Dell NSA E5500 User manual

Getting Started Guide
Dell SonicWALL E-Class NSA Appliances
NETWORK SECURITY
NSA E5500

2
Notes, Cautions, and Warnings
© 2013 Dell, Inc.
Trademarks: Dell™, the DELL logo, SonicWALL™, SonicWALL GMS™, SonicWALL Analyzer™, Reassembly-Free Deep Packet
Inspection™, Dynamic Security for the Global Network™, SonicWALL SuperMassive™ Appliances, SonicWALL Dynamic Support
24x7™, SonicWALL Comprehensive Gateway Security Suite™, SonicWALL McAfee Client/Server Anti-Virus Suite™, and all other
SonicWALL product and service names and slogans are trademarks of Dell, Inc.
Microsoft Windows, Internet Explorer, and Active Directory are trademarks or registered trademarks of Microsoft Corporation.
Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective companies
and are the sole property of their respective manufacturers.
2013 – 03 P/N 232-001052-55 Rev. A
NOTE: A NOTE indicates important information that helps you make better use of your system.
CAUTION: A CAUTION indicates potential damage to hardware or loss of data if instructions are not followed.
WARNING: A WARNING indicates a potential for property damage, personal injury, or death.

3| In this Guide
In this Guide
This Getting Started Guide provides instructions for basic installation and configuration of the Dell SonicWALL Network Security
Appliance (NSA) E5500 running SonicOS. After you complete this guide, computers on your Local Area Network (LAN) will have secure
internet access.
Dell SonicWALL NSA E5500
Note: Always observe proper safety and regulatory guidelines when removing administrator-serviceable parts from the Dell
SonicWALL NSA E5500. Proper guidelines can be found in the Product Safety and Regulatory Information, on page 68.
I
o
PML
Front
Back
1U rack-mountable
17 x 16.75 x 1.75 in
43.18 x 42.54 x 4.44 cm
17.30 lbs/7.9 kg
17.30 lbs/7.9 kg
E5500
Network Security Appliance
Form Factor
Dimensions
Weight
WEEE Weight

4
Chapter 1 Sections Include
Pre-Configuration Tasks - page 6 • Check Package Contents - page 7
•Obtain Configuration Information - page 8
•The Front Panel - page 10
•The Back Panel - page 11
•Front Bezel Control Features - page 12
•Front Bezel Configuration Example - page 16
Chapter 2 Sections Include
Registering the Appliance - page 18 • Before You Register - page 19
•Creating a MySonicWALL Account - page 20
•Registering and Licensing the Appliance on MySonicWALL - page 20
Chapter 3 Sections Include
Deployment Scenarios - page 24 • Selecting a Deployment Scenario - page 25
•Initial Setup - page 29
•Configuring a Stateful HA Pair - page 37
•Configuring L2 Bridge Mode - page 43

5| In this Guide
Chapter 4 Sections Include
Additional Deployment Configuration - page 46 • An Introduction to Zones and Interfaces - page 47
•Creating a NAT Policy - page 48
•Enabling Security Services in SonicOS - page 51
•Applying Security Services to Zones - page 52
•Troubleshooting Diagnostic Tools - page 52
•Deployment Configuration Reference Checklist - page 55
Chapter 5 Sections Include
Support and Training Options - page 56 • Customer Support - page 57
•Knowledge Portal - page 57
•User Forums - page 58
•Training - page 59
•Related Documentation - page 60
•Dynamic Tooltips - page 61
•Dell SonicWALL Live Product Demos - page 61
Chapter 6 Sections Include
Rack Mounting Instructions - page 62 • Rack Mounting Instructions - page 63
Chapter 7 Sections Include
Product Safety and Regulatory Information -
page 68 •Safety and Regulatory Information - page 69
•Warranty Information - page 73
•Copyright Notice - page 73

6
Pre-Configuration Tasks
In this Section:
This section provides pre-configuration information. Review this section before setting up your Dell SonicWALL NSA E5500.
•Check Package Contents - page 7
•Obtain Configuration Information - page 8
•The Front Panel - page 10
•The Back Panel - page 11
•Front Bezel Control Features - page 12
•Front Bezel Configuration Example - page 16
1

7| Check Package Contents
Check Package Contents
Before setting up your Dell SonicWALL NSA E5500, verify that your package contains the following parts:
1. Dell SonicWALL NSA E5500
2. DB9 -> RJ45 (CLI) Cable
3. Ethernet Cable
4. Standard Power Cord*
5. Rack Kit
6. Getting Started Guide
*The included power cord(s) are approved for use only in specific countries or regions. Before using a power cord, verify that it is rated and approved for use in your location. The
power cords are for AC mains installation only.
Missing Items? If any items are missing from your package, contact Dell SonicWALL Support:
Web: http://www.sonicwall.com/us/Support.html
Email: [e-mail]
1
E5500
Network Security Appliance
34
257
6
Getting Started Guide
Dell SonicWALL E-Class NSA Appliances
NETWORK SECURITY NSA E5500

Obtain Configuration Information | 8
Obtain Configuration Information
Please record and keep for future reference the following setup
information:
Registration Information
Networking Information
Serial Number:
Record the serial number found on the
bottom panel of your SonicWALL
appliance.
Authentication Code:
Record the authentication code found on
the bottom panel of your SonicWALL
appliance.
LAN IP Address:
. . .
Select a static IP address for your
SonicWALL appliance that is within
the range of your local subnet. If you
are unsure, you can use the default IP
address (192.168.168.168).
Subnet Mask:
. . .
Record the subnet mask for the local
subnet where you are installing your
SonicWALL appliance.
Ethernet WAN IP
Address:
. . .
Select a static IP address for your
Ethernet WAN. This setting only
applies if you are already using an
ISP that assigns a static IP address.

9| Obtain Configuration Information
Administrator Information Obtain Internet Service Provider (ISP)
Information
Record the following information about your current Internet
service:
Note: If you are not using one of the network configurations
above, refer to the SonicOS Administrator’s Guide.
http://www.sonicwall.com/us/support.html
Admin Name:
Select an administrator account name.
(default is admin)
Admin Password:
Select an administrator password.
(default is password)
If you connect
using: Please record
DHCP No information is usually required: Some
providers may require a Host name:
Static IP
IP Address: . . .
Subnet Mask: . . .
Default Gateway: . . .
Primary DNS: . . .
DNS 2 (optional): . . .
DNS 3 (optional): . . .

10
The Front Panel
Icon Feature Description
LCD Screen Displays the front panel bezel interface which can be used to display status information, make certain
configuration changes, restart the appliance or boot the appliance in SafeMode.
Control Buttons Used to navigate the front panel bezel interface.
Console Port Used to access the SonicOS Command Line Interface (CLI) via the DB9 -> RJ45 cable.
USB Ports (2) Future expansion.
Reset Button Press and hold the button for a few seconds to manually reset the appliance.
LED (from left to right) Power LED: Indicates the Dell SonicWALL NSA E5500 is powered on.
Test LED: Flickering: Indicates the appliance is initializing. Steady blinking: Indicates the appliance is in
SafeMode. Solid: Indicates that the appliance is in test mode.
Alarm LED: Indicates an alarm condition.
HD LED: Future extension.
HA Port High Availability port.
X0-X7 (Copper) Gigabit Ethernet ports.
Bypass Status LED Future extension. Please check Release Notes for future availability.
E5500
Network Security Appliance
A C
B D F GHI
E

11 | The Back Panel
The Back Panel
Warning: Potential Hazard from Fan
This manual contains specific warning and caution statements where they apply. Please read the Safety Instructions before
use! See the Product Safety and Regulatory Information, on page 68.
Icon Feature Description
Expansion Bay Future extension.
Fans (2) The Dell SonicWALL NSA E5500 includes two fans for system temperature control.
Power Supply The Dell SonicWALL NSA E5500 power supply.
I
o
PML
ABC

Front Bezel Control Features | 12
Front Bezel Control Features
The Dell SonicWALL Network Security Appliance E-Class is
equipped with a front panel bezel interface that allows an
administrator to customize certain aspects of the appliance or
simply monitor its status without having to log into it through a
separate terminal.
Note: Using the front bezel for configuration purposes prior to
completing initial setup will bypass the Setup Wizard’s
automatic launch at startup.
LCD Control Buttons
The LCD interface is controlled by a D-pad, consisting of four
buttons: Up, Down, Left, Right. The table below describes the
functions of the buttons:
Icon Feature Description
LCD
Screen Displays the front panel bezel interface which can be used to display status
information, perform basic
configurations, restart the appliance or
boot the appliance in SafeMode.
Control
Buttons Up, Down, Left and Right buttons, used to navigate the LCD menu
system.
.ETWORK3ECURITY!PPLIANCE
"
!
%
$
#
Network Security Appliance
BA D
C E
Icon Button Navigation Features
Up/Down Selects options and navigates up and
down lists.
Left Cancels changes and returns to the
previous menu.
Right Confirms choices and enters menus.
Also sets the appliance to screen-saver
mode when used from the main menu.

13 | Front Bezel Control Features
Main Menu
Upon booting the LCD display will initially show the Main Menu.
The menu is made up of four options:
Use the Up and Down button to select the menu you wish to
enter and click the Right button to enter it.
Status
The Status menu allows you to view specific aspects of the
appliance. Once selected, the LCD displays the Status List.
This list is navigated using the Up and Down buttons. Status
options available include:
• Appliance serial number
• Firmware / ROM versions
• Appliance name
• Date and Time
•Uptime
• CPU statistical readings
• Current number of connections
• Interface (X0, X1) network settings
• Interface (X0, X1) data transfer statistics
The X1 DNS1-3 entries will only be displayed if they have been
set from the Configure menu. If their value is still 0.0.0.0
(default value), they will not appear in the Status List.
Contains basic status values including
system resources, connections and port
configuration values.
Allows configuration of basic system
values including X0 (LAN) and X1
(WAN) port configuration. Requires
system pin for access, default: 76642.
Provides the ability to restart the
appliance. Requires system pin for
access.
Provides the ability to restart and boot
the appliance into SafeMode. Requires
system pin for access.

Front Bezel Control Features | 14
Configure
The Configure Menu allows you to configure specific aspects of
the appliance. Once selected, the LCD will display a PIN
request.
Note: The Default PIN is 76642. This number spells SONIC
on a phone keypad. The PIN number can be changed
from the System >Administration page.
All numbers are inputted using the 4 buttons. Select the
individual digit field using the Left and Right button and select
the desired number using the Up and Down Button. Digits
increase incrementally from 0 to 9. Press the Right button to
confirm your PIN and enter the Configuration Menu.
The appliance allows the user to navigate in and out of the
Configuration Menu without having to re-enter the PIN.
However, once the appliance enters Screen-Saver Mode,
whether from the 6 second time out or from pressing the Left
button from the Main Menu, the PIN number must be re-entered
again to access the Configuration Menu.
After entering a new value for a setting in the configuration
menu, you are asked if you want to commit changes. Using the
4-way D-pad, press the Right button for yes or the Left button
for no.
If you choose yes, the screen notifies you that the settings are
updated.
Configuration Options
This option allows you to configure network port settings for the
appliance. Once selected, the LCD displays a list of
configurable options. Status options available include:
• X0 IP and subnet
• X1 Mode
• X1 IP and subnet
•X1Gateway
• X1 DNS settings (3 available)
• Restore defaults
The X1 Mode can be set to Static (default option) or to DHCP. If
DHCP is selected, manual configuration options are not shown
for X1 IP, subnet, gateway and DNS.

15 | Front Bezel Control Features
The Restore Defaults option will reset the appliance to default
factory settings. If selected it will prompt for confirmation twice
before restoring defaults.
If an option is selected but not modified, the appliance will
display a message stating that no changes were made and will
return the user to the edit value screen. If a change was made,
it will prompt the user for confirmation before effecting the
change.
Restart
This option allows you to safely restart without resorting to
power cycling the appliance. Once selected, the LCD will
display a confirmation prompt. Select Yfor yes and press the
Right button to confirm. The appliance will reboot.
SafeMode
This option will set the appliance to SafeMode. Once selected,
the LCD will display a confirmation prompt. Select Yfor yes and
press the Right button to confirm. The appliance will change to
SafeMode. Once SafeMode is enabled, the NSA E5500 must
be controlled from the Web management interface.
Screen-Saver
If no button is pressed for over 60 seconds, or if the Left button
is pressed from the Main Menu, the appliance will enter Screen-
Saver mode. In this mode, the Status List will cycle, displaying
every entry for a few seconds.
If the Up or Down button is pressed while in Screen-Saver
mode, the appliance will display the adjacent status entry.
To exit Screen-Saver mode, press the Right button.

Front Bezel Configuration Example | 16
Front Bezel Configuration Example
LAN IP Configuration
The Dell SonicWALL NSA E5500 is assigned the default LAN IP
of 192.168.168.168. Complete the following steps to change it
to 192.168.168.10.
1. Press Right to exit screen-saver mode if not at the root
menu.
2. Press Down to select the Configuration entry.
3. Press Right to enter Configuration Mode.
4. Input PIN (76642 by default; SONIC on a phone keypad.)
5. Press Up or Down until the cursor displays 7, press Right.
6. Press Up or Down until the cursor displays 6, press Right.
7. Press Up or Down until the cursor displays 6, press Right.
8. Press Up or Down until the cursor displays 4, press Right.
9. Press Up or Down until the cursor displays 2, press Right.
10. Press Right.
11. Press Down until X1 IP is selected (four times).
12. Press Right to configure X1 IP.
Edit X1 IP:
13. Press Right ten times to select the tenth digit.
14. Press UP or Down until the cursor displays 0.
15. Press Right once to select the next digit.
16. Press UP or Down until the cursor displays 1.
17. Press Right once to select the next digit.
18. Press Up or Down until the cursor displays 0.
19. Press Right to finish editing the X1 IP.
20. Press Right again to confirm changes.

17 | Front Bezel Configuration Example

18
Registering the Appliance
In this Section
This section provides instructions for registering your Dell SonicWALL NSA E5500.
•Before You Register - page 19
•Creating a MySonicWALL Account - page 20
•Registering and Licensing the Appliance on MySonicWALL - page 20
Note: Registration is an important part of the setup process and is necessary in order to receive the benefits of Dell SonicWALL security
services, firmware updates, and technical support.
2

19 | Before You Register
Before You Register
You need a MySonicWALL account to register the Dell
SonicWALL NSA E5500. You can create a new MySonicWALL
account on www.mysonicwall.com or directly from the Dell
SonicWALL management interface. This section describes how
to create an account by using the Web site.
You can use MySonicWALL to register your Dell SonicWALL
appliance and activate or purchase licenses for Security
Services, Analyzer Reporting and other services, support, or
software before you even connect your device. This allows you
to prepare for your deployment before making any changes to
your existing network.
For a High Availability configuration, you must use
MySonicWALL to associate a backup unit that can share the
Security Services licenses with your primary Dell SonicWALL.
Note: Your Dell SonicWALL NSA E5500 does not need to be
powered on during account creation or during the
MySonicWALL registration and licensing process.
Note: After registering a new Dell SonicWALL appliance on
MySonicWALL, you must also register the appliance
from the SonicOS management interface. This allows
the unit to synchronize with the Dell SonicWALL
License Server and to share licenses with the
associated appliance, if any. See Accessing the
Management Interface, on page 30.
If you already have a MySonicWALL account, go to Registering
and Licensing the Appliance on MySonicWALL, on page 20, to
register the appliance on MySonicWALL.

Creating a MySonicWALL Account | 20
Creating a MySonicWALL Account
To create a MySonicWALL account, perform the following steps:
1. In your browser, navigate to www.mysonicwall.com.
2. In the login screen, click the Register Now link, If you are
not a registered user.
3. Complete the Registration form and then click Register.
4. Verify that the information is correct and then click Submit.
5. In the screen confirming that your account was created,
click Continue.
Registering and Licensing the Appliance
on MySonicWALL
This section contains the following subsections:
•Product Registration - page 20
•Licensing Security Services and Software - page 21
•Registering a Second Appliance as a Backup - page 22
•Registration Next Steps - page 23
Product Registration
You must register your Dell SonicWALL security appliance on
MySonicWALL to enable full functionality.
6. Login to your MySonicWALL account.
7. On the main page, in the Register A Product field, type the
appliance serial number and then click Next.
8. On the My Products page, under Add New Product, type
the friendly name for the appliance, select the Product
Group if any, type the authentication code into the
appropriate text boxes, and then click Register.
9. On the Product Survey page, fill in the requested
information and then click Continue.