Manuals / SonicWALL / Household Appliance / Home Security System

SonicWALL 3 manual 296

Models: 3

1 348

Download 348 pages 8.9 Kb

Page 315

296	SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE

Image 315

SonicWALL 3 manual 296

Contents

SonicOS Standard Administrators Guide Table of Contents Part 2 System Part 3 Network Part 4 Modem Part 5 Wireless Part 8 VPN Vii Configuring Site to Site VPN Policies UsingViii Part 9 UsersPart 11 Log Index Preface Copyright NoticeTrademarks Xii Limited WarrantyPage Organization of this Guide About this Guide Part 10 Security ServicesPart 9 Users Part 11 LogIcons Used in this Manual Guide ConventionsInternational Telephone Support More Information on SonicWALL Products and ServicesSonicWALL Technical Support North America Telephone SupportXviii Current DocumentationIntroduction Sonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide What’s New in SonicOS Standard IntroductionSonicWALL Management Interface SonicWALL Management Interface Navigating the Management InterfaceStatus Bar Applying ChangesNavigating Tables Common Icons in the Management Interface Getting HelpLogging Out Introduction Collecting Required ISP Information Basic SonicWALL Security Appliance SetupSonicWALL Security Appliance Configuration Steps Internet Service Provider ISP InformationSonicWALL Management Interface Other InformationIf You Have DSL If You Have a Static IP AddressSonicWALL TZ 170 SP Using the SonicWALL Setup WizardConfiguring a Static IP Address Internet Connection SonicWALL TZ 50 Wireless/TZ 150 Wireless/TZ 170 WirelessUsing the SonicWALL Setup Wizard Configuring a PPPoE Internet Connection Configuring a Dhcp Internet ConnectionConfiguring Pptp Internet Connectivity Sonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide Configuring the TZ 170 SP using the Setup Wizard Selecting the Deployment Scenario Welcome to the SonicWALL Setup WizardChanging the Password Configuring the WAN Network ModeConfiguring Wlan 802.11b/g Settings Configuring WAN SettingsConfiguring LAN Settings Configuring LAN Dhcp SettingsConfiguring the LAN Settings Configuring the LAN Dhcp SettingsConfiguring Wlan 802.11b Settings Configuring the WAN Network Mode Configuring the TZ 170 Wireless as a Secure Wireless Bridge Configuring Secure Wireless Bridge Settings Configuring Wlan Network SettingBefore You Register Registering Your SonicWALL Security ApplianceRegistering Your SonicWALL Security Appliance Registering Your SonicWALL Security ApplianceSonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide System Sonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide Viewing System Status Information System StatusSystem Status Wizards System MessagesSystem Information Latest Alerts Security ServicesSonicWALL Security Appliance Model Interfaces SonicWALL TZ SonicWALL TZ 50 WirelessSonicWALL TZ 150 Wireless Network InterfacesSystem Licenses System LicensesSystem Licenses Node License Status Currently Licensed NodesNode License Exclusion List Security Services Summary Manual Upgrade for Closed Environments Manage Security Services Online Manual UpgradeFrom a Computer Connected to the Internet System Licenses Using System Administration System AdministrationSystem Administration Name/Password Login SecurityFirewall Name Web Management Settings Click OK Enable SnmpAdvanced Management Four addresses or host names can be usedEnable Management Using SonicWALL GMS Using System Administration System Time Setting System TimeSystem Time Set TimeSetting the SonicWALL Security Appliance Time NTP SettingsImport Settings Configuring System SettingsSystem Settings SettingsNew Firmware Export SettingsClick Export Settings Firmware ManagementSafeMode Rebooting the SonicWALL Security Appliance Firmware Management SettingsSystem Information Firmware Management System Diagnostics System DiagnosticsGenerating a Tech Support Report Tech Support ReportDiagnostic Tools Active Connections Monitor SettingsActive Connections Monitor DNS Name Lookup CPU MonitorPacket Trace Find Network PathSelect Packet Trace from the Diagnostic tool menu Reverse Name Resolution PingProcess Monitor System Restart Network Sonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide Configuring Network Settings Network SettingsNetwork Settings Interfaces Setup WizardInterface Options by SonicWALL Security Appliance DNS SettingsConfiguring Transparent Mode Configuring the WAN InterfaceConfiguring the WAN Interface Configuration ExampleConfiguring NAT with Dhcp Client Configuring NAT EnabledConfiguring NAT with L2TP Client Configuring NAT with PPPoE ClientConfiguring Ethernet Settings in WAN Properties Configuring NAT with Pptp ClientConfiguring the WAN Interface Configuring the LAN Interface Basic LAN ConfigurationConfiguring Multiple LAN Subnets Configuring the OPT Interface Configuring Ethernet SettingsConfiguring the OPT Interface Configuring Transparent Mode Select OPT in NAT Mode Configuring the DMZ InterfaceConfiguring NAT Mode Configuring the DMZ InterfaceConfiguring Transparent Mode Configuring the Modem Interface TZ 170 SP Configuring the Modem Interface TZ 170 SPSelect DMZ in NAT Mode Profiles Modem SettingsFailover Select Enable WAN FailoverActivating the Modem AdvancedSonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide Sonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide Network One-to-One NAT Configuring One-to-One NATSelect the Enable One-to-One NAT check box Network One-to-One NATOne-to-One NAT Configuration Example Select Enable One-to-One NATClick Firewall, then Access Rules Allow Service Http Source WAN Configuring One-to-One NAT Configuring Web Proxy Settings Network Web ProxyNetwork Web Proxy Configuring Automatic Web Proxy Forwarding Bypass Proxy Servers Upon Proxy FailureForward OPT/DMZ/WLAN Client Requests to Proxy Server Configuring Intranet Settings Network IntranetNetwork Intranet Specified address ranges are attached to the WAN link InstallationIntranet Settings Specified address ranges are attached to the LAN linkConfiguring Static Routes Network RoutingNetwork Routing SonicWALL LAN IP Address Static Route Configuration ExampleStatic Routes Key termsRoute Advertisement Route Advertisement ConfigurationRouting Table Configuring Address Resolution Protocol Settings Network ARPNetwork ARP Adding a Secondary Subnet using the Static ARP Method Static ARP EntriesSecondary Subnets with Static ARP Network ARP Prohibit Dynamic ARP Entries Flushing the ARP Cache Navigating and Sorting the ARP Cache TableConfiguring Address Resolution Protocol Settings Network Dhcp Server Configuring the Dhcp ServerDhcp Server Settings Network Dhcp ServerDhcp Server Lease Scopes Configuring Dhcp Server for Dynamic Ranges101 Configuring Static Dhcp EntriesCurrent Dhcp Leases Network Dynamic DNS Configuring Dynamic DNSNetwork Dynamic DNS Supported Ddns ProvidersAdditional Services offered by Dynamic DNS Providers 105 Configuring Dynamic DNS106 107 Dynamic DNS Settings Table108 109 Modem110 111 Viewing Modem StatusModem Status Modem StatusModem Status 113 Configuring Modem SettingsModem Settings Modem SettingsConfiguring Profile and Modem Settings Modem Failover Configuring Modem FailoverModem Failover Settings Modem FailoverConfiguring Modem Failover Modem Advanced Modem Advanced117 Configuring Advanced Modem Settings Modem Dialup Profiles Configuring Modem Dialup PropertiesModem Dialup Profiles Dial-Up ProfilesConfiguring a Dialup Profile Modem Dialup Profiles Modem Profile Configuration121 Modem Dialup Profiles Modem Profile Configuration122 123 Chat ScriptsCustom Chat Scripts 125 Wireless126 127 LAN WANConsiderations for Using Wireless Connections 129 Optimal Wireless Performance RecommendationsWireless Guest Services WGS Optimal Wireless Performance RecommendationsWireless Node Count Enforcement WiFiSec EnforcementMAC Filter List Using the Wireless Wizard Using the Wireless WizardWelcome to the SonicWALL Wireless Configuration Wizard Wlan Network SettingsWlan Security Settings Wlan 802.11b SettingsWiFiSec VPN Client User Authentication Wireless Guest Services133 Updating the TZ 50 Wireless/TZ 150 Wireless/TZ 170 Wireless Wireless Configuration Summary135 Wireless StatusConfiguring Additional Wireless Features Wireless StatusAccess Point Status Wlan SettingsWlan Statistics Station Status137 138 Wireless Settings Configuring Wireless SettingsWireless Settings Wireless Radio ModeWireless Settings 141 Secure Wireless Bridging TZ 170 OnlyConfiguring a Secure Wireless Bridge Network Settings for the Example Network Wireless Bridging without WiFiSec143 Select LAN for VPN Terminated at Advanced Configuration for both VPN Policies145 Wireless Bridge VPN Policy146 147 Configuring WEP and WPA EncryptionWireless WEP/WPA Encryption Wireless WEP/WPA EncryptionWEP Encryption Settings WPA Encryption SettingsWEP Encryption Keys WPA-PSK Settings WPA-EAP Settings149 WPA Settings 151 Wireless AdvancedWireless Advanced Beaconing & Ssid ControlsWireless Client Communications Advanced Radio SettingsConfigurable Antenna Diversity TZ 170 Wireless 153 154 155 Configuring the MAC Filter ListWireless MAC Filter List Wireless MAC Filter List156 Wireless IDS Configuring Wireless IDSWireless IDS Wireless Bridge IDSAssociation Flood Detection Access Point IDSEnable Client Null Probing Rogue Access Point Detection159 Authorizing Access Points on Your Network160 161 Wireless Guest Services162 WGS Status WGS Status163 Viewing Wireless Guest Services Status 165 Configuring Wireless Guest ServicesWGS Settings WGS SettingsBypass Guest Authentication Enable Dynamic Address Translation DATBypass Filters for Guest Accounts 167 Enable Smtp RedirectEnable URL Allow List for Authenticated Users Enable IP Address Deny List for Authenticated UsersCheck the Customize Login Page box Customize LoginTo add a profile Custom Post Authentication RedirectMaximum Concurrent Guests WGS Account ProfilesAccount Lifetime WGS Accounts Managing Wireless Guest AccountsWGS Accounts Working with Guest AccountsAutomatically Generating Guest Accounts 173 Manually Configuring Wireless GuestsAccount Detail Printing Account ProfileSecure Access Point with Virtual Adapter Support Flexible Default Route175 Secure Access Point with Wireless Guest Services176 177 Firewall178 179 Configuring Network Access RulesNetwork Access Rules Overview Network Access Rules OverviewFirewall Access Rules Using Bandwidth Management with Access RulesNavigating and Sorting the Access Rules Table Entries Restoring Default Network Access RulesAdding Rules using the Network Access Rule Wizard Configuring a Public Server RuleConfiguring a General Network Access Rule 183 Adding Rules Using the Add Rule Window 185 Configuring Network Access Rules Click the Bandwidth tab Select WAN from the Destination Ethernet menu Blocking LAN Access for Specific ServicesRule Examples Enabling Ping188 Access Rules Advanced Configuring Advanced Rule OptionsAccess Rules Advanced Windows Networking NetBIOS Broadcast Pass ThroughSource Routed Packets TCP Connection Inactivity TimeoutAccess Rule Service Options Detection PreventionFirewall Services Configuring Custom ServicesFirewall Services User Defined Custom ServicesPredefined Services Firewall VoIP Configuring VoIPFirewall VoIP VoIP ProtocolsSIP 323195 Configuring the VoIP SettingsSIP Settings Settings196 197 Monitoring Active Firewall ConnectionsFirewall Connections Monitor Firewall Connections MonitorSource IP Priority && Category && Source && Destination Setting Filter LogicUsing Group Filters Click Apply Filters199 VPN200 201 Configuring VPN SettingsSonicWALL VPN Options Overview SonicWALL VPN Options OverviewVPN Settings VPN Global SettingsVPN Policies Navigating and Sorting the VPN Policies Entries Configuring GroupVPN Policy on the SonicWALLConfiguring GroupVPN Policy on the SonicWALL Currently Active VPN TunnelsConfiguring IKE Preshared Secret 205 206 207 Configuring GroupVPN with IKE 3rd Party Certificates 209 210 211 212 Site-to-Site VPN Deployments Site to Site VPN ConfigurationsSite to Site VPN Configurations Export a GroupVPN Client PolicyAdditional Information VPN Planning Sheet for Site-to-Site VPN PoliciesSite a Router215 Creating a Typical IKE Preshared Secret VPN Policy 217 Creating a Custom VPN Policy IKE with Preshared SecretCreating a Manual Key VPN Policy with the VPN Policy Wizard 219 220 Configuring a VPN Policy IKE with Preshared Secret Tip The Shared Secret must be a minimum of four characters221 222 223 Select Manual Key from the IPSec Keying Mode menu Configuring a VPN Policy using Manual KeyConfiguring a VPN Policy with IKE 3rd Party Certificate General tab, select IKE using 3rd Party Certificates225 226 227 228 VPN Advanced Configuring Advanced VPN SettingsAdvanced VPN Settings VPN AdvancedVPN User Authentication Settings Select Enable VPN Bandwidth Management VPN Bandwidth Management231 Configuring Advanced VPN Settings VPN Dhcp over VPN Configuring Dhcp Over VPNDhcp Relay Mode VPN Dhcp over VPNConfiguring the Central Gateway for Dhcp Over VPN 235 Configuring Dhcp over VPN Remote GatewayDevice Configuration Click OK to exit the Dhcp over VPN Configuration windowCurrent Dhcp over VPN Leases 237 Configuring L2TP Server SettingsVPN L2TP Server VPN L2TP ServerL2TP Server Settings IP Address SettingsAdding L2TP Clients to the SonicWALL 239 Currently Active L2TP SessionsConfiguring L2TP Server Settings Digital Certificates Overview Managing CertificatesDigital Certificates Overview SonicWALL Third-Party Digital Certificate SupportVPN Local Certificates Importing Certificate with Private KeyCertificate Details Select Add New Local Certificate from the Certificates menu Generating a Certificate Signing RequestDelete This Certificate VPN Local CertificatesVPN CA Certificates Importing CA Certificates into the SonicWALLSelect Add New CA Certificate Click Browse for Please select a file to import Automatic CRL UpdateCertificate Revocation List CRL Importing a CRL List246 247 Users248 249 User Level Authentication OverviewUser Level Authentication Overview Users StatusUsers Settings Authentication MethodActive User Sessions 251 Global User SettingsInternet Authentication Exclusions Users SettingsAcceptable Use Policy Configuring Radius Authentication Select Use Radius for user authentication253 254 255 256 257 Configuring Local UsersUsers Local Users Users Local UsersAdding a Local User 259 Security Services260 SonicWALL Security Services SonicWALL Security ServicesActivating Free Trials MySonicWALL.com263 Security Services SummarySecurity Services Summary Manage Licenses Security Services SummarySecurity Services Settings Security Services InformationIf Your SonicWALL Security Appliance is Not Registered SonicWALL Content Filtering Service SonicWALL Content Filtering Service265 Security Services Content Filter Content Filter StatusActivating SonicWALL Content Filtering Service Activating a SonicWALL Content Filtering Service Security Services Content Filter267 Restrict Web Features Content Filter TypeTrusted Domains Configuring SonicWALL Filter PropertiesMessage to Display when Blocking Configuring SonicWALL Filter PropertiesCustom List Allowed/Forbidden DomainsKeyword Blocking 271 Disable all Web traffic except for Allowed DomainsConsent 273 Mandatory Filtered IP AddressesConsent Page URL mandatory filtering Adding a New Address274 SonicWALL Network Anti-Virus Overview SonicWALL Network Anti-Virus Overview275 Activating SonicWALL Network Anti-Virus Security Services Anti-VirusSecurity Services Anti-Virus Activating a SonicWALL Network Anti-Virus Free Trial277 Configuring SonicWALL Network Anti-Virus Security Services E-Mail Filter279 Managing SonicWALL Gateway Anti-Virus ServiceSonicWALL Gateway Anti-Virus Overview SonicWALL Gateway Anti-Virus OverviewSonicWALL Gateway Anti-Virus/Intrusion Prevention Features 281 Activating SonicWALL Gateway Anti-VirusActivating the SonicWALL Gateway Anti-Virus Activating SonicWALL Gateway Anti-VirusConfiguring SonicWALL Gateway Anti-Virus Configuring SonicWALL Gateway Anti-Virus283 284 SonicWALL Intrusion Prevention Service Managing SonicWALL Intrusion Prevention ServiceSonicWALL Intrusion Prevention Service SonicWALL IPS FeaturesSonicWALL Deep Packet Inspection 287 How SonicWALL’s Deep Packet Inspection Architecture WorksActivating SonicWALL IPS Security Services Intrusion PreventionSecurity Services Intrusion Prevention Activating the SonicWALL IPS Free Trial289 290 291 Managing SonicWALL Global Security ClientSonicWALL Global Security Client SonicWALL Global Security ClientGlobal Security Client Features How SonicWALL Global Security Client WorksSonicWALL Global Security Client Activation 293 Activating SonicWALL Global Security Client294 295 Log296 297 Viewing Log EventsSonicOS Log Event Messages Overview SonicOS Log Event Messages OverviewNavigating and Sorting Log View Table Entries Log ViewMail Log SonicOS Log EntriesRefresh Clear Log300 Specifying Log Categories Log CategoriesLog Categories Alerts & Snmp Traps 303 Configuring Log AutomationLog Automation Log AutomationSyslog Servers Mail305 306 307 Configuring Name ResolutionLog Name Resolution Log Name ResolutionSelecting Name Resolution Settings Name Resolution Method list, selectSpecifying the DNS Server Data Collection Reset DataGenerating and Viewing Log Reports Log ReportsBandwidth Usage by IP Address Bandwidth Usage by ServiceView Data Web Site Hits311 Log ViewPointSonicWALL ViewPoint Log ViewPointGenerating and Viewing Log Reports SonicSetup SonicSetup313 Device Selection Introduction and DiscoveryDiagnostics Diagnostics315 Diagnostic Results SonicROM RecoverySonicOS Recovery SonicOS Recovery317 Restoring Factory Defaults Address Synchronization Address Synchronization319 320 SonicWALL SafeMode SonicWALL SafeMode321 322 Upgrading SonicOS Firmware Upgrading SonicOS Firmware323 324 Numerics Index326 327 VPNWPA, see WiFiSec Protected Access 232- 000609- 00 Rev E 02/05