Download Print this page

Advertisement

Quick Links

SonicWALL Network Security Appliances
NSA 2400MX
NET WORK SECURIT Y
Getting Started Guide

Advertisement

loading
Need help?

Need help?

Do you have a question about the NSA 2400MX and is the answer not in the manual?

Questions and answers

Summary of Contents for SonicWALL NSA 2400MX

  • Page 1 SonicWALL Network Security Appliances NSA 2400MX NET WORK SECURIT Y Getting Started Guide...
  • Page 2 SonicWALL NSA 2400MX Getting Started Guide This Getting Started Guide provides instructions for basic installation and configuration of the SonicWALL Network Security Appliance (NSA) 2400MX running SonicOS Enhanced. Setup Step Procedure Est. Time Pre-Configuration Tasks - page 1 Registering Your Appliance...
  • Page 3 SonicWALL NSA 2400MX Front Panel Status Lights LAN Port (X0) Provides dedicated LAN/WAN port status as follows: module 0 is inserted Provides LAN connectivity module 1 is inserted ALARM minor/major alarm* 10/100 Ethernet (X2-X17) TEST firmware loading/booting/safemode* POWER Provide 10/100 Ethernet connectivity...
  • Page 4 On (I) and Off (o) power switch for the SonicWALL appliance AC Power Supply AC power connection for use with the supplied power cable M1 / M0 Expansion Bays Expansion bays for additional SonicWALL modular accessories SonicWALL NSA 2400MX Getting Started Guide Page iii...
  • Page 5 Page iv SonicWALL NSA 2400MX Front Panel...
  • Page 6 Pre-Configuration Tasks In this Section: This section provides pre-configuration information. Review this section before setting up your SonicWALL NSA 2400MX appliance. • Checking NSA 2400MX Package Contents - page 2 • Obtaining Configuration Information - page 3 • Verifying System Requirements...
  • Page 7 Checking NSA 2400MX Package Contents Any Items Missing? Before setting up your SonicWALL NSA appliance, verify that your If any items are missing from your package, package contains the following parts: please contact SonicWALL support. A listing of the most current support documents are available online •...
  • Page 8 ISP that assigns a static IP address. refer to <http://www.sonicwall.com/us/support.html>. Administrator Information Admin Name: Select an administrator account name. (default is admin) Admin Password: Select an administrator password. (default is password) SonicWALL NSA 2400MX Getting Started Guide Page 3...
  • Page 9 Verifying System Requirements Before you begin the setup process, verify that you have: • An Internet connection • A Web browser supporting Java Script and HTTP uploads. Supported browsers include the following: Accepted Browser Version Browser Number Internet 6.0 or higher Explorer Firefox 3.0 or higher...
  • Page 10 Upgrading Firmware on Your SonicWALL - page 9 Note: Registration is an important part of the setup process and is necessary to receive the benefits of SonicWALL security services, firmware updates, and technical support. SonicWALL NSA 2400MX Getting Started Guide...
  • Page 11 Purchasing a New Service - page 8 Product Registration You must register your SonicWALL security appliance on MySonicWALL to enable full functionality. Login to your MySonicWALL account. If you do not have an account, you can create one at www.mysonicwall.com.
  • Page 12 If your initial purchase included security services or other software bundled with the appliance, these licenses are enabled on MySonicWALL when the SonicWALL appliance is The following list highlights several products and services that delivered to you and reflected in the Service Management page are available for the SonicWALL NSA 2400MX: on MySonicWALL.
  • Page 13 The key is added to the license keyset. You can use the license keyset to manually apply all active licenses to your SonicWALL appliance. The service management screen will display the product you licensed with an expiration date when activation is complete.
  • Page 14 The System Backup Although your SonicWALL ships with the most current firmware shows you the current configuration and firmware in a single, available at the time of manufacture, firmware upgrades that clickable restore image.
  • Page 15 Upgrading the Firmware with Current Settings Using SafeMode to Upgrade Firmware Perform the following steps to upload new firmware to your If you are unable to connect to the SonicWALL security SonicWALL appliance and use your current configuration appliance’s management interface, you can restart the settings upon startup.
  • Page 16 (admin / password) to access the SonicWALL management interface. Note: Remember to change your IP address settings back to DHCP. Otherwise, you may not be able to connect to the Internet. SonicWALL NSA 2400MX Getting Started Guide Page 11...
  • Page 17 Page 12...
  • Page 18 Verifying WAN (Internet) Connectivity - page 21 Tip: Before completing this section, fill out the information in Obtaining Configuration Information - page 3. You will need to enter this information during the Setup Wizard. SonicWALL NSA 2400MX Getting Started Guide Page 13...
  • Page 19 The Power LED on the front panel lights up blue when you X1 (WAN) X0 (LAN) plug in the SonicWALL NSA. The Test LED will light up and may blink while the appliance performs a series of diagnostic tests. Internet...
  • Page 20 Select your scenario from one of the following: NAT/Route Mode Gateway Layer 2 Bridge Mode For installations with a single SonicWALL NSA 2400MX, For installations where the SonicWALL NSA 2400MX is configured as an Internet or network gateway. running in tandem with an existing network gateway.
  • Page 21 Internet or network gateway. The Setup Wizard launches only upon initial loading of the In this scenario, the SonicWALL NSA 2400MX is configured in SonicWALL NSA management interface. NAT/Route mode to operate as a single network gateway. Two Internet sources may be routed through the SonicWALL appliance for load balancing and failover purposes.
  • Page 22 Troubleshooting Initial Setup A simplified example below shows zones configured with multiple VLANs including: If you cannot connect to the SonicWALL NSA appliance or the X1: WAN Zone Setup Wizard does not display, verify the following X2-X5: WLAN Zone configurations: X18-X21: 1st Floor LAN Clients (QA Lab, DMZ) •...
  • Page 23 Setup for Layer 2 Bridge Mode Accessing the Management Interface The computer you use to manage the SonicWALL NSA Series For installations where the SonicWALL NSA 2400MX is must be set up to have an unused IP address on the running in tandem with an existing network gateway.
  • Page 24 Connection Overview Configuring the Primary Bridge Interface Connect the X1 port on your SonicWALL NSA 2400MX to the The primary bridge interface is your existing Internet gateway LAN port on your existing Internet gateway device. Then device. The only step involved in setting up your primary bridge connect the X0 port on your SonicWALL to your LAN.
  • Page 25 Configuring the Secondary Bridge Interface Complete the following steps to configure the X0 interface on the SonicWALL appliance as a secondary bridged interface: Navigate to Network > DHCP Server In the DHCP Server Lease Scopes section, uncheck the Enable checkbox for the X0 interface DHCP scope.
  • Page 26 Select the servers you wish to test, or select all. Click the Test All Selected button to test connectivity to these servers. Note: Services which are not licensed on your installation will show up as “failed” in the connectivity test. SonicWALL NSA 2400MX Getting Started Guide Page 21...
  • Page 27 Page 22 Verifying WAN (Internet) Connectivity...
  • Page 28 Enabling Essential Security Services In this Section: Security services are an essential component of a secure network deployment. This section provides instructions for enabling security services on your SonicWALL NSA 2400MX appliance. • Activating Licenses in SonicOS - page 24 •...
  • Page 29 MySonicWALL. It is available on <http://www.sonicwall.com> Enable and configure applicable security services: the top of the Service Management page for your SonicWALL • Enabling Gateway Anti-Virus - page 25 NSA appliance.
  • Page 30 Selecting the Prevent All and Detect All check boxes for High Priority Attacks and Medium Priority Attacks protects your network against the most dangerous and disruptive attacks. Click the Accept button. Click the Accept button. SonicWALL NSA 2400MX Getting Started Guide Page 25...
  • Page 31 Select the Enable Anti-Spyware checkbox. Select the Prevent All and Detect All checkboxes for each Note: If the service is not registered yet, click the SonicWALL spyware danger level that you want to prevent. Comprehensive Anti-Spam Service Trial link or register Select the inbound Protocols you wish to inspect.
  • Page 32 Address From: field and the last address into the IP Address To: field. Click OK. The IP address range is added to the CFS Exclusion List. On the Security Services > Content Filter page, click Accept. SonicWALL NSA 2400MX Getting Started Guide Page 27...
  • Page 33 DMZ or Wireless LAN (WLAN), you must apply the security services to the network zones. For example, you can configure SonicWALL Intrusion Prevention Service for incoming and outgoing traffic on the WLAN zone to add more security for internal network traffic.
  • Page 34: Table Of Contents

    Support and Training Options In this Section: This section provides overviews of customer support and training options for the SonicWALL NSA 2400MX. • Customer Support - page 30 • Knowledge Base - page 30 • SonicWALL Live Product Demos - page 31 •...
  • Page 35: Customer Support

    Customer Support Knowledge Base For answers to all your support questions visit the SonicWALL The Knowledge Base allows users to search for SonicWALL support Web site at <http://www.sonicwall.com/us/ documents based on the following types of search tools: Support.html> where you will find featured support topics, •...
  • Page 36: Sonicwall Live Product Demos

    SonicWALL Live Product Demos Get the most out of your appliance with the complete line of SonicWALL products. The SonicWALL Live Demo Site provides free test drives of SonicWALL security products and services through interactive live product installations: • Unified Threat Management Platform •...
  • Page 37: User Forums

    User Forums The SonicWALL User Forums is a resource that provides users the ability to communicate and discuss a variety of security and appliance subject matters. In this forum, the following categories are available for users: • Content Security Manager topics •...
  • Page 38: Training

    Training SonicWALL offers an extensive sales and technical training curriculum for Network Administrators, Security Experts and SonicWALL Medallion Partners who need to enhance their knowledge and maximize their investment in SonicWALL Products and Security Applications. SonicWALL Training provides the following resources for its customers: •...
  • Page 39: Related Documentation

    Radio Frequency Monitoring • Single Sign-On • SSL Control • Virtual Access Points • SonicWALL GMS 5.0 Administrator’s Guide • SonicWALL GVC 4.0 Administrator’s Guide • SonicWALL ViewPoint 5.0 Administrator’s Guide • SonicWALL GAV 4.0 Administrator’s Guide • SonicWALL IPS 2.0 Administrator’s Guide •...
  • Page 40: Sonicwall Secure Wireless Network Integrated Solutions Guide

    “secure” wireless network? Check out the SonicWALL Secure Wireless Network Integrated Solutions Guide. This book is the official guide to SonicWALL’s market- leading wireless networking and security devices. This title is available in hardcopy at fine book retailers everywhere, or by ordering directly from Elsevier Publishing at: <http://www.elsevier.com>...
  • Page 41 Page 36 SonicWALL Secure Wireless Network Integrated Solutions Guide...
  • Page 42 - page 40 • CISPR 22 (EN 55022) Class A - page 40 • Regulatory Information for Korea - page 40 • Copyright Notice - page 41 • Trademarks - page 41 SonicWALL NSA 2400MX Getting Started Guide Page 37...
  • Page 43 Lithium Battery Warning required for proper installation: The Lithium Battery used in the SonicWALL Internet security appliance may not be replaced by the user. The SonicWALL must be returned to a • Use the mounting hardware recommended by the rack manu-...
  • Page 44 Störquellen wie Funksendern oder Breitbandverstärkern be- Geräten in Innenräumen. Schließen Sie an die Anschlüsse der finden. SonicWALL keine Kabel an, die aus dem Gebäude in dem sich das • Das beigefügte Netzkabel ist nur für den Gebrauch in Nor- Gerät befindet ,herausgeführt werden.
  • Page 45 KR, MY, NL, NO, PL, SE, SG, SI, SK, US Caution: Modifying this equipment or using this equipment for purposes not shown in this manual without the written consent of SonicWALL, Inc. could void the user’s Regulatory Information for Korea authority to operate this equipment.
  • Page 46 Specifications and descriptions subject to change without notice. Trademarks SonicWALL is a registered trademark of SonicWALL, Inc. Windows 2000, Windows XP, Windows Server 2003, Internet Explorer, and Active Directory are trademarks or registered trademarks of Microsoft Corporation.
  • Page 47 Page 42...
  • Page 48 PROTECTION AT THE SPEED OF BUSINESS ™ P/N 232-001475-51 Rev A 3/24/10 ©2010 SonicWALL, Inc. is a registered trademark of SonicWALL, Inc. Other product names mentioned herein may be trademarks and/or registered trademarks of their respective companies. Specifications and descriptions subject to change without notice.