Dell Secure Mobile Access 6200 User manual

Dell™ Secure Mobile Access 6200/7200
Getting Started Guide
SMA 6200 Regulatory Model Number: 1RK31-0B0
SMA 7200 Regulatory Model Number: 1RK30-0AF

©2015 Dell Inc.
ALL RIGHTS RESERVED.
This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or
nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this
guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any
purpose other than the purchaser’s personal use without the written permission of Dell Inc.
The information in this document is provided in connection with Dell products. No license, express or implied, by estoppel or otherwise, to any
intellectual property right is granted by this document or in connection with the sale of Dell products. EXCEPT AS SET FORTH IN THE TERMS AND
CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, DELL ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS,
IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL DELL BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL,
PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS
OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF DELL HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH
DAMAGES. Dell makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves
the right to make changes to specifications and product descriptions at any time without notice. Dell does not make any commitment to update
the information contained in this document.
If you have any questions regarding your potential use of this material, contact:
Dell Inc.
Attn: LEGAL Dept
5 Polaris Way
Aliso Viejo, CA 92656
Refer to our web site (software.dell.com) for regional and international office information.
SMA 6200/7200 Getting Started Guide
Updated - 3/7/15
232-002785-50 Rev A

Patents
This product is protected by U.S. Patents. For more information, go to http://software.dell.com/legal/patents.aspx.
Trademarks
Dell, the Dell logo, SonicWALL, and all other SonicWALL product and service names and slogans are trademarks of Dell Inc. Other trademarks and
trade names may be used in this document to refer to either the entities claiming the marks and names or their products. Dell disclaims any
proprietary interest in the marks and names of others.
This product contains third-party components.
For third-party license information, go to http://software.dell.com/legal/license-agreements.aspx.
Source code information for open-source components is available at http://opensource.dell.com.
Legend
CAUTION: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed.
WARNING: A WARNING icon indicates a potential for property damage, personal injury, or death.
IMPORTANT NOTE, NOTE, TIP, MOBILE, or VIDEO: An information icon indicates supporting information.

1
Dell Secure Mobile Access 6200/7200 Getting Started Guide 5
In this guide
This Getting Started Guide provides instructions for basic installation and configuration of the Dell™ Secure Mobile Access 6200/
7200 appliances.
For Quick Policy Setup Charts, refer to Quick policy setup on page 61.
Chapters and sections
Chapter 1 Sections include:
In this guide on page 5 Chapters and sections on page 5
Chapter 2 Sections include:
Introduction to the SMA 6200/7200 on page 9 SMA 6200/7200 package contents on page 10
SMA 6200/7200 front panels on page 12
SMA 6200/7200 back panels on page 13

Dell Secure Mobile Access 6200/7200 Getting Started Guide
6
Chapter 3 Sections include:
Preparing to deploy the SMA 6200/7200 on page 15 Network architecture on page 16
Preparing for the installation on page 18
About installation and deployment on page 21
Chapter 4 Sections include:
Installation and configuration on page 23 Connecting the appliance on page 24
Starting the appliance on page 24
Entering network settings using the LCD on page 24
Running the Setup Wizard on page 25
Connecting to AMC on page 26
Configuring basic WorkPlace portal access on page 27
Chapter 5 Sections include:
Registering and obtaining a license on page 31 Using MySonicWALL on page 32
Creating a MySonicWALL account on page 32
Registering your appliance on page 32
Downloading your license file on page 33
Importing your licenses on page 33

Dell Secure Mobile Access 6200/7200 Getting Started Guide 7
Chapter 6 Sections include:
Rack mounting the appliance on page 37 Attaching inner rails to the appliance on page 40
Installing the outer rails on page 40
Installing the appliance in the rack on page 42
Removing the appliance from the rack on page 42
Chapter 7 Sections include:
Safety and regulatory information on page 45 Safety information for the SMA 6200 appliance on page 46
Safety information for the SMA 7200 appliance on page 52
Regulatory information for both SMA 6200 and SMA 7200 on
page 58

Dell Secure Mobile Access 6200/7200 Getting Started Guide
8

2
Dell Secure Mobile Access 6200/7200 Getting Started Guide 9
Introduction to the SMA 6200/7200
This section describes the items shipped with the Dell Secure Mobile Access 6200/7200 appliances and provides front and rear
illustrations of them.
•SMA 6200/7200 package contents on page 10
•SMA 6200/7200 front panels on page 12
•SMA 6200/7200 back panels on page 13

Dell Secure Mobile Access 6200/7200 Getting Started Guide
10
SMA 6200/7200 package contents
Before you begin the setup process, verify that your package contains the following items:
1 One SMA 6200 or SMA 7200 appliance
2 One rack mounting kit
3 One RJ45 to DB9 console cable
4 One Ethernet cable
5 One power cord for SMA 6200 or two power cords for SMA 7200*
6 One Dell Secure Mobile Access 6200/7200 Getting Started Guide
*The included power cord(s) are approved for use only in specific countries or regions. Before using a power cord, verify that it is
rated and approved for use in your location. The power cords are for AC mains installation only. See Safety and regulatory
information on page 45 for minimum power cord rating and additional safety information.
添付の電源 コ ー ド に関 し て
電気安全を確保す るために、 弊社製品に ご使用い ただ く 電源コ ー ド は必ず製品同梱の電源 コ ー ド を ご使用 く だ さ い。 こ の電源コ ー
ド は他の製品では使用で き ません。

Dell Secure Mobile Access 6200/7200 Getting Started Guide 11
Figure 1. Package contents
If any items are missing from your package, contact Support at https://support.software.dell.com.
1
45
6
3
2
1

Dell Secure Mobile Access 6200/7200 Getting Started Guide
12
SMA 6200/7200 front panels
LCD controls
Console port
DisplayPort
USB ports LED Indicators
(top to bottom)
Hard disk drive activity
Alarm condition
Test - Quick blinking: Initializing;
Solid: Test mode
Power 1/2 - Blue: operating correctly;
Yellow: Unconnected power supply or failure
X1 / X0
X3 / X2
X5 / X4
SFP+ ports
(10 Gb)
Diagnostics port (for future use)
(1 Gb)
(1 Gb)
(1 Gb)
Digital audio/video

Dell Secure Mobile Access 6200/7200 Getting Started Guide 13
SMA 6200/7200 back panels
SMA 6200:
SMA 7200:
Hard drives (2) Power supply
Fans (3)
Hard drives (2)
Fans (3)
Power supplies (2)

Dell Secure Mobile Access 6200/7200 Getting Started Guide
14

3
Dell Secure Mobile Access 6200/7200 Getting Started Guide 15
Preparing to deploy the SMA 6200/7200
This section provides an overview of single-homed and dual-homed network architecture and discusses firewall settings and other
information you need about components of your network to successfully deploy the SMA 6200/7200.
•Network architecture on page 16
•Preparing for the installation on page 18
•About installation and deployment on page 21

Dell Secure Mobile Access 6200/7200 Getting Started Guide
16
Network architecture
All SMA 6200/7200 appliances can be set up in either a dual
interface or single interface configuration, also known as dual-
homed and single-homed.
In either configuration, appliance management with AMC is
accomplished by accessing the internal (X0) interface.
This guide steps you through a basic single-homed interface
configuration. For the highest level of security, performance,
and in cluster mode, Dell recommends a dual-homed
configuration. Refer to the Deployment Planning Guide and
SMA Administration Guide for further information.
If you are installing a cluster, refer to the SMA Administration
Guide.
Dual-homed configuration (internal
and external interfaces)
One network interface is used for external traffic (that is, to
and from the Internet), and the other interface is used for
internal traffic (to and from your corporate network).
Single-homed interface configuration
(internal interface)
A single network interface is used for both internal and
external traffic. In this configuration, the appliance is usually
installed in the demilitarized zone (or DMZ, also known as a
perimeter network).
SMA appliance
Firewall
Corporate network
Dell SonicWALL Aventail Appliance
Internet
File
Server
Application
Server Web
Server
Firewall
DMZ
Internal interface
l
F
i
re
w
all
SMA appliance

Dell Secure Mobile Access 6200/7200 Getting Started Guide 17
In both configurations, incoming requests to the SMA 6200/
7200 services—including HTTP/S traffic for the Web proxy
service—are sent over port 80 (HTTP) and port 443 (HTTPS).
Traffic from the OnDemand agent is always sent over port 443.
Because most networks are configured to enable traffic over
these ports, you should not need to reconfigure firewalls on
your network.
You should install the appliance in a location where it can
connect to resources on your network, including:
•Application servers and file servers, including Web
servers, client/server applications, and Windows file
servers.
•External authentication repositories (such as an LDAP,
Microsoft Active Directory, or RADIUS server).
•One or more Domain Name System (DNS) servers.
•Optionally, a Windows Internet Name Service (WINS)
server. This is required for browsing Windows networks
using WorkPlace.
Although not required, enabling the appliance to communicate
with these additional resources provides greater functionality
and ease of use:
•Network Time Protocol (NTP) server for synchronizing
the time on the appliance.
•External server for storing syslog output.
•Administrator’s workstation for secure shell (SSH)
access.
You can configure the appliance to use a self-signed server
certificate, or, for enhanced security, you can obtain a
certificate from a commercial certificate authority (CA). For
more information, refer to the SMA Administration Guide.
CAUTION: The SMA 6200/7200 appliance does not
provide full firewall capabilities and should be secured
behind a firewall. Running without a firewall makes
the appliance vulnerable to attacks that can
compromise security and degrade performance.

Dell Secure Mobile Access 6200/7200 Getting Started Guide
18
Preparing for the installation
Before beginning the installation, you need to gather
information about your networking environment and verify
that your firewalls are properly configured to permit traffic to
and from the appliance as explained in the following sections:
•Gathering information on page 18
•Verifying your firewall policies on page 19
Gathering information
Before configuring the appliance, you need to gather the
following information. You are prompted for some of this
information when running the Setup Wizard, but most of it will
be used when you configure the appliance in the Appliance
Management Console (AMC). Refer to the SMA Administration
Guide.
Settings required to start Appliance Management Console
•The root password for administering the appliance
•The name for the appliance (because this name is used
only in log files, you do not need to add it to DNS)
•The internal IP address and, optionally, an external IP
address
•Select a routing mode and supply IP addresses for the
network gateways to the Internet, and your corporate
network.
Certificate information
Several pieces of information are used to generate the server
and AMC certificates:
•A fully qualified domain name (FQDN) for the appliance
and for any WorkPlace sites that use a unique name.
These names should be added to your public DNS; they
are also visible to users when they connect to Web-
based resources.
•A FQDN for the Appliance Management Console (AMC)
server. The AMC server name is used to access AMC,
which is a Web-based tool for administering the
appliance.
Name lookup information
•Internal DNS domain name of the network to which the
appliance is connected
•Primary internal DNS server address (additional DNS
servers are optional)
•IP address for an internal WINS server and the name of
your Windows domain (required to browse files on a
Windows network using WorkPlace, but are otherwise
optional)

Dell Secure Mobile Access 6200/7200 Getting Started Guide 19
Authentication information
Server name and login information for your authentication
servers (LDAP, Active Directory, or RADIUS)
Virtual Address pool information
If you are planning to deploy either network tunnel client
(Connect Tunnel or OnDemand Tunnel), you must allocate IP
addresses for one or more address pools. For more
information, refer to the SMA Administration Guide.
Optional configuration information
•To enable SSH access from a remote machine, you need
to know the remote host’s IP address.
•To synchronize with an NTP server, you need to know
the IP addresses for one or more NTP servers.
•To send data to a syslog server, you need to know the IP
address and port number for one or more syslog
servers.
Verifying your firewall policies
For the appliance to function correctly, you must open ports on
your external (Internet-facing) and internal firewalls.
External firewall
For secure access to the appliance from a Web browser or
OnDemand, you must make sure that ports 80 and 443 are
open on firewalls at your site. Opening your firewall to permit
SSH access is optional, but can be useful for performing
administrative tasks from a remote system.
Table 1. External firewall
Traffic
Type Port/ protocol Usage Required?
HTTP 80/tcp Unencrypted network
access x
HTTPS 443/tcp Encrypted network access x
SSH 22/tcp Administrative access to the
application

Dell Secure Mobile Access 6200/7200 Getting Started Guide
20
Internal firewall
If you have a firewall on the internal network, you may need to
adjust its policy to open ports for back-end applications with
which the appliance must communicate. In addition to opening
ports for standard network services such as DNS and email, you
may need to modify your firewall policy before the appliance
can access the following services.
Table 2. Internal firewall
Traffic Type Port/protocol Usage
Microsoft
networking 138/tcp and 138/ udp
137/tcp and 137/
udp
139/udp
162/snmp
445/smb
Used by WorkPlace to
perform WINS name
resolution, browse
requests, and access
file shares
LDAP
(unencrypted) 389/tcp Communicate with an LDAP directory or
Microsoft Active
Directory
LDAP over SSL
(encrypted) 636/tcp Communicate with an LDAP directory or
Microsoft Active
Directory over SSL
RADIUS 1645/udp or
1812/udp Communicate with a RADIUS authentication
server
NTP 123/udp Synchronize the
appliance clock with an
NTP server
Syslog 514/tcp Send system log
information to a syslog
server
SNMP 161/udp Monitor the appliance
from an SNMP
management tool
Table 2. Internal firewall
Traffic Type Port/protocol Usage