			either NAT or Transparent
•	PRO Series			Mode
			•	Provide SonicWALL deep
				packet inspection security
				services (optional)

		SRA on Existing	•	OPT or X2 interface in use
		DMZ		with an existing DMZ
			•	Provide SonicWALL deep
				packet inspection security
				services (optional)

SonicOS Standard		SRA on the LAN	•	Not planning to use
3.1 or higher:				SonicWALL deep packet
•	TZ Series			inspection security
•	PRO Series			services
SonicWALLs with			•	Interoperability with a
SonicWALLs with				third-party gateway device
legacy firmware				third-party gateway device
Third-Party Gateway
Device

Page 8 Selecting a Deployment Scenario

Image 9

Contents Getting Started Guide SonicWALL SRA 1200/4200 Getting Started Guide Document Contents2 Document Contents This Section Setting Up Your NetworkPackage Contents for the SonicWALL SRA SRA 1200 System RequirementsMissing Items? SRA 4200 System Requirements Administrator Information Recording Configuration InformationNetwork Configuration Information What You Need to BeginScenario Overviews Selecting a Deployment ScenarioScenario B SRA on an Existing DMZ Accessing the Management Interface Applying Power to the SonicWALL SRATroubleshooting Connecting Your Appliance Setting Your Administrator Password Configuring Your SRA 1200/4200Setting the Time Zone Adding a Local UserNavigate to Users Local Users Configuring DNS / Wins Configuring SRA Network SettingsConfiguring the X0 IP Address for Scenario B and Scenario C Click AcceptConfiguring a Default Route Navigate to the NetExtender Client Routes Adding a NetExtender Client Route192.168.200.100 to Setting Your NetExtender Address RangeScenario a Connecting Your Network Interfaces Connecting Your SRA 1200/4200Scenario C Connecting Your Network Interfaces Scenario B Connecting Your Network Interfaces20 Connecting Your SRA 1200/4200 Registering Your Appliance Registering Your SonicWALL SRA Creating a MySonicWALL AccountBefore You Register Product RegistrationService Management Services and LicensingFlexible Per-User Licensing Activating Services and SoftwareTrying or Purchasing Services 26 Services and Licensing Scenario a SRA on a New DMZ Network ConfigurationConnecting to a SonicWALL Security Appliance Adding a New SRA Custom ZoneUn-select the Allow Interface Trust checkbox Enter a name for the service Allowing a WAN SRA ConnectionEnter your Subnet Mask Allowing an SRA LAN Connection Navigate to the Network Address ObjectsClick Name for NetExtender Prerequisites Scenario B SRA on an Existing DMZAllowing WAN DMZ Connection Allowing DMZ LAN Connection Continue to Testing Your Remote Connection on Scenario C SRA on the LAN Configuring SRA LAN ConnectivityName Name for NetExtender Zone Assignment Setting Public Server Access Select the Public Server Wizard option and click NextSelect Http and Https checkboxes, and click Next Verifying a User Connection from the Internet Testing Your Remote Connection40 Testing Your Remote Connection Upgrading Your Appliance Obtaining the Latest SRA SSL VPN Image Exporting a Copy of Your Configuration SettingsUploaded Firmware with Factory Defaults New Uploading a New SRA SSL VPN ImageUploaded Firmware New Resetting the Appliance Using SafeMode Support and Training Options Knowledge Base Customer SupportUser Forums Training Related Documentation SonicWALL Live Product Demos SonicWALL Secure Wireless Network Integrated Solutions Guide Page Safety and Regulatory Information Cable Connections Lithium Battery WarningWeitere Hinweise zur Montage Hinweis zur LithiumbatterieKabelverbindungen Complies with EN 55022 Class a and CISPR22 Class a Declaration of ConformitySWL-1RK23-088 Bmsi Statement Class a Regulatory Information for KoreaTrademarks Copyright NoticeSonicWALL SRA 1200/4200 Getting Started Guide 60 Notes SonicWALL, Inc