Advertisement

Quick Links

Dell™ Safeguard 5242LR
Getting Started Guide
Regulatory Model Number: 1RK32-0B2
Dell - Restricted - Confidential

Advertisement

Table of Contents
loading

Summary of Contents for Dell Safeguard 5242LR

  • Page 1 Dell™ Safeguard 5242LR Getting Started Guide Regulatory Model Number: 1RK32-0B2 Dell - Restricted - Confidential...
  • Page 2 The information in this document is provided in connection with Dell products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Dell products. EXCEPT AS SET FORTH IN THE TERMS AND...
  • Page 3 Safeguard 5242LR Getting Started Guide Updated - 6/3/15 232-002785-50 Rev A Dell - Restricted - Confidential...
  • Page 4 Dell, the Dell logo, SonicWALL, and all other SonicWALL product and service names and slogans are trademarks of Dell Inc. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. Dell disclaims any proprietary interest in the marks and names of others.
  • Page 5 Introduction to the Safeguard 5242LR This section describes the items shipped with the Dell Safeguard 5242LR appliances and provides front and rear illustrations of them. Dell - Restricted - Confidential Dell Secure Mobile Access 6200/7200 Getting Started Guide...
  • Page 6 4 One Ethernet cable 5 Two power cords * 6 One Dell Safeguard Safeguard 5242LR Getting Started Guide *The included power cord(s) are approved for use only in specific countries or regions. Before using a power cord, verify that it is rated and approved for use in your location.
  • Page 7   Figure 1. Package contents   If any items are missing from your package, contact Support at https://support.software.dell.com. Dell - Restricted - Confidential...
  • Page 8   Safeguard 5242LR front panels LCD Controls 2.5” HDD * 4 Dell - Restricted - Confidential...
  • Page 9   Safeguard 5242LR back panels Gigabit Ports Display Port SFP+ Ports Redundant Power Supply Management Port Console Port USB 3.0 & eSATA Ports LED Indicators Dell - Restricted - Confidential...
  • Page 10 Preparing to deploy the Safeguard 5242LR This section provides an overview of single-homed and dual-homed network architecture and discusses firewall settings and other information you need about components of your network to successfully deploy the Safeguard 5242LR. Network architecture •...
  • Page 11: Network Architecture

    Network architecture Safeguard 5242LR appliance can be set up in either a dual interface or single interface configuration, also known as dual-homed and single-homed. In either configuration, appliance management with AMC is accomplished by accessing the internal (X0) interface. This guide steps you through a basic single-homed interface configuration. For the highest level of security, performance, and in cluster mode, Dell recommends a dual-homed configuration.
  • Page 12 (or DMZ, also known as a perimeter network). In both configurations, incoming requests to the Safeguard 5242LR services—including HTTP/S traffic for the Web proxy service—are sent over port 80 (HTTP) and port 443 (HTTPS). Traffic from the OnDemand agent is always sent over port 443.
  • Page 13 Optionally, a Windows Internet Name Service (WINS) server. This is required for browsing Windows networks using • WorkPlace. The Safeguard 5242LR appliance does not CAUTION: provide full firewall capabilities and should be secured behind a firewall. Running without a firewall makes the appliance vulnerable to attacks that can compromise security and degrade performance.
  • Page 14: Preparing For The Installation

    The name for the appliance (because this name is used only in log files, you do not need to add it to DNS) • The internal IP address and, optionally, an external IP address • Select a routing mode and supply IP addresses for the network gateways to the Internet, and your corporate network. • Certificate information Dell - Restricted - Confidential...
  • Page 15 To synchronize with an NTP server, you need to know the IP addresses for one or more NTP servers. • To send data to a syslog server, you need to know the IP address and port number for one or more syslog servers. • Dell - Restricted - Confidential...
  • Page 16 Opening your firewall to permit SSH access is optional, but can be useful for performing administrative tasks from a remote system. Table 1. External firewall Traffic Port/ Usage Required? Type protocol HTTP 80/tcp Unencrypted network access HTTPS 443/tcp Encrypted network access 22/tcp Administrative access to the application Dell - Restricted - Confidential...
  • Page 17 138/tcp and Used by WorkPlace to networking 138/udp perform WINS name resolution, browse 137/tcp and requests, and access 137/udp file shares 139/udp 162/snmp 445/smb LDAP 389/tcp Communicate with an (unencrypted LDAP directory or Microsoft Active Directory Dell - Restricted - Confidential...
  • Page 18 About installation and deployment This section outlines the process of installing, configuring, and testing the appliance, and then deploying it in a production environment. Installation and deployment process provides an overview of the steps. Dell - Restricted - Confidential...
  • Page 19 IP address, the subnet mask, and indicate whether your appliance is part of a cluster. Use the controls on the front of the appliance. See Entering network settings using the on page 24. Dell - Restricted - Confidential...
  • Page 20 Register your appliance on appliance on MySonicwall. Product registration MySonicwall. gives you access to essential resources, such as your license file and updates. To register, you need both the serial number for your appliance and its authentication code. Dell - Restricted - Confidential...
  • Page 21: Installation And Configuration

    Installation and configuration This section provides the steps to perform the initial installation and settings configuration of the Dell Safeguard 5242LR. For more detailed information, the SMA Administration Guide has complete instructions for installing your Safeguard 5242LR appliance. Connecting the appliance •...
  • Page 22: Starting The Appliance

    For the Safeguard 5242LR, plug the power cords to the power supply sockets on the appliance back and then connect the cords to AC outlets. For best reliability, connect the two cords of the Safeguard 5242LR to outlets on different circuits.
  • Page 23 The default internal (X0) IP address is 192.168.0.10. To change the IP address, use the Left and Right buttons to position your cursor over the number you want to change, and then use Up and Down to change the number. Press Right to continue to the next screen. 3 Enter your subnet mask. Dell - Restricted - Confidential...
  • Page 24: Running The Setup Wizard

    5 Review your settings and apply them, then wait until the LCD screen displays Setup is complete. Running the Setup Wizard After the LCD configuration steps, the Setup Wizard continues the initial setup for your Safeguard 5242LR appliance. To run the Setup Wizard: 1 Configure your management computer with a static IP address on the same subnet as your internal (X0) interface.
  • Page 25 5 When ready, click Finish to apply your settings. The appliance restarts, which causes you to lose your current connection. Wait a few minutes and then point your browser to the X0 IP address and port 8443 to connect to the Appliance Management Console (AMC). https://<IP address>:8443 Dell - Restricted - Confidential...
  • Page 26 AMC is the Web-based application used to administer the appliance. Appliance management with AMC is NOTE: accomplished by accessing the internal interface. The appliance cannot be managed by a direct connection to the external interface. Dell - Restricted - Confidential...
  • Page 27 Type admin in the Username field, and then enter the password you created with the Setup Wizard. Both are case-sensitive. Click Login to log into the Management Console. Configuring basic WorkPlace portal access For access from the WAN, you need an authentication server, a realm, a user, and an access rule. Dell - Restricted - Confidential...
  • Page 28 5 In the Name field, type in a name for the local authentication server. 6 Click Save. Creating a basic realm A realm references an authentication server and determines which access agents are provisioned to your users and what end point control restrictions are imposed. Dell - Restricted - Confidential...
  • Page 29 4 In the Username field, type in a name for the local user. 5 In the Password field, type in a password for the local user. 6 Clear the User must change password at next login checkbox. 7 Click Save. Dell - Restricted - Confidential...
  • Page 30 3 In the Custom FQDN field, type in the configured internal or external IP address of the appliance. This field should match the IP address or hostname of the appliance as the user would access it. 4 Click Save. Dell - Restricted - Confidential...
  • Page 31 Configuring an access rule The Safeguard 5242LR appliance uses a granular access policy to determine what backend resources a given user is allowed to access. To configure a default access rule to allow any user to access resources through the appliance: 1 Navigate to the Security Administration >...
  • Page 32 1 Point your browser to https://<IP address> where <IP address> matches the address you defined for the internal or external network interface. The default internal IP address is 192.168.0.10. 2 In the portal login screen, enter the username and password for the local user. 3 Click Login. Dell - Restricted - Confidential...
  • Page 33 This section describes how to register your Dell Safeguard 5242LR and then download the license file from MySonicWALL. You can register your Safeguard 5242LR appliance before or after you initialize or deploy it. Registration provides access to essential resources, such as your license file, firmware updates, documentation, and technical support information.
  • Page 34: Creating A Mysonicwall Account

    MySonicWALL is used during registration of your Dell SonicWALL appliance and to activate or purchase licenses for security services, support, or software specific to your Dell SonicWALL device. For a High Availability configuration, MySonicWALL provides a way to associate a backup unit that can share security service licenses with your primary appliance.
  • Page 35: Registering Your Appliance

    4 Enter a friendly name for this appliance. 5 Click Register to continue, and follow the online prompts to fill out the survey and complete the registration process. Continue with the next section to download the appliance license file from MySonicWALL. Dell - Restricted - Confidential...
  • Page 36 You must import this license file using AMC. Importing your licenses The SMA appliance uses a few different types of licenses. All license files must be retrieved from www.MySonicwall.com and imported to the appliance, as follows: Dell - Restricted - Confidential...
  • Page 37 Appliance licenses: The number of concurrent users supported with the appliance license varies, depending on the • appliance model you have: Safeguard 5242LR: up to 10,000 users • Component licenses: If the license for an appliance component (such as OnDemand) has expired, users attempting to use •...
  • Page 38 AMC. Do not click the Activate link until you are ready to start using it. Dell - Restricted - Confidential...
  • Page 39: Rack Mounting The Appliance

    This section provides instructions and illustrations for rack mounting the Dell Safeguard 5242LR. The Safeguard 5242LR appliance is designed to be mounted in a standard 19-inch rack. The product packaging contains a slide rail kit for mounting the appliance in a four-post cabinet. Before installing the appliance in an equipment rack, the rails must be attached to the appliance and to the rack posts.
  • Page 40 Dell - Restricted - Confidential...
  • Page 41 Dell - Restricted - Confidential...
  • Page 42: Installing The Outer Rails

    1 Attach the rail to the posts of the rack by using three rack screws. 2 Extend the outer back rail to the back of the rack and firmly attach it with two rack screws. 3 Repeat step 1 and 2 to install the other rail. Dell - Restricted - Confidential...
  • Page 43 Dell - Restricted - Confidential...
  • Page 44: Installing The Appliance In The Rack

    1 Pull the appliance half way out to the lock position. 2 Press the rail lock release tabs on both sides while pulling the appliance towards you until past the tabs. Continue to pull the appliance until it is fully removed from the outer rails. Dell - Restricted - Confidential...
  • Page 45 Dell - Restricted - Confidential...
  • Page 46 Dell - Restricted - Confidential...
  • Page 47: Safety And Regulatory Information

    Safety and regulatory information Safety information for the Safeguard 5242LR appliance Model Product 1RK32-0B2 Safeguard 5242LR Dell - Restricted - Confidential...
  • Page 48: Safety Instructions

    Safety instructions The following conditions are required for proper installation: The Dell Safeguard 5242LR appliance is designed to be mounted in a standard 19-inch rack mount cabinet. • Use the mounting hardware recommended by the rack manufacturer and ensure that the rack is adequate for the •...
  • Page 49 Therefore, consideration should be given to installing the equipment in an environment compatible with the maximum recommended ambient temperature. Mount the Dell SonicWALL appliances evenly in the rack in order to prevent a hazardous condition caused by uneven •...
  • Page 50 Dell authorized service center for replacement with the same or equivalent type recommended by the manufacturer. If, for any reason, the battery or Dell Safeguard 5242LR Internet security appliance must be disposed of, do so following the battery manufacturer's instructions.
  • Page 51 Temperatur in der Gehäuse höher sein als die Umgebungstemperatur. Achten Sie darauf, daß die Umgebungstemperatur nicht mehr als 40° C beträgt. Bringen Sie die Dell SMA waagerecht im Rack an, um mögliche Gefahren durch ungleiche mechanische Belastung zu • vermeiden.
  • Page 52: Hinweis Zur Lithiumbatterie

    Die in der Internet Security Appliance von Dell verwendete Lithiumbatterie darf nicht vom Benutzer ausgetauscht werden. Zum Austauschen der Batterie muss die Dell SonicWALL in ein von Dell autorisiertes Service-Center gebracht werden. Dort wird die Batterie durch denselben oder entsprechenden, vom Hersteller empfohlenen Batterietyp ersetzt. Beachten Sie bei einer Entsorgung der Batterie oder der Dell Internet Security Appliance die diesbezüglichen Anweisungen des Herstellers.
  • Page 53 • 裝置週邊請保持通風,特別是裝置通風口側。建議裝置與牆壁間至少要有 1 英吋 (25.44 公釐) 的淨空。 • 纜線的路徑應遠離電源線、日光燈,以及會產生雜訊的來源,如無線電、發送器與寬頻放大器。 • 本產品的設計目的不是安裝並使用於住家或一般大眾可接觸到的公共區域。如果是安裝在學校,本設備只能安裝在受訓人員能 • 接觸到的安全位置。 架設位置需遠離陽光直射與熱源。建議周圍溫度最高溫不 要超過 104°F (40°C)。 • 如果是安裝於封閉式或多組機架配件,機架環境的周圍操作溫度可能會高過室內周遭。因此,在與上述建議之最高周圍溫度相 • 容的環境中安裝設備時,應將此列入考量。 將 戴爾SonicWALL裝置平坦地裝設在機架中,如此才能避免因不均勻的機械負荷造成危險狀況。 • 必須使用四顆與機架設計相容的安裝螺釘,並用手鎖緊螺釘,確定安裝牢固。選擇一個安裝位置,將四個裝載洞孔對齊 19 吋 • 架設機櫃的安裝桿。 應當提供一個合適額定值並且已被認可的分支電路斷路器作為安裝該裝置的一部分。在購買材料或部件時,應遵循當地安全代 • 碼。 必須留心裝置與電源電路的連接問題,電路過載對過電流保護與電路電線的影響需降至最低。解決這個問題時,需正確考慮裝 • 置銘牌額定值。不要過載電路。 Dell - Restricted - Confidential...
  • Page 54 • 要斷開交流電源,兩條電源線都必須被拔除。 • 隨附的電源線僅限於特定的國家或地區使用。使用前,請確認電源線的額定值且已被認可在你的地區上使用。 • 切勿在交流電源線還連接著電源時移除或安裝電源。 • 當安裝及後續接觸產品背面之後,必須用工具將指旋螺釘鎖緊。 • 當使用光纖小型可插拔(SFP)模塊,確保它是IEC60825認證。 • 鋰電池警告 使用者不得自行更換 戴爾SMA 網際網路安全性裝置中使用的鋰電池。必須將 戴爾SMA 送回 SMA授權的服務中心,以更換相同 戴爾 的鋰電池或製造商推薦的同類型鋰電池 。 若因任何原因必須丟棄電池或 SMA 網際網路安全性裝置 , 請嚴格遵守電池製造商的指示。 戴爾 纜線連結 所有乙太網路與 RS232 (主控台) 線路都是為與其他裝置進行內建連接所設計的。請不要將這些連接埠直接連接至通訊線路,或其他連 出 戴爾SMA 所在建築的線路。 Dell - Restricted - Confidential...
  • Page 55 Regulatory information for Safeguard 5242LR Model Product 1RK32-0B2 Safeguard 5242LR Additional regulatory notifications and NOTE: information for this product can be found online at: Dell - Restricted - Confidential...
  • Page 56 EU and EFTA Declaration of conformity A “Declaration of Conformity” in accordance with the directives and standards has been made and is on file at Dell Inc. Products Europe BV, Limerick, Ireland. CE declarations can be found online at www.dell.com.
  • Page 57 For further information, refer to: http://www.dell.com/regulatory_compliance Dell - Restricted - Confidential...

This manual is also suitable for:

1rk32-0b2

Table of Contents