SonicWALL 2100 CF User manual

COMPREHENSIVE INTERNET SECURITY™
SSSonicWALL Content Security Manager 2100 CF
Getting Started Guide

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 1
SonicWALL Content Security Manager 2100 CF
Getting Started Guide
Thank you for purchasing the SonicWALL Content Security Manager 2100 Content Filter
(hereafter referred to as the Content Security Manager). The Content Security Manager is an
Internet content and application filtering solution that enhances security and employee
productivity, optimizes network bandwidth and mitigates legal liabilities.
The Content Security Manager integrates into virtually any network topography to provide
powerful, scalable, cost-effective Internet content filtering. It is easy to implement, requiring no
change to your network clients. The Content Security Manager filters all HTTP traffic on any port,
regardless of whether the network clients use external proxy servers.
This Getting Started Guide provides basic installation and configuration instructions for the
Content Security Manager. After you complete the configuration steps in this guide, you may need
to further configure your Content Security Manager to fit the complexities of your network.
Note: For complete configuration instructions, refer to the SonicWALL Content Security Manager
2100 CF Administrator’s Guide available on the SonicWALL Content Security Manager Resource
CD and on the SonicWALL Documentation Web site at:
<http://www.sonicwall.com/services/documentation.html>
Before You Begin
Check Package Contents
• One SonicWALL Content Security Manager
2100 CF
• One SonicWALL Content Security Manager
2100 CF Getting Started Guide
• One SonicOS CF 1.0 Release Notes
• One SonicWALL Regulatory Statement
• Two straight-through Ethernet cables
• One red crossover Ethernet cable
• One power cord*
• One SonicWALL Content Security Manager Resource CD, which contains:
•The Content Security Manager 2100 CF Administrator’s Guide
•TheContent Security Manager 2100 CF Getting Started Guide
•TheSonicWALL ViewPoint User’s Guide
•TheSonicOS Log Events Reference Guide
*A power cord is included only with units shipped to North America.
Note: SonicWALL ADConnector and SonicWALL ViewPoint software for the SonicWALL
Content Security Manager are available for download from <https://www.mysonicwall.com>.
Any Items Missing?
If any items are missing from your package,
contact:
SonicWALL Support
Web: <http://www.sonicwall.com/support/>
E-mail: [email protected]

Page 2
What You Need to Provide
• A firewall or security appliance protecting your LAN
• PC or Macintosh computer to act as an offline management station for initial configuration of
the Content Security Manager
• Web browser for accessing the Content Security Manager’s Web-based management
interface. The Web browser must support Java and HTTP uploads. Internet Explorer 5.0 or
higher or Netscape Navigator 4.7 or higher are recommended.
Important Information You Need
LAN
LAN IP address range:
LAN netmask:
DNS server:
Firewall or Security Appliance
Firewall or router gateway IP address:
Firewall or security appliance management IP address:
mySonicWALL.com Account
This is sensitive information. Store this information carefully.
Username:
Password:
Content Security Manager Management Account
This is sensitive information. Store this information carefully.
Username: (default: admin)
Password: (default: password)
Content Security Manager Configuration Steps
Getting started with your Content Security Manager comprises the following steps:
“Applying Power to the Content Security Manager” on page 3
“Accessing the SonicWALL Management Interface” on page 3
“Configuring the Network Interfaces” on page 5
“Configuring the Time Zone” on page 6
“Setting the Administrator Name and Password” on page 6
“Connecting the Content Security Manager to Your Network” on page 7
“Registering Your Content Security Manager” on page 9
“Modifying the *Default Policy Group” on page 11
“Applying Application Filters” on page 13
“Integrating the Content Security Manager with Microsoft Active Directory” on page 14
Note: After step 6, the Content Security Manager is fully functional, using the built-in default policy
group to filter content for all users, blocking Adult Content, Drugs/Alcohol/Tobacco, and Racism/
Hate/Violence/Weapons. Follow steps 7, 8, and 9 to further customize your installation.
1
2
3
4
5
6
7
8
9
10

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 3
Applying Power to the Content Security Manager
1. Plug the power cord into the Content Security Manager and into an appropriate power outlet.
2. Turn on the Content Security Manager appliance using the On/Off switch located on the back
of the appliance.
The Power LED shines green when you activate the power switch. The Test LED lights up and
may blink while the appliance performs a series of diagnostic tests. When the Test light is no
longer lit, the Content Security Manager is ready for configuration.
Accessing the SonicWALL Management Interface
To access the Web-based management interface of the Content Security Manager:
1. Configure the computer you are using to manage the Content Security Manager (the offline
management station) with the following TCP/IP address properties:
• Address Type: Static
• IP Address: 192.168.168.20
• Subnet Mask: 255.255.255.0
Note: You do not need to configure the default gateway or DNS settings.
2. Connect one end of the red crossover Ethernet cable to the Ethernet port
of the offline management station. Connect the other end of the red
crossover cable to the X2 port on the Content Security Manager.
Note: The X2 port is for offline management only, and has no network
connection.
3. Start your Web browser.
Alert: Your Web browser must support Java and HTTP uploads. Internet Explorer 5.0 or
higher or Netscape Navigator 4.0 or higher are recommended.
1
2

Page 4
4. Enter http://192.168.168.168 in the Location or Address field and press Enter.
Unable to Connect?
If you cannot connect to the Content Security Manager, verify the following configurations:
• Did you correctly enter the Content Security Manager X2 management IP address,
http://192.168.168.168, in your Web browser?
• Did you change the TCP/IP network settings on your computer?
• Do you have the Ethernet cable connected to your computer and to the X2 (offline
management) port on your Content Security Manager?
• Did you use a crossover cable to connect your offline management station to the
Content Security Manager?
5. In the Content Security Manager authentication page, enter admin in the Name field and
password in the Password field and click Login. The System > Status page is displayed.

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 5
Configuring the Network Interfaces
Configure the Content Security Manager’s X0 Internal and X1 External interfaces to use an IP
address in the same range as your LAN. When you configure the X1 External interface, the
X0 Internal interface is automatically configured.
Alert: You must configure the network interfaces before connecting the Content Security Manager
to your network. If you have already connected cables to the X0 and X1 interfaces, disconnect
them before continuing this step.
Set the X2 Management interface to an use IP Address that does not conflict with any device on
your LAN:
Configuring the X0 Internal and X1 External Interfaces
1. In the left-navigation menu, click Network and then click Interfaces.
2. From the Network > Interfaces page, select the edit icon for the X1 External interface,
and enter the following IP addressing information in the Edit Interface window:
•IP Address - a static IP address in the correct range for your LAN. Make sure this address
will not be assigned to any other device
•Subnet Mask - the network subnet for your LAN
•Default Gateway - the default gateway of your network
•DNS Server - the DNS server address for your network
3. By default, HTTP, HTTPS and Ping management options are enabled on X0, X1, and X2
interfaces. You may login to the management interface and configure appliance from your LAN
or WAN by using the IP address of X0/X1 interfaces.
4. Click OK.
Configuring the Offline Management Interface
If a device on your network uses 192.168.168.168 (such as the LAN IP address of your firewall or
Internet gateway), you must change the default IP address of the offline management interface on
your Content Security Manager:
1. From the Network > Interfaces page, select the edit icon for the X2 Management
interface, and configure the IP address, network mask, default gateway and DNS servers in
the Edit Interface window.
2. Write the new offline management IP address and store it: ____________________________
3. Click OK.
Note: The X2 port is used for management only and does not have any access to the network or
the Internet. The Content Security Manager online help is not available from this port when you
click on the help button on any management interface page.
3

Page 6
Configuring the Time Zone
Before you register your Content Security Manager or use the content filtering database and
dynamic rating feature, you must set the time zone on the content security appliance to the correct
time zone for your location:
1. In the left-navigation menu, click System, and then click Time.
2. In the Time Zone list, select the correct time zone for your location.
3. Set the time correctly, or check the box for Set time automatically using NTP.
4. Check the box next to Automatically adjust clock for daylight saving time.
5. Click Apply in the top-right corner of the System > Time page.
Setting the Administrator Name and Password
For security reasons, you should set the administrative user name and password:
1. In the management interface, in the left-navigation menu, click System and then click
Administration.
2. In the System > Administration page, enter a new user name in the Administrator Name field.
The default name is admin.
3. Enter password in the Old Password field.
4. Enter a new administrative password in New Password field and enter it again in the Confirm
Password field.
5. Click Apply in the top-right corner of the page for your changes to take effect.
4
5

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 7
Connecting the Content Security Manager to Your Network
Connect the Content Security Manager between your LAN and your firewall/security appliance,
allowing it to filter content requests from the LAN before they pass through the firewall/security
appliance to the Internet.
Alert: Do not connect the Content Security Manager to your network until you have configured the
X0 and X1 interfaces. See Step 3, “Configuring the Network Interfaces” on page 5.
Connecting the Ethernet Cables
1. Connect one end of the Ethernet cable connected to your internal network (your LAN hub,
switch, or router) to the X0 (Internal) port of the Content Security Manager.
The LEDs on the X0 port light up indicating an active connection.
2. Connect one end of an Ethernet cable connected to your firewall or internet connection to the
X1 (External) port of the Content Security Manager.
The LEDs on the X1 port light up indicating an active connection.
Test Your Connectivity
1. Log into the Content Security Manager management interface.
2. In the left-navigation menu, click System and then click Diagnostics.
3. In the System > Diagnostics page, Select Ping from the Diagnostic Tool list.
4. In the Ping host or IP address field, enter your firewall or router gateway IP address and click
Go. Note the result.
5. Enter an address outside your firewall, such as www.sonicwall.com and click Go. Note the
result.
6
X0
Internal
X1
External
X2
Offline
Management
Firewall
Internet
Offline
Management
Station
LAN

Page 8
6. Enter the IP address of your DNS server and click Go. Note the result.
7. If any of the addresses you tried to ping did not respond or responded with a slow Ping time
(greater than 50 milliseconds), you may need to create static routes from your
Content Security Manager to the firewall or router gateway and to your DNS server.
Add Static Routes
If you cannot connect to the firewall or router gateway or to URLs outside your firewall, and your
network consists of multiple subnets, you may need to add static routes to your company routers,
internal DNS servers, and your ADConnector.
To add static routes in the Content Security Manager management interface, perform the following
steps:
1. In the Content Security Manager management interface, in the left-navigation menu, click
Network and then click Interfaces.
2. In the Network > Interfaces page, click Add below the Routing Table.
3. Click Add in the Routing Table section. The Add Route window is displayed.
4. Enter the beginning IP address of the IP address range to which the DNS server or Internet
gateway belongs in the IP Address From field.
5. Enter the ending IP address of the IP address in the IP Address To field.
6. Enter the IP address of the gateway device to which the DNS server or Internet gateway are
attached in the Gateway IP field.
7. Select Internal (X0) or External (X1) from the Interface menu.
8. Click OK. The static route entry is added to the Routing Table.
The Routing Table displays the list of destinations that the IP software maintains on each host
and router.

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 9
Registering Your Content Security Manager
Once you have established an Internet connection for your Content Security Manager, you must
register the Content Security Manager to activate:
• Allowed Nodes/Users license
• SonicWALL Content Filtering Service subscription
• Dynamic Rating Update Service
• Application Filter Service subscription
Registering your Content Security Manager also allows you to:
• Download related software:
• SonicWALL ADConnector
• SonicWALL ViewPoint
• Receive firmware updates
• Access to SonicWALL technical support
• Get subscription renewals
• Upgrade node/user licenses
Before You Register
You need a mySonicWALL.com account to register your Content Security Manager. You can
create a new mySonicWALL.com account directly from the SonicWALL management interface.
Alert: Verify that the DNS and Time settings on your Content Security Manager are correct when
you register the device. Configure Time settings in the System > Time page. Configure DNS
settings in the Edit Interface window from the Network > Interfaces page.
Note: mySonicWALL.com registration information is not sold or shared with any other company.
Creating a mySonicWALL.com Account
Creating a mySonicWALL.com account is fast, simple, and FREE. Simply complete an online
registration form in the Content Security Manager management interface.
If you already have a mysonicWALL.com account, go to “Registering Your
Content Security Manager Using the Management Interface” on page 10 to register your
appliance.
1. If you are not logged into the Content Security Manager management interface log in with the
Content Security Manager administrative user name and password.
2. If the System > Status page is not displaying in the management interface, click System in
the left-navigation menu, and then click Status.
7