Page 8 Selecting a Deployment Scenario
Scenario B: SRA on an Existing DMZScenario C: SRA on the LANSonicWALLSRA 1200/4200 Deployment Scenarios

DMZ LANWAN

OPT, X2, etc
X1 X0
X0
Remote Users Network Nodes
SonicWALL UTM Appliance
E7500
Network Security Appliance
SwitchSwitch
Router
1200
SRA
Secure Remote Access
X0X1
CONSOLE
PWRTESTALARM
SRA Appliance

LAN

WAN

LAN Port
X0
Remote Users
Existing Gateway Device
or Switch / Hub
Internet
Router
1200
SRA
Secure Remote Access
X0X1
CONSOLE
PWRTESTALARM
SRA Appliance
Gateway Device Deployment Scenario Conditions or Requirements
SonicOS Enhanced
3.1 or higher:
TZ Series
•PRO Series
NSA E-Class
(SonicOS
5.0+)
•NSA Series
(SonicOS
5.0+)
SRA on a New DMZ OPT or unused interface
New DMZ configured for
NAT or Transparent Mode
SRA on Existing
DMZ No unused interfaces
One dedicated interface in
use as an existing DMZ
SRA on the LAN No unused interfaces
No dedicated interface for
a DMZ
SonicOS Standard
3.1 or higher:
TZ Series
PRO Series
SRA on a New DMZ Open OPT or X2 interface
New DMZ configured for
either NAT or Transparent
Mode
Provide SonicWALL deep
packet inspection security
services (optional)
SRA on Existing
DMZ OPT or X2 interface in use
with an existing DMZ
Provide SonicWALL deep
packet inspection security
services (optional)
SonicOS Standard
3.1 or higher:
TZ Series
•PRO Series
SonicWALLs with
legacy firmware
Third-Party Gateway
Device
SRA on the LAN Not planning to use
SonicWALL deep packet
inspection security
services
Interoperability with a
third-party gateway device