SonicOS Enhanced 5.0 Administrators Guide

Sections

Preface
Copyright Notice
Trademarks
Limited Warranty
About this Guide
Organization of this Guide
Guide Conventions
SonicWALL Technical Support
More Information on SonicWALL Products
Introduction
•“What’s New in SonicOS Enhanced 5.0” on page 25
What’s New in SonicOS Enhanced 5.0
SonicWALL Management Interface
•“Dynamic User Interface” on page 30
CHAPTER 3
System > Security Dashboard
•“SonicWALL Security Dashboard Overview” on page 39
SonicWALL Security Dashboard Overview
Using the SonicWALL Security Dashboard
•“Administrator Prerequisites” on page 42
•“Administrator Configuration Tasks” on page 42
•“SonicWALL Security Dashboard Configuration Overview” on page 42
Chapter4:Viewing Status Information
System > Status
Wizards
System Messages
System Information
Latest Alerts
Security Services
Registering Your SonicWALL Security Appliance
Network Interfaces
Chapter5:Managing SonicWALL Licenses
System > Licenses
Node License Status
Security Services Summary
Manage Security Services Online
Manual Upgrade
Manual Upgrade for Closed Environments
Chapter6:Configuring Administration Settings
System > Administration
•“Firewall Name” on page 57
•“Administrator Name & Password” on page 57
Firewall Name
Administrator Name & Password
Login Security Settings
Multiple Administrators
Web Management Settings
SSH Management Settings
Advanced Management
Tooltips
Download URL
Selecting UI Language
System > Certificates
Digital Certificates Overview
Certificates and Certificate Requests
Certificate Details
Importing Certificates
Deleting a Certificate
Generating a Certificate Signing Request
System > Time
System Time
NTP Settings
System > Schedules
Adding a Schedule
Deleting Schedules
System > Settings
Settings
Firmware Management
SafeMode - Rebooting the SonicWALL Security Appliance
FIPS
Chapter11:Using SonicWALL Packet Capture
System > Packet Capture
•“Packet Capture Overview” on page 87
Packet Capture Overview
•“What is Packet Capture?” on page 87
Using Packet Capture
•“Accessing Packet Capture in the UI” on page 90
•“Starting and stopping packet capture” on page 90
Accessing Packet Capture in the UI
•“About the Captured Packets Window” on page 91
Configuring Packet Capture
Verifying Packet Capture Activity
•“Understanding Status Indicators” on page 100
Related Information
System > Diagnostics
Tech Support Report
Diagnostic Tools
•“Active Connections Monitor” on page 107
Active Connections Monitor
Multi-Core Monitor
Core Monitor
CPU Monitor
Link Monitor
DNS Name Lookup
Find Network Path
Ping
Core 0 Process Monitor
Process Monitor
Real-Time Black List Lookup
Reverse Name Resolution
Trace Route
Web Server Monitor
System > Restart
Network > Interfaces
•“Setup Wizard” on page 120
•“Interface Settings” on page 120
Setup Wizard
Interface Settings
Interface Traffic Statistics
Physical and Virtual Interfaces
SonicOS Enhanced Secure Objects
Transparent Mode
Layer 2 Bridge Mode
Key Concepts to Configuring L2 Bridge Mode and Transparent Mode
•“Comparison of L2 Bridge Mode to Transparent Mode” on page 133
IPS Sniffer Mode
Configuring Interfaces
•“Configuring the X0 - X7 Interfaces (Static)” on page 143
Configuring Layer 2 Bridge Mode
•“Configuration Task List for Layer 2 Bridge Mode” on page 154
VPN Integration with Layer 2 Bridge Mode
Configuring IPS Sniffer Mode
•“Configuration Task List for IPS Sniffer Mode” on page 159
Network > DNS
Network > WAN Failover & Load Balancing
WAN Failover Caveats
Setting Up WAN Failover and Load Balancing
1.“Configuring an Interface as a Secondary WAN Port” on page 168
WAN Probe Monitoring
WAN Load Balancing Statistics
Network > Zones
How Zones Work
Predefined Zones
Security Types
Allow Interface Trust
Enabling SonicWALL Security Services on Zones
The Zone Settings Table
Adding a New Zone
Deleting a Zone
Configuring the WLAN Zone
Chapter17:Configuring Address Objects
Network > Address Objects
Types of Address Objects
Address Object Groups
Creating and Managing Address Objects
Default Address Objects and Groups
Adding an Address Object
Editing or Deleting an Address Object
Creating Group Address Objects
Public Server Wizard
Working with Dynamic Addresses
CHAPTER 18
Network > Routing
Route Advertisement
Route Policies
Advanced Routing Services (OSPF and RIP)
Configuring Advanced Routing Services
Chapter19:Configuring NAT Policies
Network > NAT Policies
•“NAT Policies Table” on page 227
NAT Policies Table
NAT Policy Settings Explained
NAT Policies Q&A
NAT Load Balancing Overview
Creating NAT Policies
•“Creating a Many-to-One NAT Policy” on page 236
•“Creating a Many-to-Many NAT Policy” on page 237
Creating a One-to-One NAT Policy for Outbound Traffic
Inbound Port Address Translation via One-to-One NAT Policy
Using NAT Load Balancing
•“NAT Load Balancing Topology” on page 246
•“Prerequisites” on page 246
Chapter20:Managing ARP Traffic
Network > ARP
Static ARP Entries
Secondary Subnets with Static ARP
Navigating and Sorting the ARP Cache Table
Navigating and Sorting the ARP Cache Table Entries
Flushing the ARP Cache
Chapter21:Setting Up the DHCP Server
Network > DHCP Server
DHCP Server Options Overview
•“What Is the SonicWALL DHCP Server Options Feature?” on page 257
•“Benefits” on page 257
•“How Does the SonicWALL DHCP Server Options Feature Work?” on page 257
•“Supported Standards” on page 257
DHCP Server Persistence Overview
•“What is DHCP Server Persistence?” on page 258
•“Benefits” on page 258
•“How Does DHCP Server Persistence Work?” on page 258
Enabling the DHCP Server
DHCP Server Lease Scopes
Configuring DHCP Server for Dynamic Ranges
Configuring Static DHCP Entries
Configuring SonicWALL DHCP Server Options
Current DHCP Leases
DHCP Option Numbers
Network > IP Helper
IP Helper Settings
IP Helper Policies
Adding an IP Helper Policy for DHCP
Adding an IP Helper Policy for NetBIOS
Editing an IP Helper Policy
Deleting IP Helper Policies
Chapter23:Setting Up Web Proxy Forwarding
Network > Web Proxy
Configuring Automatic Proxy Forwarding (Web Only)
Bypass Proxy Servers Upon Proxy Failure
Chapter24:Configuring Dynamic DNS
Network > Dynamic DNS
Supported DDNS Providers
Configuring Dynamic DNS
Dynamic DNS Settings Table
SonicPoint > SonicPoints
Before Managing SonicPoints
SonicPoint Provisioning Profiles
Configuring a SonicPoint Profile
SonicPoint > Station Status
SonicPoint > IDS
Wireless Intrusion Detection Services
Chapter28:Configuring Virtual Access Points
SonicPoint > Virtual Access Point
•“SonicPoint VAP Overview” section on page 309
SonicPoint VAP Overview
•“What Is a Virtual Access Point?” section on page 309
Prerequisites
Deployment Restrictions
SonicPoint Virtual AP Configuration Task List
•“SonicPoint VAP Configuration Overview” section on page 313
•“General” section on page 315
Thinking Critically About VAPs
•“Determining Your VAP Needs” section on page 324
•“A Sample Network” section on page 324
VAP Sample Configurations
•“Configuring a VAP for Guest Access” section on page 327
•“Configuring a Zone” section on page 327
•“Configuring a Zone” section on page 334
•Grouping Multiple VAPs, page 339
Chapter29:Configuring RF Management
SonicPoint > RF Management
RF Management Overview
•“Why RF Management?” section on page 344
•“Benefits” section on page 344
Enabling RF Management on SonicPoint(s)
Using The RF Management Interface
•“RF Management Interface Overview” section on page 346
Types of RF Threat Detection
Practical RF Management Field Applications
Using Sensor ID to Determine RF Threat Location
Chapter30:Configuring Access Rules
Firewall > Access Rules
Stateful Packet Inspection Default Access Rules Overview
Using Bandwidth Management with Access Rules Overview
Configuration Task List
•“Displaying Access Rules with View Styles” section on page 357
•“Enabling Ping” section on page 364
Firewall > Advanced
•Detection Prevention
•Dynamic Ports
•Source Routed Packets
Detection Prevention
Dynamic Ports
Source Routed Packets
Connections
Access Rule Service Options
IP and UDP Checksum Enforcement
Firewall > TCP Settings
TCP Settings
Layer 3 SYN Flood Protection - SYN Proxy
Layer 2 SYN/RST/FIN Flood Protection - MAC Blacklisting
TCP Traffic Statistics
Chapter33:Configuring Firewall Services
Firewall > Services
Default Services Overview
Custom Services Configuration Task List
Chapter34:Configuring Multicast Settings
Firewall > Multicast
Multicast Snooping
Multicast Policies
IGMP State Table
Enabling Multicast on LAN-Dedicated Interfaces
Enabling Multicast Through a VPN
Firewall > Connections Monitor
Viewing Connections
Filtering Connections Viewed
Chapter36:Managing Quality of Service
Firewall > QoS Mapping
•“Classification” section on page 399
Classification
Marking
Conditioning
802.1p and DSCP QoS
Example Scenario
Bandwidth Management
Outbound Bandwidth Management
Inbound Bandwidth Management
Glossary
Firewall > SSL Control
•“Overview of SSL Control” section on page 427
Overview of SSL Control
SSL Control Configuration
Enabling SSL Control on Zones
SSL Control Events
Chapter38:Configuring VoIP Support
VoIP
•“VoIP Overview” on page 441
VoIP Overview
•“What is VoIP?” on page 441
SonicWALL’s VoIP Capabilities
•“VoIP Security” on page 444
Configuring SonicWALL VoIP Features
Configuring VoIP Access Rules
Using the Public Server Wizard
VoIP Deployment Scenarios
Chapter39:Configuring Application Firewall
Application Firewall
•“Application Firewall Overview” on page 467
Application Firewall Overview
•“What is Application Firewall?” on page 467
Using Application Firewall
•“Configuration Overview” on page 482
•“Configuring Global Settings” on page 482
•“Configuring Application Objects” on page 486
Useful Tools
Use Cases
•“Blocking Outbound Proprietary Files Over FTP” on page 509
Chapter40:Configuring VPN Policies
VPN > Settings
VPN Overview
•“Configuring VPNs in SonicOS Enhanced” section on page 530
Configuring VPNs in SonicOS Enhanced
•“Configuring GroupVPN Policies” section on page 539
Configuring GroupVPN Policies
Site-to-Site VPN Configurations
Creating Site-to-Site VPN Policies
VPN Auto-Added Access Rule Control
Chapter41:Configuring Advanced VPN Settings
VPN > Advanced
Advanced VPN Settings
Using OCSP with SonicWALL Security Appliances
Chapter42:Configuring DHCP Over VPN
VPN > DHCP over VPN
DHCP Relay Mode
Configuring the Central Gateway for DHCP Over VPN
Configuring DHCP over VPN Remote Gateway
Current DHCP over VPN Leases
Chapter43:Configuring L2TP Server
VPN > L2TP Server
Configuring the L2TP Server
User Management
•“Introduction to User Management” on page 585
Introduction to User Management
•“What Is Single Sign-On?” section on page 591
•“Benefits” section on page 591
•“What is Multiple Administrators Support?” section on page 596
•“Benefits” section on page 596
•“Configuration Modes” section on page 597
Viewing Status on Users > Status
Configuring Settings on Users > Settings
•“User Login Settings” on page 600
Configuring Local Users
•“Viewing, Editing and Deleting Local Users” on page 604
Configuring Local Groups
•“Creating a Local Group” on page 608
Configuring RADIUS Authentication
Configuring LDAP Integration in SonicOS Enhanced
•“Preparing Your LDAP Server for Integration” on page 615
Configuring Single Sign-On
•“Installing the SonicWALL SSO Agent” section on page 626
•“Configuring the SonicWALL SSO Agent” section on page 629
Configuring Multiple Administrator Support
•“Configuring Additional Administrator User Profiles” section on page 650
Users > Guest Services
Global Guest Settings
Guest Profiles
Users > Guest Accounts
Viewing Guest Account Statistics
Adding Guest Accounts
Enabling Guest Accounts
Enabling Auto-prune for Guest Accounts
Printing Account Details
Users > Guest Status
Logging Accounts off the Appliance
Chapter46:Setting Up High Availability
High Availability
How High Availability Works
Stateful High Availability Overview
•“What is a Stateful High Availability?” on page 669
•“Benefits” on page 669
High Availability License Synchronization Overview
•“What is High Availability License Synchronization?” on page 672
What is High Availability License Synchronization?
Stateful and Non-Stateful High Availability Prerequisites
Associating Appliances on MySonicWALL for High Availability
•“Configuration Overview” on page 676
•“Associating an Appliance at First Registration” on page 677
•“Replacing an HA Primary Unit” on page 683
•“Replacing an HA Secondary Unit” on page 683
Configuring High Availability in SonicOS
Synchronize Settings
Interface Monitoring in High Availability
Verifying High Availability Status
Applying Licenses to SonicWALL Security Appliances
SonicWALL Security Services
Managing Security Services Online
Security Services Settings
UTM Clustering
Security Services Information
Update Signature Manually
Activating Security Services
CHAPTER 48
Security Services > Content Filter
SonicWALL Content Filtering Service
Content Filter Status
Content Filter Type
Restrict Web Features
Trusted Domains
CFS Exclusion List
Message to Display when Blocking
Configuring SonicWALL Filter Properties
•“CFS” on page 711
Policy
Custom List
Consent
Configuring N2H2 Internet Filtering
N2H2 Properties
Configuring SonicWALL Blocking Features
Configuring Websense Enterprise Content Filtering
Websense Properties
Chapter49:Activating SonicWALL Client Anti-Virus
Security Services > Anti-Virus
Activating SonicWALL Client Anti-Virus
Activating a SonicWALL Client Anti-Virus FREE TRIAL
Configuring Client Anti-Virus Service
Security Services > E-mail Filter
Chapter50:Managing SonicWALL Gateway Anti- Virus Service
Security Services > Gateway Anti-Virus
SonicWALL GAV Multi-Layered Approach
HTTP File Downloads
SonicWALL GAV Architecture
Creating a mysonicwall.com Account
Activating the Gateway Anti-Virus, Anti-Spyware, and IPS License
Activating FREE TRIALs
Setting Up SonicWALL Gateway Anti-Virus Protection
Step 2Apply SonicWALL Gateway Anti-Virus Protection to zones
Enabling SonicWALL GAV
Applying SonicWALL GAV Protection on Interfaces
Applying SonicWALL GAV Protection on Zones
Viewing SonicWALL GAV Status Information
Updating SonicWALL GAV Signatures
Specifying Protocol Filtering
Enabling Inbound Inspection
Enabling Outbound SMTP Inspection
Restricting File Transfers
Configuring Gateway AV Settings
Configuring HTTP Clientless Notification
Configuring a SonicWALL GAV Exclusion List
Viewing SonicWALL GAV Signatures
Chapter51:Activating Intrusion Prevention Service
Security Services > Intrusion Prevention Service
SonicWALL Deep Packet Inspection
How SonicWALL’s Deep Packet Inspection Works
SonicWALL IPS Terminology
SonicWALL Gateway Anti-Virus, Anti-Spyware, and IPS Activation
Setting Up SonicWALL Intrusion Prevention Service Protection
Chapter52:Activating Anti-Spyware Service
Security Services > Anti-Spyware Service
Setting Up SonicWALL Anti-Spyware Service Protection
SMTP Real-Time Black List Filtering
Security Services > RBL Filter
Adding RBL Services
User-Defined SMTP Server Lists
Security Services > Global Security Client
Global Security Client Features
How SonicWALL Global Security Client Works
Global Security Client Licensing
Activating Global Security Client Licenses on Your SonicWALL
Configuring Security Policies for Global Security Clients
Log > View
Log View Table
Refresh
Clear Log
Export Log
E-mail Log
Filtering Log Records Viewed
Log Event Messages
Chapter56:Configuring Log Categories
Log > Categories
Log Priority
Log Categories
Chapter57:Configuring Syslog Settings
Log > Syslog
Syslog Settings
Syslog Servers
Chapter58:Configuring Log Automation
Log > Automation
E-mail Log Automation
Mail Server Settings
Chapter59:Configuring Name Resolution
Log > Name Resolution
Selecting Name Resolution Settings
Specifying the DNS Server
Log > Reports
Data Collection
View Data
Chapter61:Activating SonicWALL ViewPoint
Log > ViewPoint
Activating ViewPoint
Enabling ViewPoint Settings
Wizards > Setup Wizard
Using the Setup Wizard
Configuring a Static IP Address with NAT Enabled
Configuring DHCP Networking Mode
Configuring NAT Enabled with PPPoE
Configuring PPTP Network Mode
Chapter63:Using the Registration & License Wizard
Wizards > Registration & License Wizard
Wizards > Public Server Wizard
Wizards > VPN Wizard
Using the VPN Policy Wizard
Connecting the Global VPN Clients
Configuring a Site-to-Site VPN using the VPN Wizard
Chapter66:Using the Application Firewall Wizard
Wizards > Application Firewall Wizard
Index

Info and Rating

Category:

Uncategorized.

Rating:

Upload Date:

07/14/2011

Attribution Non-commercial

Tags:

No tags

ebook download or readfalse online.

Flag for inappropriate content

SonicOS Enhanced 5.0 Administrators Guide

Sections

Info and Rating

Download and Print this Document

Choose a format to download in

Choose a format to download in

Download and Print this Document

Choose a format to download in

Recommended

Recommended

SonicOS Enhanced 5.0 Administrators Guide

Sections

Info and Rating

Download and Print this Document

Choose a format to download in

Choose a format to download in

Download and Print this Document

Choose a format to download in

Recommended

Recommended

Other login options

Why Sign Up?

Login Successful

Sign Up Successful