SonicWALL 3500, NSA 5000, 4500 manual Configuring a Wireless Zone

Page 52

4.In the 802.11a Radio and 802.11a Adv tabs, configure the settings for the operation of the 802.11a radio bands. The SonicPoint has two separate radios built in. Therefore, it can send and receive on both the 802.11a and 802.11g bands at the same time.

5.The settings in the 802.11a Radio and 802.11a Advanced tabs are similar to the settings in the 802.11g Radio and 802.11g Advanced tabs.

6.When finished, click OK.

Configuring a Wireless Zone

You can configure a wireless zone on the Network > Zones page. Typically, you will configure the WLAN zone for use with SonicPoints.

1.On the Network > Zones page in the WLAN row, click the icon in the Configure column.

2.In the Edit Zone dialog box on the General tab, the Allow Interface Trust setting automates the creation of Access Rules to allow traffic to flow between the interfaces of a zone instance. For example, if the WLAN zone has both the X2 and X3 interfaces assigned to it, checking Allow Interface Trust on the WLAN zone creates the necessary Access Rules to allow hosts on these interfaces to communicate with each other.

3.Select the checkboxes for the security services to enable on this zone. Typically you would enable Gateway Anti- Virus, IPS, and Anti-Spyware. If you are running SonicWALL Client Anti-Virus, select Enable Client AV Enforcement Service.

4.Click the Wireless tab.

In the Wireless Settings section, select Only allow traffic generated by a SonicPoint to allow only traffic from SonicWALL SonicPoints to enter the WLAN zone interface. This allows maximum security on your WLAN. Uncheck this option if you want to allow any traffic on your WLAN zone regardless of whether or not it is from a wireless connection. Uncheck Only allow traffic generated by a SonicPoint and use the zone on a wired interface to allow guest services on that interface.

Select SSL VPN Enforcement to require that all traffic that enters into the WLAN zone be authenticated through a SonicWALL SSL VPN appliance.

Note: SSL VPN Enforcement allows the added security of one-time passwords when using a SonicWALL SSL VPN appliance.

In the SSL VPN Server list, select an address object to direct traffic to the SonicWALL SSL VPN appliance.

In the SSL VPN Service list, select the service or group of services that you want to allow for clients authenticated through the SSL VPN.

If your wireless network is already running WiFiSec, you can select WiFiSec Enforcement to require that all traffic that enters into the WLAN zone interface be either IPsec traffic, WPA traffic, or both.

SonicWALL NSA 5000/4500/3500 Getting Started Guide Page 51

Image 52
Contents Getting Started Guide Document Contents SonicWALL NSA Getting Started GuideBack SonicWALL NSA SeriesPre-Configuration Tasks This SectionCheck Package Contents Obtain Configuration Information Administrator InformationObtain Internet Service Provider ISP Information Registration InformationFront Panel Power Supply Back Panel8 The Back Panel Registering Your Appliance on mysonicwall.com Before You Register Registering and Licensing Your Appliance on mysonicwall.com Product RegistrationLicensing Security Services and Software Service BundlesGateway Services Support ServicesSonicWALL NSA 5000/4500/3500 Getting Started Guide Registering a Second Appliance as a Backup Registration Next StepsDeployment Scenarios ABC Selecting a Deployment ScenarioScenario a NAT/Route Mode Gateway Scenario B State Sync Pair in NAT/Route Mode Scenario C L2 Bridge Mode Connecting the WAN Port Initial SetupSystem Requirements Connecting the LAN Port Applying PowerAccessing the Management Interface Accessing the Setup WizardConnecting to Your Network Testing Your ConnectionActivating Licenses in SonicOS Upgrading Firmware on Your SonicWALL Saving a Backup Copy of Your PreferencesObtaining the Latest Firmware Upgrading the Firmware with Current Settings Upgrading the Firmware with Factory DefaultsUsing SafeMode to Upgrade Firmware On the System Settings page, click Upload New FirmwareUploaded Firmware New Confirmation dialog box, click OK to proceedInitial High Availability Setup Configuring a State Sync Pair in NAT/Route ModeScenario B Configuring Advanced HA Settings Configuring High AvailabilityNavigate to the High Availability Advanced 30 Configuring a State Sync Pair in NAT/Route Mode Synchronizing Settings Adjusting High Availability Settings Synchronizing FirmwareHA License Configuration Overview Associating Pre-Registered Appliances Click RegisterConfiguring the Primary Bridge Interface Configuring L2 Bridge ModeConnection Overview Configuring the Secondary Bridge Interface IP Assignment drop-down, select Layer 2 Bridged ModeAdditional Deployment Configuration Creating Network Access Rules WAN DMZSonicWALL NSA 5000/4500/3500 Getting Started Guide Creating a NAT Policy SonicWALL NSA 5000/4500/3500 Getting Started Guide Configuring Address Objects Configuring NAT Policies Leave Create a reflexive policy uncheckedEnabling Security Services in SonicOS Enabling Gateway Anti-VirusSonicWALL NSA 5000/4500/3500 Getting Started Guide Security Services Gateway Anti-Virus page, click Accept Enabling Intrusion Prevention ServicesSecurity Services Intrusion Prevention page, click Accept Enabling Anti-Spyware Applying Security Services to Network Zones Configuring SonicPoint Provisioning Profiles Deploying SonicPoints for Wireless AccessUpdating SonicPoint Firmware Select Enable SonicPoint 802.11g Radio tab Select Enable RadioConfiguring a Wireless Zone Assigning an Interface to the Wireless Zone Connecting the SonicPoint Troubleshooting Diagnostic Tools Using Packet CaptureUsing Ping Using the Active Connections Monitor Using Log View Deployment Configuration Reference Checklist For this Task See this ChapterSupport and Training Options Support Services Customer SupportSonicWALL Live Product Demos Knowledge PortalUser Forums Training Related Documentation Product Safety and Regulatory Information Safety and Regulatory Information Lithium Battery WarningRack Mounting the SonicWALL Cable ConnectionsSafety and Regulatory Information in German Weitere Hinweise zur MontageHinweis zur Lithiumbatterie KabelverbindungenFCC Part 15 Class a Notice Canadian Radio Frequency Emissions StatementCispr 22 EN 55022 Class a Regulatory Information for KoreaCopyright Notice Trademarks70 Notes SonicWALL NSA 5000/4500/3500 Getting Started Guide 72 Notes Rev a 01/08