Scenario B SRA on an Existing DMZ | SonicWALL SRA 1200/4200 guide

Scenario B: SRA on an Existing DMZ

SonicWALL UTM Appliance

X1		E7500
X1	OPT, X2, etc	X0
	OPT, X2, etc
Router	Switch	Switch
Remote Users	X0		Network Nodes
	X0
		SRA 1200
	SRA Appliance
WAN		DMZ	LAN
Scenario C: SRA on the LAN
	Existing Gateway Device
	or Switch / Hub
		LAN Port
Internet
Router
Remote Users		X0
		X0
		SRA 1200
	SRA Appliance
WAN			LAN

SonicWALL SRA 1200/4200 Deployment Scenarios

	Gateway	Deployment		Conditions or
	Device	Scenario		Requirements

SonicOS Enhanced		SRA on a New DMZ	•	OPT or unused interface
3.1 or higher:			•	New DMZ configured for
•	TZ Series			NAT or Transparent Mode
•	PRO Series
•	NSA E-Class	SRA on Existing	•	No unused interfaces
	(SonicOS	DMZ	•	One dedicated interface in
	5.0+)			use as an existing DMZ
•	NSA Series			use as an existing DMZ
•	NSA Series
	(SonicOS	SRA on the LAN	•	No unused interfaces
	5.0+)		•	No dedicated interface for
				a DMZ

SonicOS Standard		SRA on a New DMZ	•	Open OPT or X2 interface
3.1 or higher:			•	New DMZ configured for
•	TZ Series			either NAT or Transparent
•	PRO Series			Mode
			•	Provide SonicWALL deep
				packet inspection security
				services (optional)

		SRA on Existing	•	OPT or X2 interface in use
		DMZ		with an existing DMZ
			•	Provide SonicWALL deep
				packet inspection security
				services (optional)

SonicOS Standard		SRA on the LAN	•	Not planning to use
3.1 or higher:				SonicWALL deep packet
•	TZ Series			inspection security
•	PRO Series			services
SonicWALLs with			•	Interoperability with a
SonicWALLs with				third-party gateway device
legacy firmware				third-party gateway device
Third-Party Gateway
Device

Page 8 Selecting a Deployment Scenario

Image 9

SonicWALL SRA 1200/4200 manual Scenario B SRA on an Existing DMZ

Contents

Getting Started Guide SonicWALL SRA 1200/4200 Getting Started Guide Document Contents 2 Document Contents This Section Setting Up Your Network Package Contents for the SonicWALL SRA SRA 1200 System RequirementsMissing Items? SRA 4200 System Requirements Administrator Information Recording Configuration InformationNetwork Configuration Information What You Need to Begin Scenario Overviews Selecting a Deployment Scenario Scenario B SRA on an Existing DMZ Accessing the Management Interface Applying Power to the SonicWALL SRA Troubleshooting Connecting Your Appliance Setting Your Administrator Password Configuring Your SRA 1200/4200 Setting the Time Zone Adding a Local UserNavigate to Users Local Users Configuring DNS / Wins Configuring SRA Network SettingsConfiguring the X0 IP Address for Scenario B and Scenario C Click Accept Configuring a Default Route Navigate to the NetExtender Client Routes Adding a NetExtender Client Route 192.168.200.100 to Setting Your NetExtender Address Range Scenario a Connecting Your Network Interfaces Connecting Your SRA 1200/4200 Scenario C Connecting Your Network Interfaces Scenario B Connecting Your Network Interfaces 20 Connecting Your SRA 1200/4200 Registering Your Appliance Registering Your SonicWALL SRA Creating a MySonicWALL AccountBefore You Register Product Registration Service Management Services and Licensing Flexible Per-User Licensing Activating Services and Software Trying or Purchasing Services 26 Services and Licensing Scenario a SRA on a New DMZ Network Configuration Connecting to a SonicWALL Security Appliance Adding a New SRA Custom ZoneUn-select the Allow Interface Trust checkbox Enter a name for the service Allowing a WAN SRA ConnectionEnter your Subnet Mask Allowing an SRA LAN Connection Navigate to the Network Address ObjectsClick Name for NetExtender Prerequisites Scenario B SRA on an Existing DMZ Allowing WAN DMZ Connection Allowing DMZ LAN Connection Continue to Testing Your Remote Connection on Scenario C SRA on the LAN Configuring SRA LAN Connectivity Name Name for NetExtender Zone Assignment Setting Public Server Access Select the Public Server Wizard option and click NextSelect Http and Https checkboxes, and click Next Verifying a User Connection from the Internet Testing Your Remote Connection 40 Testing Your Remote Connection Upgrading Your Appliance Obtaining the Latest SRA SSL VPN Image Exporting a Copy of Your Configuration Settings Uploaded Firmware with Factory Defaults New Uploading a New SRA SSL VPN ImageUploaded Firmware New Resetting the Appliance Using SafeMode Support and Training Options Knowledge Base Customer Support User Forums Training Related Documentation SonicWALL Live Product Demos SonicWALL Secure Wireless Network Integrated Solutions Guide Page Safety and Regulatory Information Cable Connections Lithium Battery Warning Weitere Hinweise zur Montage Hinweis zur LithiumbatterieKabelverbindungen Complies with EN 55022 Class a and CISPR22 Class a Declaration of Conformity SWL-1RK23-088 Bmsi Statement Class a Regulatory Information for Korea Trademarks Copyright Notice SonicWALL SRA 1200/4200 Getting Started Guide 60 Notes SonicWALL, Inc