SonicWALL 4000 9,

Page 22

Scenario A: Configuring a DMZ or OPT Port in SonicOS Standard

1. Select the Network > Settings page.

2. Click Configure button for the DMZ or OPT interface.

Select the DMZ in NAT Mode radio button.

3. Enter 192.168.200.2 in the DMZ Private Address field.

4. Enter 255.255.255.0 in the DMZ Subnet Mask field.

5. Click the OK button.

Scenario A: Allowing WAN -> DMZ Connection in SonicOS Standard

Follow this procedure if you are connecting the SonicWALL SSLVPN 4000 to a

SonicWALL UTM appliance running SonicOS Standard. If your SonicWALL UTM

appliance is running SonicOS Enhanced, skip to “Scenario A: Allowing WAN -> SSL

VPN Connection in SonicOS Enhanced” on page 29

9Tip: Leave the default rule to deny any access from WAN to DMZ in place, and use the

Public Server Rule Wizard to create an access rule to allow HTTP and HTTPS

specifically to the SonicWALL SSL VPN appliance. As you add different servers to the

DMZ, you can use the wizard to create access to the new servers while still restricting all

other traffic.

Note: If you are allowing HTTP access to your SonicWALL SSL VPN appliance as well

as HTTPS access, you need to run the wizard twice to create public server access rules

for both HTTP and HTTPS.

Create a public server access rule for HTTPS traffic:

1. Select the Firewall > Access Rules page.

2. Click .

3. In the Welcome to the SonicWALL Network Access Rules Wizard page,

click Next.

Contents

Main SonicWALL SSLVPN 4000 Appliance Getting Started Guide SonicWALL SSLVPN 4000 Configuration Steps Before You Begin Check Package Contents What You Need to Begin Any Items Missing? Selecting a SonicWALL Recommended Deployment Scenario SSL VPN on an Existing DMZ SSL VPN on the LAN Table 1: SonicWALLSSL VPN 4000 Deployment Scenarios Gateway Device SonicWALL Recommended Deployment Scenarios Conditions or Requirements If You Cannot Login to the SSL VPN Configuring Your SonicWALLSSLVPN 4000 Setting Your Administrator Password Note: Adding a Local User Setting Time Zone Configuring the X0 IP address for Scenario B and Scenario C Page Configuring a Default Route Adding a NetExtender Client Route Setting your NetExtender Address Range Page Connecting the SonicWALL SSLVPN 4000 Scenario A: Connecting the SonicWALL SSLVPN 4000 Scenario B: Configuring Your Network Interface Scenario B: Connecting the SonicWALL SSLVPN 4000 Scenario C: Configuring Your Network Interface Scenario C: Connecting the SonicWALL SSLVPN 4000 Configuring Your Gateway Device Scenario A: SSL VPN on a New DMZ Scenario A: Connecting to the SonicWALL UTM Appliance 9 Scenario A: Allowing DMZ -> LAN Connection in SonicOS Standard Page Page Scenario A: Adding a New SSL VPN Custom Zone in SonicOS Enhanced Scenario A: Allowing WAN -> SSL VPN Connection in SonicOS Enhanced Page Page Scenario A: Allowing SSL VPN -> LAN Connection in SonicOS Enhanced Page Page Scenario B: SSL VPN on Existing DMZ Scenario B: Connecting to the SonicWALL UTM Appliance Note: Page Scenario B: Allowing DMZ -> LAN Connection in SonicOS Standard Page Page Page Scenario B: Allowing WAN -> DMZ Connection in SonicOS Enhanced Page Scenario B: Allowing DMZ -> LAN Connection in SonicOS Enhanced Page Page Scenario C: SSL VPN on the LAN Scenario C: Setting Public Server Access in SonicOS Standard 9 Scenario C: Setting Public Server Access in SonicOS Enhanced Testing Your SSL VPN Connection Verifying a User Connection from the Internet Registering Your SonicWALLSSL VPN 4000 Before You Register Creating a MySonicWALL Account from System > Licenses Registering with MySonicWALL Page Congratulations Configuring Dynamic DNS Page Configuring a Static IP Address Windows XP Windows 2000 Windows NT Mounting Guidelines Glossary of Networking Terms Page SonicWALL SSLVPN 4000 Appliance Regulatory Statement and Safety Instructions Lithium Battery Warning Cable Connections Copyright Notice Trademarks