Sonicwall Secure Remote Access Solutions - SonicWALL TZ 180 Recommends Manual

SonicWALL Solutions Integration

SonicWALL Secure Remote Access Solutions

The SonicWALL SSL-VPN series provides organizations of any size with an affordable, simple and secure
clientless remote network and application access solution that requires no pre-installed client software.
Utilizing only a standard Web browser, users can easily and securely access email, files, intranets,
applications, remote desktops, servers and other resources on the corporate LAN from any location.
SonicWALL SSL-VPN solutions integrate seamlessly into virtually any wired or wireless network topology
to deliver powerful, scalable and affordable remote access to corporate resources.
For more information about SonicWALL SSL-VPN, refer to the SonicWALL SonicOS SSL-VPN
Administrator's Guide.
The SonicWALL SSL-VPN 200 appliance is a perfect complement to your TZ 180 security appliance to add
Web browser-based remote access and management for your users. Figure 17 provides an example of the
recommended deployment using SonicWALL SSL-VPN and TZ 180 security appliance. The SSL-VPN 200
allows users to access their desktops, your internal servers, and many other network devices, from anywhere
they need to – home, on the road, from a public Internet kiosk, and other remote locations – all without the
need to install or constantly update a VPN client. You don't need a separate public IP address, because you
can utilize the TZ 180 WAN IP address for access, or you can configure the IP to be dynamically obtained.
Figure 17 SonicWALL SSL-VPN Solution
TZ 180
Security Services
San Jose, USA
The SSL-VPN 200 can be installed and configured in minutes. For example, configure the TZ 180 OPT port
for NAT Mode and assign it an address of 192.168.200.2 with a netmask of 255.255.255.0. Then, deactivate
any HTTP and HTTPS access firewall policies for the WAN interface, which is used to allow remote users
to access to the SSL-VPN 200. Run the Public Server Wizard and specify the IP address of the SSL-VPN
200, 192.168.200.1 by default, and HTTP/HTTPS as the services to which access is provided. If the TZ 180
WAN IP address is dynamically obtained, use the DDNS feature to map a fully-qualified domain name
(FQDN) to the IP address so your users can enter the FQDN (for example, sslvpn.ddnsservice.com) to
access the SSL-VPN portal.
For information about detailed SSL-VPN configuration, including creating objects for users, refer to the
SonicWALL SonicOS SSL-VPN Administrator's Guide.
30 SonicWALL TZ 180 Recommends Guide