Manuale d’uso / di manutenzione del prodotto OS 2.x del fabbricante SonicWALL
Vai alla pagina of 20
SonicWALL SonicOS 2.x Enhanced Quick Start Guide Rev 1.1 February 2004.
Sonic OS 2.x Quick Start Guide Intr oduction This guide walks you through the steps required to configure a typical customer network using the new SonicOS 2.
Sonic OS 2.x Quick Start Guide Basic W AN & LAN Configuration Refer to the Sonicwall Quick Start G uide included on the product CD. Security Zones and Objects There are several new concepts in troduced with SonicOS 2.x Enhan ced firmware. In this section, we’ll discuss the Security Zones and Objects.
Sonic OS 2.x Quick Start Guide Creating a Custom Zone There are four fixed Zone types: Trusted, Untrus ted, Public and Encrypted. Only the number of interfaces limits the number of Zone instances for Trusted and Public Zone types. The Untrusted Zone type (i.
Sonic OS 2.x Quick Start Guide Security Zones - Configuration The following will guide you through the process of configuring and assi gning interfaces to Security Zones: 1. We start out with the LAN and W AN interfaces as previously defined. 2. Click the configure icon ( ) associated with the X2 interface.
Sonic OS 2.x Quick Start Guide 15. e d to the X3 interface. Enter the network m ask assigned to the 17. Enter your comments as applicable. e nt and User Logins on this interface. quipment to be 20. Click OK to save your settings. The new DMZ interface is displayed in the settings.
Sonic OS 2.x Quick Start Guide Objects and Groups - Configuration T ting objects and groups. W e will use the Instant Messenger example from above. ss Objects option under the of the GUI. ct. NO gs will be slightly different for other objects. For the Mail Server in the 5.
Sonic OS 2.x Quick Start Guide 8. Repeat the steps above to de fine other address objects required for your installation. In the case of our example, you’ll need to create objects for: a. Web Server (10.0.0.2/32) b. Mail Server (192.168.168.4/32) c.
Sonic OS 2.x Quick Start Guide Fir ewall Access Rules W uch more functionality and flexibility when configuring Firewall Access Rules. However, rule configuration requires a dvance planning and depend.
Sonic OS 2.x Quick Start Guide Mail Server NAT Policy: To create an Inbound NAT po licy for our Mail Server: 1. Select the NAT Policies option under the Network button of the GUI. 2. Click the ADD button. 3. For Original Source, select ANY. Allow E-Mail from anywhere on the Internet.
Sonic OS 2.x Quick Start Guide 1. Click the intersection of the WAN (on the le ft) and LAN (on the top) to display any rules applicable for incoming packets fro m the WAN to the LAN. 2. Click ADD, to create a new entry in the WAN > LAN ruleset for our Mail Server.
Sonic OS 2.x Quick Start Guide While there are many other possibilities for crea ting Access Rules in SonicOS Enhanced, this “Public LAN Server” example should give you an unders tanding of where to start.
Sonic OS 2.x Quick Start Guide 3. Click ADD, to create a new entry in the LAN -> WAN ruleset for our IM users. 4. Select the ALLOW radio button. 5. For Service, select ANY. We want to block all access to the IM registration sites. 6. For Source, select LAN Subnets.
Sonic OS 2.x Quick Start Guide * The ability to NAT traffic as it enters the VPN Tunnel, or as it exits (inbound or outbound), and the capability to have firewall ru les specified on VPN traffic. Defining the Security Associations (SA) For the purpose of this exam ple, we will keep th e VPN configuration sim ple.
Sonic OS 2.x Quick Start Guide 11. gressive 13. Select the rest of the Phase 1 and 14. not use any of the 15. Click OK. For the TZ170, we assume that it is also runnin om the GUI, select the VPN 2. ct 3. te 4. 32.2. d 5. ec Secondary e X2 c 6. same value as the Pro 4060 Shared Secret.
Sonic OS 2.x Quick Start Guide 8. For the Remote IKE ID, select Sonicwall Identifier and enter the serial number of the Pro 4060. 9. Select the Network Tab. 10. For the Local Network, choose LAN Primary Subnet. This is a pre-defined address object for t LAN interface of the TZ170.
Sonic OS 2.x Quick Start Guide W AN-W AN Load Balancing & Fail Over SonicOS Enhanced provides the capability to co nn ect two WAN links and configure them for Load Balancing and/or Fail Over. This is the perfect feature for customer s who want to back up their T1 lines with DSL or Cable.
Sonic OS 2.x Quick Start Guide 3. Customize the probing interval, deactivate, and reactivate values as required. NOTE – Be careful with the values y ou set. Making them too small may cause the Sonic w all to identify a link as down even if connectivity w as only b interrupted.
Sonic OS 2.x Quick Start Guide WAN Load Balancing As previously mentioned, the Load Balancing cap ability can be Active-Passive, or Active-Active. If you decide to use the Active-Ac tive option, you will select one of the three lo ad balancing algorithms.
Sonic OS 2.x Quick Start Guide 9. For Translated Destination, select Original. We want the traffic to still go to its original destination. 10. For Original Service, select ANY. Leav e the service as the original service. 11. For Translated Service, selec t Origin al.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il SonicWALL OS 2.x è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del SonicWALL OS 2.x - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso SonicWALL OS 2.x imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul SonicWALL OS 2.x ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il SonicWALL OS 2.x, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del SonicWALL OS 2.x.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il SonicWALL OS 2.x. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo SonicWALL OS 2.x insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.