Manuals / SonicWALL / Household Appliance / Home Security System

SonicWALL 3 manual System Diagnostics

Models: 3

1 348

Download 348 pages 8.9 Kb

Page 70

System > Diagnostics

C H A P8T E R

Performing Diagnostic Tests

and Restarting the SonicWALL

Security Appliance

System > Diagnostics

The System > Diagnostics page provides several diagnostic tools which help troubleshoot network problems as well as CPU and Process Monitors.

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE

51

Image 70

SonicWALL 3 manual System Diagnostics

Contents

SonicOS Standard Administrators Guide Table of Contents Part 2 System Part 3 Network Part 4 Modem Part 5 Wireless Part 8 VPN Configuring Site to Site VPN Policies Using ViiPart 9 Users ViiiPart 11 Log Index Copyright Notice PrefaceTrademarks Limited Warranty XiiPage Organization of this Guide Part 11 Log Part 10 Security ServicesPart 9 Users About this GuideGuide Conventions Icons Used in this ManualNorth America Telephone Support More Information on SonicWALL Products and ServicesSonicWALL Technical Support International Telephone SupportCurrent Documentation XviiiIntroduction Sonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide Introduction What’s New in SonicOS StandardSonicWALL Management Interface Navigating the Management Interface SonicWALL Management InterfaceApplying Changes Status BarNavigating Tables Getting Help Common Icons in the Management InterfaceLogging Out Introduction Internet Service Provider ISP Information Basic SonicWALL Security Appliance SetupSonicWALL Security Appliance Configuration Steps Collecting Required ISP InformationIf You Have a Static IP Address Other InformationIf You Have DSL SonicWALL Management InterfaceUsing the SonicWALL Setup Wizard SonicWALL TZ 170 SPSonicWALL TZ 50 Wireless/TZ 150 Wireless/TZ 170 Wireless Configuring a Static IP Address Internet ConnectionUsing the SonicWALL Setup Wizard Configuring a Dhcp Internet Connection Configuring a PPPoE Internet ConnectionConfiguring Pptp Internet Connectivity Sonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide Configuring the TZ 170 SP using the Setup Wizard Configuring the WAN Network Mode Welcome to the SonicWALL Setup WizardChanging the Password Selecting the Deployment ScenarioConfiguring LAN Dhcp Settings Configuring WAN SettingsConfiguring LAN Settings Configuring Wlan 802.11b/g SettingsConfiguring the LAN Dhcp Settings Configuring the LAN SettingsConfiguring Wlan 802.11b Settings Configuring the WAN Network Mode Configuring the TZ 170 Wireless as a Secure Wireless Bridge Configuring Wlan Network Setting Configuring Secure Wireless Bridge SettingsRegistering Your SonicWALL Security Appliance Before You RegisterRegistering Your SonicWALL Security Appliance Registering Your SonicWALL Security ApplianceSonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide System Sonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide System Status Viewing System Status InformationSystem Status System Messages WizardsSystem Information Security Services Latest AlertsNetwork Interfaces SonicWALL TZ 50 WirelessSonicWALL TZ 150 Wireless SonicWALL Security Appliance Model Interfaces SonicWALL TZSystem Licenses System LicensesSystem Licenses Currently Licensed Nodes Node License StatusNode License Exclusion List Security Services Summary Manage Security Services Online Manual Upgrade Manual Upgrade for Closed EnvironmentsFrom a Computer Connected to the Internet System Licenses System Administration Using System AdministrationSystem Administration Login Security Name/PasswordFirewall Name Web Management Settings Four addresses or host names can be used Enable SnmpAdvanced Management Click OKEnable Management Using SonicWALL GMS Using System Administration Set Time Setting System TimeSystem Time System TimeNTP Settings Setting the SonicWALL Security Appliance TimeSettings Configuring System SettingsSystem Settings Import SettingsFirmware Management Export SettingsClick Export Settings New FirmwareFirmware Management Settings SafeMode Rebooting the SonicWALL Security ApplianceSystem Information Firmware Management System Diagnostics System DiagnosticsTech Support Report Generating a Tech Support ReportActive Connections Monitor Settings Diagnostic ToolsActive Connections Monitor CPU Monitor DNS Name LookupFind Network Path Packet TraceSelect Packet Trace from the Diagnostic tool menu Ping Reverse Name ResolutionProcess Monitor System Restart Network Sonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide Network Settings Configuring Network SettingsNetwork Settings Setup Wizard InterfacesDNS Settings Interface Options by SonicWALL Security ApplianceConfiguring the WAN Interface Configuring Transparent ModeConfiguration Example Configuring the WAN InterfaceConfiguring NAT Enabled Configuring NAT with Dhcp ClientConfiguring NAT with PPPoE Client Configuring NAT with L2TP ClientConfiguring NAT with Pptp Client Configuring Ethernet Settings in WAN PropertiesConfiguring the WAN Interface Basic LAN Configuration Configuring the LAN InterfaceConfiguring Multiple LAN Subnets Configuring Ethernet Settings Configuring the OPT InterfaceConfiguring the OPT Interface Configuring Transparent Mode Configuring the DMZ Interface Configuring the DMZ InterfaceConfiguring NAT Mode Select OPT in NAT ModeConfiguring Transparent Mode Configuring the Modem Interface TZ 170 SP Configuring the Modem Interface TZ 170 SPSelect DMZ in NAT Mode Modem Settings ProfilesSelect Enable WAN Failover FailoverAdvanced Activating the ModemSonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide Sonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide Network One-to-One NAT Configuring One-to-One NATSelect the Enable One-to-One NAT check box Network One-to-One NATSelect Enable One-to-One NAT One-to-One NAT Configuration ExampleClick Firewall, then Access Rules Allow Service Http Source WAN Configuring One-to-One NAT Network Web Proxy Configuring Web Proxy SettingsNetwork Web Proxy Bypass Proxy Servers Upon Proxy Failure Configuring Automatic Web Proxy ForwardingForward OPT/DMZ/WLAN Client Requests to Proxy Server Network Intranet Configuring Intranet SettingsNetwork Intranet Specified address ranges are attached to the LAN link InstallationIntranet Settings Specified address ranges are attached to the WAN linkNetwork Routing Configuring Static RoutesNetwork Routing Key terms Static Route Configuration ExampleStatic Routes SonicWALL LAN IP AddressRoute Advertisement Configuration Route AdvertisementRouting Table Network ARP Configuring Address Resolution Protocol SettingsNetwork ARP Static ARP Entries Adding a Secondary Subnet using the Static ARP MethodSecondary Subnets with Static ARP Network ARP Prohibit Dynamic ARP Entries Navigating and Sorting the ARP Cache Table Flushing the ARP CacheConfiguring Address Resolution Protocol Settings Network Dhcp Server Configuring the Dhcp ServerDhcp Server Settings Network Dhcp ServerConfiguring Dhcp Server for Dynamic Ranges Dhcp Server Lease ScopesConfiguring Static Dhcp Entries 101Current Dhcp Leases Supported Ddns Providers Configuring Dynamic DNSNetwork Dynamic DNS Network Dynamic DNSAdditional Services offered by Dynamic DNS Providers Configuring Dynamic DNS 105106 Dynamic DNS Settings Table 107108 Modem 109110 Modem Status Viewing Modem StatusModem Status 111Modem Status Modem Settings Configuring Modem SettingsModem Settings 113Configuring Profile and Modem Settings Modem Failover Configuring Modem FailoverModem Failover Settings Modem FailoverConfiguring Modem Failover Modem Advanced Modem Advanced117 Configuring Advanced Modem Settings Dial-Up Profiles Configuring Modem Dialup PropertiesModem Dialup Profiles Modem Dialup ProfilesModem Dialup Profiles Modem Profile Configuration Configuring a Dialup ProfileModem Dialup Profiles Modem Profile Configuration 121122 Chat Scripts 123Custom Chat Scripts Wireless 125126 LAN WAN 127Considerations for Using Wireless Connections Optimal Wireless Performance Recommendations Optimal Wireless Performance RecommendationsWireless Guest Services WGS 129WiFiSec Enforcement Wireless Node Count EnforcementMAC Filter List Wlan Network Settings Using the Wireless WizardWelcome to the SonicWALL Wireless Configuration Wizard Using the Wireless WizardWlan 802.11b Settings Wlan Security SettingsWireless Guest Services WiFiSec VPN Client User Authentication133 Wireless Configuration Summary Updating the TZ 50 Wireless/TZ 150 Wireless/TZ 170 WirelessWireless Status Wireless StatusConfiguring Additional Wireless Features 135Wlan Settings Access Point StatusStation Status Wlan Statistics137 138 Wireless Radio Mode Configuring Wireless SettingsWireless Settings Wireless SettingsWireless Settings Secure Wireless Bridging TZ 170 Only 141Configuring a Secure Wireless Bridge Wireless Bridging without WiFiSec Network Settings for the Example Network143 Advanced Configuration for both VPN Policies Select LAN for VPN Terminated atWireless Bridge VPN Policy 145146 Wireless WEP/WPA Encryption Configuring WEP and WPA EncryptionWireless WEP/WPA Encryption 147WPA Encryption Settings WEP Encryption SettingsWEP Encryption Keys WPA-EAP Settings WPA-PSK Settings149 WPA Settings Beaconing & Ssid Controls Wireless AdvancedWireless Advanced 151Advanced Radio Settings Wireless Client CommunicationsConfigurable Antenna Diversity TZ 170 Wireless 153 154 Wireless MAC Filter List Configuring the MAC Filter ListWireless MAC Filter List 155156 Wireless Bridge IDS Configuring Wireless IDSWireless IDS Wireless IDSRogue Access Point Detection Access Point IDSEnable Client Null Probing Association Flood DetectionAuthorizing Access Points on Your Network 159160 Wireless Guest Services 161162 WGS Status WGS Status163 Viewing Wireless Guest Services Status WGS Settings Configuring Wireless Guest ServicesWGS Settings 165Enable Dynamic Address Translation DAT Bypass Guest AuthenticationBypass Filters for Guest Accounts Enable IP Address Deny List for Authenticated Users Enable Smtp RedirectEnable URL Allow List for Authenticated Users 167Customize Login Check the Customize Login Page boxWGS Account Profiles Custom Post Authentication RedirectMaximum Concurrent Guests To add a profileAccount Lifetime Working with Guest Accounts Managing Wireless Guest AccountsWGS Accounts WGS AccountsAutomatically Generating Guest Accounts Account Profile Manually Configuring Wireless GuestsAccount Detail Printing 173Flexible Default Route Secure Access Point with Virtual Adapter SupportSecure Access Point with Wireless Guest Services 175176 Firewall 177178 Network Access Rules Overview Configuring Network Access RulesNetwork Access Rules Overview 179Using Bandwidth Management with Access Rules Firewall Access RulesConfiguring a Public Server Rule Restoring Default Network Access RulesAdding Rules using the Network Access Rule Wizard Navigating and Sorting the Access Rules Table EntriesConfiguring a General Network Access Rule 183 Adding Rules Using the Add Rule Window 185 Configuring Network Access Rules Click the Bandwidth tab Enabling Ping Blocking LAN Access for Specific ServicesRule Examples Select WAN from the Destination Ethernet menu188 Windows Networking NetBIOS Broadcast Pass Through Configuring Advanced Rule OptionsAccess Rules Advanced Access Rules AdvancedDetection Prevention TCP Connection Inactivity TimeoutAccess Rule Service Options Source Routed PacketsUser Defined Custom Services Configuring Custom ServicesFirewall Services Firewall ServicesPredefined Services VoIP Protocols Configuring VoIPFirewall VoIP Firewall VoIP323 SIPSettings Configuring the VoIP SettingsSIP Settings 195196 Firewall Connections Monitor Monitoring Active Firewall ConnectionsFirewall Connections Monitor 197Click Apply Filters Setting Filter LogicUsing Group Filters Source IP Priority && Category && Source && DestinationVPN 199200 SonicWALL VPN Options Overview Configuring VPN SettingsSonicWALL VPN Options Overview 201VPN Global Settings VPN SettingsVPN Policies Currently Active VPN Tunnels Configuring GroupVPN Policy on the SonicWALLConfiguring GroupVPN Policy on the SonicWALL Navigating and Sorting the VPN Policies EntriesConfiguring IKE Preshared Secret 205 206 207 Configuring GroupVPN with IKE 3rd Party Certificates 209 210 211 212 Export a GroupVPN Client Policy Site to Site VPN ConfigurationsSite to Site VPN Configurations Site-to-Site VPN DeploymentsRouter VPN Planning Sheet for Site-to-Site VPN PoliciesSite a Additional Information215 Creating a Typical IKE Preshared Secret VPN Policy Creating a Custom VPN Policy IKE with Preshared Secret 217Creating a Manual Key VPN Policy with the VPN Policy Wizard 219 220 Tip The Shared Secret must be a minimum of four characters Configuring a VPN Policy IKE with Preshared Secret221 222 223 Configuring a VPN Policy using Manual Key Select Manual Key from the IPSec Keying Mode menuGeneral tab, select IKE using 3rd Party Certificates Configuring a VPN Policy with IKE 3rd Party Certificate225 226 227 228 VPN Advanced Configuring Advanced VPN SettingsAdvanced VPN Settings VPN AdvancedVPN User Authentication Settings VPN Bandwidth Management Select Enable VPN Bandwidth Management231 Configuring Advanced VPN Settings VPN Dhcp over VPN Configuring Dhcp Over VPNDhcp Relay Mode VPN Dhcp over VPNConfiguring the Central Gateway for Dhcp Over VPN Configuring Dhcp over VPN Remote Gateway 235Click OK to exit the Dhcp over VPN Configuration window Device ConfigurationCurrent Dhcp over VPN Leases VPN L2TP Server Configuring L2TP Server SettingsVPN L2TP Server 237IP Address Settings L2TP Server SettingsAdding L2TP Clients to the SonicWALL Currently Active L2TP Sessions 239Configuring L2TP Server Settings SonicWALL Third-Party Digital Certificate Support Managing CertificatesDigital Certificates Overview Digital Certificates OverviewImporting Certificate with Private Key VPN Local CertificatesCertificate Details VPN Local Certificates Generating a Certificate Signing RequestDelete This Certificate Select Add New Local Certificate from the Certificates menuImporting CA Certificates into the SonicWALL VPN CA CertificatesSelect Add New CA Certificate Importing a CRL List Automatic CRL UpdateCertificate Revocation List CRL Click Browse for Please select a file to import246 Users 247248 Users Status User Level Authentication OverviewUser Level Authentication Overview 249Authentication Method Users SettingsActive User Sessions Users Settings Global User SettingsInternet Authentication Exclusions 251Acceptable Use Policy Select Use Radius for user authentication Configuring Radius Authentication253 254 255 256 Users Local Users Configuring Local UsersUsers Local Users 257Adding a Local User Security Services 259260 SonicWALL Security Services SonicWALL Security ServicesMySonicWALL.com Activating Free TrialsSecurity Services Summary Security Services SummarySecurity Services Summary Manage Licenses 263Security Services Information Security Services SettingsIf Your SonicWALL Security Appliance is Not Registered SonicWALL Content Filtering Service SonicWALL Content Filtering Service265 Content Filter Status Security Services Content FilterActivating SonicWALL Content Filtering Service Security Services Content Filter Activating a SonicWALL Content Filtering Service267 Content Filter Type Restrict Web FeaturesConfiguring SonicWALL Filter Properties Configuring SonicWALL Filter PropertiesMessage to Display when Blocking Trusted DomainsAllowed/Forbidden Domains Custom ListKeyword Blocking Disable all Web traffic except for Allowed Domains 271Consent Adding a New Address Mandatory Filtered IP AddressesConsent Page URL mandatory filtering 273274 SonicWALL Network Anti-Virus Overview SonicWALL Network Anti-Virus Overview275 Security Services Anti-Virus Activating SonicWALL Network Anti-VirusActivating a SonicWALL Network Anti-Virus Free Trial Security Services Anti-Virus277 Security Services E-Mail Filter Configuring SonicWALL Network Anti-VirusSonicWALL Gateway Anti-Virus Overview Managing SonicWALL Gateway Anti-Virus ServiceSonicWALL Gateway Anti-Virus Overview 279SonicWALL Gateway Anti-Virus/Intrusion Prevention Features Activating SonicWALL Gateway Anti-Virus 281Activating SonicWALL Gateway Anti-Virus Activating the SonicWALL Gateway Anti-VirusConfiguring SonicWALL Gateway Anti-Virus Configuring SonicWALL Gateway Anti-Virus283 284 SonicWALL IPS Features Managing SonicWALL Intrusion Prevention ServiceSonicWALL Intrusion Prevention Service SonicWALL Intrusion Prevention ServiceSonicWALL Deep Packet Inspection How SonicWALL’s Deep Packet Inspection Architecture Works 287Security Services Intrusion Prevention Activating SonicWALL IPSActivating the SonicWALL IPS Free Trial Security Services Intrusion Prevention289 290 SonicWALL Global Security Client Managing SonicWALL Global Security ClientSonicWALL Global Security Client 291How SonicWALL Global Security Client Works Global Security Client FeaturesSonicWALL Global Security Client Activation Activating SonicWALL Global Security Client 293294 Log 295296 SonicOS Log Event Messages Overview Viewing Log EventsSonicOS Log Event Messages Overview 297Log View Navigating and Sorting Log View Table EntriesClear Log SonicOS Log EntriesRefresh Mail Log300 Log Categories Specifying Log CategoriesLog Categories Alerts & Snmp Traps Log Automation Configuring Log AutomationLog Automation 303Mail Syslog Servers305 306 Log Name Resolution Configuring Name ResolutionLog Name Resolution 307Name Resolution Method list, select Selecting Name Resolution SettingsSpecifying the DNS Server Log Reports Reset DataGenerating and Viewing Log Reports Data CollectionWeb Site Hits Bandwidth Usage by ServiceView Data Bandwidth Usage by IP AddressLog ViewPoint Log ViewPointSonicWALL ViewPoint 311Generating and Viewing Log Reports SonicSetup SonicSetup313 Introduction and Discovery Device SelectionDiagnostics Diagnostics315 SonicROM Recovery Diagnostic ResultsSonicOS Recovery SonicOS Recovery317 Restoring Factory Defaults Address Synchronization Address Synchronization319 320 SonicWALL SafeMode SonicWALL SafeMode321 322 Upgrading SonicOS Firmware Upgrading SonicOS Firmware323 324 Index Numerics326 VPN 327WPA, see WiFiSec Protected Access 232- 000609- 00 Rev E 02/05