SonicWALL TZ 180 manuales

SonicOS 4.0 Enhanced

1

Administrator’s Guide

1

Table of Contents

3

Introduction

21

CHAPTER 1

23

About this Guide

24

Organization of this Guide

25

Guide Conventions

27

SonicWALL Technical Support

28

Current Documentation

29

CHAPTER 2

31

Common Criteria Guide

31

• GMS Remote Management

32

• Syslog Logging

32

• SonicPoint

32

• Hardware Failover

32

Related Documents

33

Common Criteria

34

CHAPTER 3

35

Status Bar

41

Applying Changes

41

Navigating Tables

42

Getting Help

43

Logging Out

43

CHAPTER 4

47

Dashboard

47

Platforms

50

Administrator Prerequisites

50

Purchasing Security Services

52

Related Features

59

CHAPTER 5

61

Viewing Status Information

61

System Messages

62

Latest Alerts

63

Security Services

63

Before You Register

64

System > Status

65

Network Interfaces

66

CHAPTER 6

67

Managing SonicWALL Licenses

67

Security Services Summary

68

System > Licenses

69

Manual Upgrade

70

CHAPTER 7

73

Login Security Settings

74

System > Administration

75

Multiple Administrators

76

Web Management Settings

77

SSH Management Settings

78

Advanced Management

78

Enable GMS Management

80

Download URL

82

Selecting UI Language

83

CHAPTER 8

85

Managing Certificates

85

System > Certificates

86

Certificate Details

87

Importing Certificates

87

Deleting a Certificate

89

Importing a CRL

90

CHAPTER 9

93

Configuring Time Settings

93

NTP Settings

94

CHAPTER 10

95

Setting Schedules

95

System > Schedules

96

Adding a Schedule

97

Deleting Schedules

97

CHAPTER 11

99

Appliance Firmware

99

Settings

100

Firmware Management

100

Firmware Management Table

101

Updating Firmware Manually

102

System Information

103

System > Settings

104

CHAPTER 12

105

Benefits

106

How Does Packet Capture Work?

106

Using Packet Capture

107

System > Packet Capture

108

Starting packet capture

109

Stopping packet capture

109

Viewing the captured packets

109

Configuring Packet Capture

111

Configuring General Settings

112

Configuring Logging Settings

117

Configuring Advanced Settings

119

Restarting FTP logging

120

Related Information

122

HTML Format

123

Text File Format

124

CHAPTER 13

125

Appliance

125

Tech Support Report

126

Diagnostic Tools

126

Active Connections Monitor

127

CPU Monitor

128

DNS Name Lookup

129

Find Network Path

129

Packet Capture

130

System > Diagnostics

131

Process Monitor

132

Real-Time Black List Lookup

132

Reverse Name Resolution

132

Trace Route

133

Web Server Monitor

133

System > Restart

134

CHAPTER 14

137

Configuring Interfaces

137

Setup Wizard

138

Interface Settings

138

Interface Traffic Statistics

139

Interfaces

139

Physical Interfaces

140

User-definable Interfaces

140

Configuring a WAN Interface

147

Ethernet Settings

149

Bandwidth Management

149

NAT Policy Settings

150

Managing WWAN Connections

153

Creating a WLAN Subnet

157

CHAPTER 15

159

Network > SwitchPorts

160

Overview

160

Deployment Details

175

PortShield Interfaces

176

Configure the Zones

176

Chapter 17

178

CHAPTER 16

181

Balancing

181

WAN Probe Monitoring

186

WAN Load Balancing Statistics

189

CHAPTER 17

191

Configuring Zones

191

How Zones Work

192

Predefined Zones

193

Security Types

193

Allow Interface Trust

194

The Zone Settings Table

195

Adding a New Zone

196

Deleting a Zone

197

Configuring the WLAN Zone

197

Network > Zones

198

CHAPTER 18

201

Configuring DNS Settings

201

Network > DNS

202

CHAPTER 19

203

Configuring Address Objects

203

Address Object Groups

204

Network > Address Objects

205

Default Address Objects

206

Default Address Groups

207

Adding an Address Object

209

Step 3 Click OK

211

Public Server Wizard

212

Assumptions

217

CHAPTER 20

225

Configuring Routes

225

Route Advertisement

226

Route Policies

227

Route Policies Table

228

A Route Policy Example

229

RIPv1 RIPv2 OSPFv2

230

Network > Routing

231

OSPF Terms

233

Configuring RIP

238

RIP Modes

239

Configuring OSPF

240

OSPFv2 Setting

241

CHAPTER 21

245

Configuring NAT Policies

245

NAT Policies Table

246

Network > NAT Policies

247

NAT Policy Settings Explained

248

NAT Policies Q&A

249

NAT Load Balancing Overview

250

NAT LB Mechanisms

251

Sticky IP Algorithm

253

Creating NAT Policies

254

Using NAT Load Balancing

263

Prerequisites

264

CHAPTER 22

271

Managing ARP Traffic

271

Static ARP Entries

272

Network > ARP

273

Flushing the ARP Cache

276

CHAPTER 23

277

Setting Up the DHCP Server

277

DHCP Server Options Overview

278

Supported Standards

279

Enabling the DHCP Server

280

DHCP Server Lease Scopes

280

General Settings

281

DNS/WINS Settings

282

VoIP Settings

283

Network > DHCP Server

286

Value field

288

Generic options always

293

Click OK

293

Current DHCP Leases

294

DHCP Option Numbers

294

CHAPTER 24

303

Using IP Helper

303

IP Helper Policies

304

Adding an IP Helper Policy

304

Editing an IP Helper Policy

304

Deleting IP Helper Policies

304

CHAPTER 25

305

Network > Web Proxy

306

CHAPTER 26

307

Configuring Dynamic DNS

307

Network > Dynamic DNS

309

Dynamic DNS Settings Table

311

Wireless

313

CHAPTER 27

315

Station Status

315

Wireless Overview

316

Adjusting the Antennas

317

MAC Filter List

317

WiFiSec Enforcement

317

Wireless > Status

318

WLAN Settings

319

WLAN Statistics

320

WLAN Activities

320

CHAPTER 28

323

Configuring Wireless Settings

323

Wireless Settings

324

Secure Wireless Bridging

324

Wireless > Settings

325

Access Point Configuration

328

CHAPTER 29

333

Authentication Overview

334

WEP Encryption Settings

334

WEP Encryption Keys

335

WPA Encryption Settings

335

WPA-EAP Settings

336

WPA/WPA2 Encryption Settings

337

WPA2-EAP Settings

338

CHAPTER 30

339

Beaconing & SSID Controls

340

Antenna 1 Antenna 2

341

Advanced Radio Settings

342

Wireless > Advanced

343

CHAPTER 31

345

Configuring MAC Filter List

345

Wireless > MAC Filter List

346

CHAPTER 32

347

Configuring Wireless IDS

347

Access Point IDS

348

Enable Client Null Probing

348

Association Flood Detection

348

Intrusion Detection Settings

349

Discovered Access Points

349

Scanning for Access Points

350

CHAPTER 33

351

SonicPoint VAP Overview

352

Wireless Roaming with ESSID

353

What Is a BSSID?

353

Benefits of Using Virtual APs

353

VAP Configuration Overview

354

Network Zones

354

The Wireless Zone

355

Custom Wireless Zone Settings

355

Guest Services

358

WLAN Subnets

359

DHCP Server Scope

360

General VAP Settings

363

Advanced VAP Settings

363

Virtual Access Point Groups

364

Determining Your VAP Needs

365

A Sample Network

365

VAP Configuration Worksheet

366

CHAPTER 34

371

Understanding WWAN Failover

373

Dial on Data WWAN Failover

374

Manual Dial WWAN Failover

375

Wireless WAN Prerequisites

376

Viewing the WWAN Status

377

Configuring Wireless WAN

377

Connect on Data

378

Management/User Login

379

WWAN Probe Settings

379

Monitoring WWAN Data Usage

385

WWAN Glossary

386

SonicPoint

389

CHAPTER 35

391

Managing SonicPoints

391

• Test SonicPoints

392

SonicPoint > SonicPoints

393

Updating SonicPoint Settings

397

Synchronize SonicPoints

398

SonicPoint States

399

CHAPTER 36

401

Viewing Station Status

401

CHAPTER 37

405

Using and Configuring IDS

405

View Style

407

SonicPoint > IDS

408

CHAPTER 38

409

Configuring RF Monitoring

409

Why RF Monitoring?

410

SonicPoint > RF Monitoring

411

Set the Measurement Interval

412

Selecting RF Signature Types

412

Log Data Description

413

Types of RF Threat Detection

414

Before Reading this Section

415

PRO 3060

416

Sensor - Identifies which

416

Firewall

419

CHAPTER 39

421

Configuring Access Rules

421

Example Scenario

422

Configuration Task List

423

Firewall > Access Rules

424

Adding Access Rules

426

Enabling Ping

431

CHAPTER 40

433

Detection Prevention

434

Dynamic Ports

434

Source Routed Packets

434

Connections

434

Access Rule Service Options

435

Firewall > Advanced

436

CHAPTER 41

437

Configuring TCP Settings

437

TCP Settings

438

Firewall > TCP Settings

439

Understanding a TCP Handshake

440

SYN Flood Protection Methods

440

Understanding SYN Watchlists

441

CHAPTER 42

447

Configuring Firewall Services

447

Default Services Overview

448

Supported Protocols

449

Firewall > Services

450

Editing Custom Services

453

Deleting Custom Services

453

CHAPTER 43

457

Multicast Snooping

458

Multicast Policies

458

IGMP State Table

459

Firewall > Multicast

460

CHAPTER 44

463

Monitoring Active Connections

463

Viewing Connections

464

Filtering Connections Viewed

464

CHAPTER 45

467

Managing Quality of Service

467

Conditioning

468

802.1p and DSCP QoS

469

Enabling 802.1p

470

Firewall > QoS Mapping

471

DSCP Marking

473

QoS Mapping

475

Managing QoS Marking

476

Declaration Limits

481

Outbound Bandwidth Management

482

Maximum Bandwidth Processing

484

Example of Outbound BWM

485

Inbound Bandwidth Management

486

Ingress Rate Update

487

Egress ACK monitor

487

Process ACKs

487

BWM with WAN load balancing

488

Glossary

489

CHAPTER 46

493

Configuring SSL Control

493

Firewall > SSL Control

494

Key Features of SSL Control

495

Key Concepts to SSL Control

496

Caveats and Advisories

500

SSL Control Configuration

501

Enabling SSL Control on Zones

503

SSL Control Events

504

CHAPTER 47

509

Configuring VoIP Support

509

VoIP Security

510

VoIP Protocols

511

SonicWALL’s VoIP Capabilities

512

VoIP Network

513

Supported VoIP Protocols

514

Incoming Calls

517

Local Calls

518

Supported Interfaces

520

Configuration Tasks

520

General VoIP Configuration

521

Configuring SIP Settings

522

Configuring BWM and QoS

523

Quality of Service

524

Configuring VoIP Access Rules

525

VoIP Deployment Scenarios

531

Using the Public Server

533

CHAPTER 48

537

Configuring VPN Policies

537

VPN Types

538

IKE version 1

539

IKE Phase 2

540

Negotiating SAs in IKE v2

541

Planning Your VPN

542

VPN > Settings

543

On the client

544

On the Initiator

545

On the Responder

548

VPN Policy Wizard

549

VPN Global Settings

549

VPN Policies

550

Viewing VPN Tunnel Statistics

551

Configuring GroupVPN Policies

552

Exporting a VPN Client Policy

560

Step 7 Click the Network tab

564

Step 15 Click OK

568

CHAPTER 49

581

VPN > Advanced

582

About OCSP

583

OpenCA OCSP Responder

584

Using OCSP with VPN Policies

585

CHAPTER 50

587

Configuring DHCP Over VPN

587

VPN > DHCP over VPN

588

Current DHCP over VPN Leases

591

CHAPTER 51

593

Configuring L2TP Server

593

Configuring the L2TP Server

594

VPN > L2TP Server

595

User Management

597

CHAPTER 52

599

,QWHUQHW

601

02/

601

7ORKSTATION

601

2!$)533ERVER

602

,$!03ERVER

603

LDAP Terms

604

What Is Single Sign-On?

605

How Does Single Sign-On Work?

607

Configuration Modes

611

User Groups

612

User Login Settings

615

User Session Settings

616

Other Global User Settings

617

Acceptable Use Policy

617

Configuring Local Users

618

Adding Local Users

620

Configuring Local Groups

621

Creating a Local Group

623

Step 6 Click OK

624

RADIUS Servers

626

RADIUS Users

626

RADIUS Users Settings

627

RADIUS Client Test

630

Configuring Single Sign-On

641

Step 7 Click Apply

652

Step 8 Click OK

652

Advanced LDAP Configuration

661

Viewing User Status

669

Configuring User Settings

669

Preempting Administrators

672

Activating Configuration Mode

673

CHAPTER 53

677

Accounts

677

Global Guest Settings

678

Guest Profiles

678

Users > Guest Accounts

679

Adding Guest Accounts

680

To Generate Multiple Accounts

681

Enabling Guest Accounts

682

Users > Guest Status

683

CHAPTER 54

687

Managing SonicWALL Security

687

Services

687

SonicWALL Security Services

689

Security Services Settings

690

Security Services Information

691

Update Signature Manually

691

Activating Security Services

693

CHAPTER 55

695

Filtering Service

695

Content Filter Status

696

Content Filter Type

697

Restrict Web Features

698

Trusted Domains

699

CFS Exclusion List

699

Custom List

700

Enable Keyword Blocking

701

Adding a New Address

702

N2H2 Properties

703

URL Cache

704

Websense Properties

705

CHAPTER 56

709

Anti-Virus Policies

712

Anti-Virus Enforcement

713

CHAPTER 57

715

Virus Service

715

2EMOTE3ITE'ATEWAY

716

%NFORCED0ROTECTION

716

)NTERNAL.ETWORK0ROTECTION

716

&ILE$OWNLOAD0ROTECTION

716

$ESKTOPAND3ERVER0ROTECTION

716

Remote Site Protection

717

Internal Network Protection

717

HTTP File Downloads

718

SonicWALL GAV Architecture

718

0ACKET0ATH

719

Activating FREE TRIALs

723

Enabling SonicWALL GAV

724

Step 4 Click OK

725

Specifying Protocol Filtering

727

Enabling Inbound Inspection

727

Restricting File Transfers

728

Displaying Signatures

732

Signatures table

733

CHAPTER 58

735

SonicWALL IPS Terminology

736

Enabling SonicWALL IPS

742

CHAPTER 59

745

CHAPTER 60

753

Blacklist

753

Adding RBL Services

754

CHAPTER 61

757

Configuring SonicWALL Global

757

Security Client

757

PART 12

763

CHAPTER 62

765

Managing Log Events

765

Log View Table

766

Clear Log

767

Export Log

767

E-mail Log

767

Filtering Log Records Viewed

767

Log Event Messages

768

CHAPTER 63

769

Configuring Log Categories

769

Log Priority

770

Log Categories

771

Log > Categories

772

Managing Log Categories

773

CHAPTER 64

775

Configuring Syslog Settings

775

Syslog Settings

776

Syslog Servers

777

Log > Syslog

778

CHAPTER 65

779

Configuring Log Automation

779

E-mail Log Automation

780

Mail Server Settings

780

CHAPTER 66

781

Configuring Name Resolution

781

Specifying the DNS Server

782

CHAPTER 67

783

Generating Log Reports

783

Data Collection

784

View Data

784

Bandwidth Usage by IP Address

785

Bandwidth Usage by Service

785

Log > Reports

786

CHAPTER 68

787

Activating ViewPoint

788

Enabling ViewPoint Settings

789

Log > ViewPoint

790

PART 13

791

CHAPTER 69

793

Wizards > Setup Wizard

794

Start the Setup Wizard

795

Change Password

796

Change Time Zone

797

WAN Network Mode

797

WAN Network Mode: NAT Enabled

798

LAN Settings

798

LAN DHCP Settings

799

Setup Wizard Complete

800

WAN Network Mode

802

LAN Settings

803

DHCP Settings

803

DHCP Server

808

Configuring PPTP Network Mode

810

Change Time Zone

811

CHAPTER 70

815

Close to close the wizard

820

CHAPTER 71

821

6. Click Next

823

8. Click Next

823

• Server Address Objects

824

• Server NAT Policies

824

• Server Access Rules

824

CHAPTER 72

827

Policy Wizard

827

Using the VPN Policy Wizard

828

Wizards > VPN Wizard

829

Step 9 Click Next

831

T +1 408.745.9600

843

SonicWALL, Inc

843

1143 Borregas Avenue

843

Modelos	Tipo de documento
Home Security System 170	Manual de usuario SonicWALL Home Security System 170 User's Manual, 50 paginas
01-SSC-8729	Ficha de datos SonicWALL TZ 200, 4 paginas
Home Security System NSA 5000	Manual de usuario SonicWALL Home Security System NSA 5000 User's Manual, 74 paginas
Security Appliance 3	Manual de usuario SonicWALL Security Appliance 3 User's Manual, 348 paginas

SonicWALL TZ 180 manuales

Sonicwall TZ 180 Manual de usuario (843 paginas)

Tabla de contenidos

Más productos y manuales para Routers SonicWALL

SonicWALL dispositivos