SonicWALL SMA 210 Deployment Manual page 13

Starting IP address Start of the NetExtender IP
Ending IP address
7 On the Network > Address Objects page, click the Address Groups tab.
8 Click Add Group.
9 In the Add Address Object Group dialog box, create a group for the X0 interface IP address of your SMA
appliance and the NetExtender IP range:
• Enter a name for the group.
• In the left column, select the address objects you created and click the right arrow button.
• Click OK to create the group when both objects are in the right column.
10 On the Network > Interfaces page, verify that the assigned zone is DMZ for the interface connected to
your SMA appliance.
11 Navigate to the Firewall > Access Rules page, and select the Matrix view style.
12 Click the DMZ > LAN icon.
13 On the page that displays for DMZ to LAN, click Add.
14 In the Add Rule window, create a rule to allow access to the LAN for the address group you just created:
From
To
Service Port
Service
address range within your DMZ
range, such as 10.1.1.220.
End of the NetExtender IP
address range within your DMZ
range, for example 10.1.1.249.
DMZ
LAN
Any
Any
SMA 210/410 Deployment Guide
Connecting the SMA on an Existing DMZ
13