SONICWALL Internet Security Appliances Contents Copyright Notice ............................................................................ 5 About this Guide ............................................................................ 7 SonicWALL Technical Support ......................................................... 8 1 Introduction Your SonicWALL Internet Security Appliance ................................... 9 SonicWALL Internet Security Appliance Functional Diagram .............10 SonicWALL Internet Security Appliance Features .............................11 2 SonicWALL Installation Inspecting the Package .................................................................15 Overview .....................................................................................15 Connecting the SonicWALL to the Network .....................................16 Performing the Initial Configuration ...............................................18 3 Managing Your SonicWALL Status ..........................................................................................29 CLI Support and Remote Management ...........................................30 4 General and Network Settings Network .......................................................................................32 Network Settings ..........................................................................33 Standard Configuration .................................................................35 NAT with DHCP Client Configuration ..............................................37 NAT with PPPoE Configuration .......................................................39 NAT with L2TP Client ....................................................................41 Setting the Time and Date ............................................................43 Setting the Administrator Password ...............................................44 Setting the Administrator Inactivity Timeout ...................................45 5 Logging and Alerts View Log .....................................................................................46 SonicWALL Log Messages .............................................................47 Log Settings .................................................................................48 Log Categories .............................................................................50 Alert Categories ............................................................................51 Reports ........................................................................................51 6 Content Filtering and Blocking Categories ...................................................................................53 Time of Day .................................................................................55 List Update ..................................................................................55 Contents Page 1 Customize ....................................................................................57 Keywords .....................................................................................59 Consent .......................................................................................59 7 Web Management Tools Restarting the SonicWALL .............................................................63 Preferences ..................................................................................64 Exporting the Settings File ............................................................65 Importing the Settings File ............................................................66 Restoring Factory Default Settings .................................................67 Upgrade Features .........................................................................70 Diagnostic Tools ...........................................................................71 DNS Name Lookup .......................................................................71 Ping ............................................................................................72 Packet Trace ................................................................................74 Tech Support Report ....................................................................75 8 Network Access Rules Services .......................................................................................77 Windows Networking (NetBIOS) Broadcast Pass Through ................78 Detection Prevention ....................................................................78 Network Connection Inactivity Timeout ..........................................79 Add Service ..................................................................................79 Rules ...........................................................................................80 Understanding the Access Rule Hierarchy .......................................86 SonicWALL TELE3 and SOHO3 IP Address Management ..................89 Users ...........................................................................................90 SonicWALL Management ..............................................................92 SonicWALL Remote Management ..................................................93 9 Advanced Features Proxy Relay ..................................................................................96 Intranet .......................................................................................98 Routes ....................................................................................... 100 DMZ Addresses .......................................................................... 101 Delete a DMZ Address Range ...................................................... 103 One-to-One NAT ........................................................................ 103 The Ethernet Tab ....................................................................... 106 10 DHCP Server Setup ........................................................................................ 108 Enable DHCP Server ................................................................... 109 Page 2 SonicWALL Internet Security Appliance User's Guide Deleting Dynamic Ranges and Static Entries ................................. 110 DHCP Status .............................................................................. 110 SonicWALL TELE3 and SOHO3 IP Address Management ................ 111 11 SonicWALL VPN VPN Applications ........................................................................ 113 The VPN Interface ...................................................................... 114 SonicWALL VPN Client for Remote Access and Management .......... 115 The Configure Tab ...................................................................... 116 VPN Advanced Settings ............................................................... 119 Advanced Settings for VPN Configurations .................................... 123 Enabling Group VPN on the SonicWALL ........................................ 124 Group VPN Client Configuration ................................................... 126 Manual Key Configuration for a SonicWALL and VPN Client ............ 129 Installing the VPN Client Software ................................................ 131 VPN for Two SonicWALLs ............................................................ 136 Example of Manual Key Configuration for Two SonicWALLs ........... 139 IKE Configuration for Two SonicWALLs ........................................ 142 Example: Linking Two SonicWALLs using IKE ............................... 145 Testing a VPN Tunnel Connection Using PING .............................. 149 Configuring Windows Networking ................................................ 150 Adding, Modifying and Deleting Destination Networks ................... 152 RADIUS and XAUTH Authentication .............................................. 153 SonicWALL Enhanced VPN Logging .............................................. 156 Disabling Security Associations .................................................... 157 Basic VPN Terms and Concepts ................................................... 158 12 SonicWALL Options and Upgrades SonicWALL VPN Upgrade ............................................................ 161 SonicWALL VPN Client for Windows ............................................. 161 SonicWALL Network Anti-Virus .................................................... 162 Content Filter List Subscription .................................................... 162 SonicWALL High Availability Upgrade ........................................... 162 Vulnerability Scanning Service ..................................................... 163 SonicWALL Authentication Service ............................................... 163 SonicWALL ViewPoint Reporting .................................................. 163 SonicWALL Per Incident Support .................................................. 164 SonicWALL Premium Support ...................................................... 164 SonicWALL Extended Warranty .................................................... 164 SonicWALL Global Management System ....................................... 164 Contents Page 3 13 Hardware Description SonicWALL PRO 200 and PRO 300 Front Panel ............................. 165 SonicWALL PRO 200 and PRO 300 Back Panel .............................. 166 SonicWALL PRO 100 Front Panel ................................................. 167 SonicWALL PRO 100 Front Panel Description ................................ 167 SonicWALL PRO 100 Back Panel .................................................. 168 The SonicWALL PRO 100 Back Panel Description .......................... 168 SonicWALL SOHO3 and TELE3 Front Panel ................................... 169 SonicWALL SOHO3 and SonicWALL TELE3 Front Panel Description . 169 SonicWALL SOHO3 and TELE3 Back Panel .................................... 170 The SonicWALL SOHO3 and TELE3 Back Panel Description ............ 170 14 Troubleshooting Guide The Link LED is off. .................................................................... 172 A computer on the LAN cannot access the Internet. ...................... 172 The SonicWALL does not establish authenticated sessions. ............ 172 The SonicWALL does not save changes that you have made. ......... 173 Duplicate IP address errors ......................................................... 173 Machines on the WAN are not reachable. ..................................... 173 15 Appendices Appendix A - Technical Specifications ........................................... 174 Appendix B - Introduction to Networking ...................................... 178 Overview ................................................................................... 178 Network Hardware Components .................................................. 178 Network Types ........................................................................... 178 Firewalls .................................................................................... 178 Gateways ................................................................................... 179 Network Protocols ...................................................................... 179 IP Addressing ............................................................................. 180 Appendix C - IP Port Numbers ..................................................... 183 Appendix D - Configuring TCP/IP Settings .................................... 184 Appendix E - Erasing the Firmware .............................................. 186 Appendix F - Securing the SonicWALL .......................................... 188 Mounting the SonicWALL PRO 200 and SonicWALL PRO 300 .......... 188 Appendix G - Electromagnetic Compatibility .................................. 189 SonicWALL PRO 200 and SonicWALL PRO 300 .............................. 189 SonicWALL PRO 100, SonicWALL SOHO3 and SonicWALL TELE3 .... 190 Notes ........................................................................................ 192 Page 4 SonicWALL Internet Security Appliance User's Guide Copyright Notice © 2001 SonicWALL, Inc. All rights reserved. Under the copyright laws, this manual or the software described within, can not be copied, in whole or part, without the written consent of the manufacturer, except in the normal use of the software to make a backup copy. The same proprietary and copyright notices must be affixed to any permitted copies as were affixed to the original. This exception does not allow copies to be made for others, whether or not sold, but all of the material purchased (with all backup copies) can be sold, given, or loaned to another person. Under the law, copying includes translating into another language or format. SonicWALL is a registered trademark of SonicWALL, Inc. Other product and company names mentioned herein can be trademarks and/or ...