SonicWALL TZ170SP How much memory is on the TZ 170 SP?, What does the ‘Opt. zone’ interface do?

How much memory is on the TZ 170 SP?

The TZ 170 SP contains 8MB of onboard, non-upgradeable flash, and 64MB of onboard, non-upgradeable RAM.

What kind of processor does the TZ 170 SP use?

The TZ 170 SP uses a multifunction MIPS RISC-based security processor that handles all processor-based I/O functions, as well as all crypto functions (3DES, AES, MD5/SHA-1, DH, and ESP) directly in hardware. This significantly speeds all crypto functions for VPN traffic.

What does the ‘Opt. zone’ interface do?

If the TZ 170 SP is running SonicOS 2.6 Standard, the ‘Opt. Zone’ interface is disabled and cannot be used. A future release of SonicOS Enhanced for the TZ 170 SP will enable this interface and allow it to be used as an additional internal interface, as a DMZ interface, or as a secondary WAN interface.

Can I run the TZ 170 SP in transparent mode?

No, it’s not possible to use transparent mode when running SonicOS Standard.

Can I change the default IP address of the LAN interface?

Yes. The devices ship with 192.168.168.168/24 as the default IP address, for the LAN interface but can be changed to any value. Please note that the new value will take effect as soon as the ‘OK’ button is clicked, so you will need to change the IP address of your management station to match the new IP subnet of the LAN interface, and then log back into the device to continue setup.

Can I assign multiple IP addresses to the LAN interface?

Yes, as long as they are from unique subnets.

How long does it take for the TZ 170 SP to start up?

The average startup time from power-on to operation is approximately one minute. The device performs a number of hardware and software diagnostic check routines upon warm and cold boots to ensure the device, modem, and firmware are fully operational.

I activated SonicWALL Content Filtering System (CFS) Premium, enabled all the categories, and none of the systems behind the SonicWALL can access any site on the public Internet – why?

SonicWALL CFS Premium Editions contain a large number of new categories that, if activated, will block systems from accessing sites that may seem innocuous, such as search engine portals, news media sites, and computer manufacturers’ Web sites. There is also a final category called ‘Not Rated’ that, if checked, will block access to any site that is not in the CFS Premium database. Because of this, you will need to carefully choose the appropriate categories for the CFS Premium policy applied to the SonicWALL’s zones.

I have AV enabled on an interface, but I can’t seem to install the client on my system – why?

The AV installation is done via browser and relies on a pop-up window to install properly. If you are not able to install the SonicWALL AV Client on a system, check to see if the system’s web browser is actively blocking pop-ups, or that it does not have a third-party program (such as ‘Pop-Up Stopper’) that is blocking the AV installation screen. In order to install the SonicWALL AV Client, you must allow pop-ups during this process.

Can I assign multiple public IP subnets to a WAN interface?

It is not currently possible to assign more than a single IP address to a primary or secondary WAN interface, but the device is capable of answering on behalf of a 1-2-1 NAT policy set up for a network resource. This is useful in environments where an ISP has assigned a customer multiple dissimilar public IP subnet blocks, and the customer wishes to use IP’s from these dissimilar blocks to provide access to internal network resources. What is required is for the ISP’s upstream routing be capable of routing these subnets to the fixed IP address of the primary or secondary WAN interfaces of the SonicWALL.

6