SonicWALL Email Security 6000 User manual

EMAIL SECURITY SonicWALL Email Security
SonicWALL Email Security
Solutions
SonicWALL
Email Security 6000
Getting Started Guide

SonicWALL Email Security 6000 Getting Started Guide Page 1
SonicWALL Email Security 6000
Getting Started Guide
This Getting Started Guide contains installation procedures and configuration guidelines
for deploying a SonicWALL Email Security appliance on your network.
SonicWALL Email Security provides effective, high-performance and easy-to-use
inbound and outbound email threat protection. Ideal for the small to medium size
business, this self-running, self-updating appliance delivers powerful protection against
spam, virus and phishing attacks in addition to preventing leaks of confidential
information. Combining anti-spam, anti-phishing, content filtering, policy management
and content compliance capabilities in a single seamlessly integrated solution,
SonicWALL Email Security provides powerful protection without complexity.
Note: In order to use the spam and phishing protection provided by the SonicWALL
Email Security appliance, you must have a subscription to SonicWALL Email
Protection and Dynamic Support. If you need to purchase a subscription, contact
your SonicWALL vendor.
Please read this entire Getting Started Guide before setting up your
SonicWALL Email Security 6000 appliance, and note that an updated version of this
guide may exist. Refer to SonicWALL’s Documentation Web site for complete, updated
documentation at: <http://www.sonicwall.com/support/documentation.html>.

Page 2
Contents
This document contains the following sections:
Before You Begin
• “Check Package Contents” on page 3
• “What You Need to Begin” on page 4
• “Record Configuration Information” on page 4
• “Overview of the SonicWALL Email Security Appliance” on page 6
Registering Your SonicWALL Email Security Appliance
• “Before You Register” on page 7
• “Registering Your SonicWALL Email Security Appliance” on page 7
• “Activating SonicWALL Email Protection Services” on page 9
Setting Up the SonicWALL Email Security Appliance
• “Apply Power to the SonicWALL Email Security Appliance” on page 11
• “Connect Directly to the SonicWALL Email Security Appliance” on page 11
• “Login to the SonicWALL Email Security Appliance” on page 12
• “Initial System Configuration” on page 13
Connecting and Configuring the SonicWALL Email Security Appliance on the
Network
• “Connecting the SonicWALL Email Security Appliance to Your Network” on
page 16
• “The SonicWALL Email Security Interface” on page 17
• “Change the Default Administrator Password” on page 18
• “Enter the License Keys for Each Service” on page 18
• “Using Quick Configuration to Set Up Email Management” on page 19
Verification and Further Configuration
• “Route Mail to Your SonicWALL Email Security Appliance” on page 22
• “Verify Mail from the Internet Through Your SonicWALL Email Security
Appliance” on page 23
1
2
3
4
5

SonicWALL Email Security 6000 Getting Started Guide Page 3
Before You Begin
Check Package Contents
One SonicWALL Email Security appliance
One Getting Started Guide document
One Release Note document
One Thank You card
One SonicWALL Resource CD
One crossover cable (red)
One Ethernet cable (gray)
One power cord*
One RS232 CLI cable
* The included power cord is intended for use in North America only. For European
Union (EU) customers, a power cord is not included.
* Das eingeschlossene Netzkabel ist für Gebrauch in Nordamerikas nur vorgehabt.
Für Europaïsche Union (EU) Kunden, ist ein Netzkabel nicht eingeschlossen.
1
Any Items Missing?
If any items are missing from your package,
contact:
SonicWALL Support
Web: <http://www.sonicwall.com/support/>
Email: [e-mail]
1
2
3
4
5
6
7
8
9

Page 4
What You Need to Begin
• A computer to use as a management station for initial configuration of SonicWALL
Email Security software
• Internet Explorer 5.0 or higher
• An Internet connection
Record Configuration Information
Before continuing, record the following configuration information for your reference:
Registration Information
Serial Number:
(xxxxxx-xxxxxx)
Record the serial number found on the top
right access panel of your SonicWALL
Email Security appliance.
Authentication Code:
(xxx-xxx)
Record the authentication code found on
the top right access panel of your
SonicWALL Email Security appliance.
Activation Keys
(xxxxxxxx)
SonicWALL Email Security:
A n t i - S p a m a n d A n t i - P h i s h i n g :
A n t i - V i r us ( K a s p e r s k y ) :
Ant i - Vi r us (McA f ee):
Email Compliance:
Record your service activation keys.
These keys are included with your
SonicWALL Email Security appliance and
may also be purchased separately from
your SonicWALL authorized vendor.

SonicWALL Email Security 6000 Getting Started Guide Page 5
Networking Information
Email Security IP Address: Select a free static IP address for your
SonicWALL Email Security appliance that
is within the range of your local subnet.
Email Security Subnet Mask: Enter the subnet mask for the local subnet
where you are installing your SonicWALL
Email Security appliance.
Gateway IP Address: Record the IP address of your network’s
gateway device (such as your perimeter
firewall/router).
DNS Server 1:
DNS Server 2 (op t ional ) :
Record your DNS Server information.
Host Name: A fully qualified domain name within your
network to address the SonicWALL Email
Security appliance.
Password: Select a password for your SonicWALL
Email Security appliance (default is
password).
Email Server IP: IP address or hostname of your email
server.
LDAP Server IP: IP address or hostname of your directory
services server, such as LDAP or Microsoft
Active Directory.

Page 6
Overview of the SonicWALL Email Security Appliance
HDD LED Indicates data transfer to and from the hard disk drive.
Power LED Indicates the SonicWALL Email Security appliance is powered on.
Reset Button Allows reboot of the SonicWALL Email Security appliance.
Power Button Allows the SonicWALL Email Security appliance to power on (one
press) or power off.
Cooling Fan Allows optimal air circulation.
Power Supply Allows the SonicWALL Email Security appliance to connect to AC
power using the supplied power cable.
LAN Port Allows the SonicWALL Email Security appliance to connect to
your local area network.
Serial Port Allows you to connect directly to the appliance via terminal
services to use the CLI.
SonicWALL Email Security Appliance
* Pressing the reset button for several seconds will result in a reboot of the SonicWALL
Email Security appliance.
Alert: Do not plug devices into any ports (other than those indicated) unless explicitly
instructed to do so by a SonicWALL technical support representative. Doing so may
void your warranty.
LAN Port
Cooling Fan
Power Supply
Serial Port
Power Button
Reset Button*
HDD LED
Power LED

SonicWALL Email Security 6000 Getting Started Guide Page 7
Registering Your SonicWALL Email Security Appliance
Before you can use your SonicWALL Email Security appliance, you must first register
your appliance and activate your licenses for the SonicWALL Email Protection
Subscription and Dynamic Support.
This section contains the following sub-sections:
• “Before You Register” on page 7
• “Creating a mysonicwall.com Account” on page 28
• “Registering Your SonicWALL Email Security Appliance” on page 7
• “Activating SonicWALL Email Protection Services” on page 9
Before You Register
You need a mysonicwall.com account to register the SonicWALL Email Security
appliance. To create a mysonicwall.com account, refer to “Creating a mysonicwall.com
Account” on page 28. If you already have a mysonicwall.com account, go to “Registering
Your SonicWALL Email Security Appliance” on page 7 to register your appliance.
Note: mysonicwall.com registration information is not sold or shared with any other
company.
Registering Your SonicWALL Email Security Appliance
1. Locate your SonicWALL Email Security Software serial number. It should be printed
on the label on the right-side of your SonicWALL Email Security appliance.
2. If you are not already logged into mysonicwall.com, go to
https://www.mysonicwall.com and log in.
3. Enter your serial number in the Quick Register field and click the small gray arrow.
Follow the on-screen instructions.
2

Page 8
4. Confirm your serial number, enter a friendly name for your appliance, and enter your
authentication code in the Quick Register > Add New Product section.
5. Click .
6. Follow the online prompts to fill out the survey and complete the registration process.

SonicWALL Email Security 6000 Getting Started Guide Page 9
Activating SonicWALL Email Protection Services
In this section, you will activate the required SonicWALL Email Security appliance
services and add optional services. Activation keys for Email Security (Appliance) and
for Email Protection Subscription (Anti-Spam and Anti-Phishing) are required in order for
your SonicWALL Email Security appliance to function correctly. Contact your SonicWALL
authorized reseller if you are missing these keys.
1. If you are not already in the Service Management page, click on My Products.
2. Click on the name or serial number link of your SonicWALL Email Security appliance
in the Registered Products list to continue to the Applicable Services section.
3. The Applicable Services table should list all the services you purchased with your
SonicWALL Email Security appliance.
The services that are already activated will display with and a 27-
character license key.
If a service you purchased a license for is not activated, click next to
the service to activate it.

Page 10
Note: If your Email Protection Subscription service is not installed, you must activate it
in order to use the spam and phishing protection in your SonicWALL Email
Security appliance.
4. Locate your activation codes. They should be sets of 8 alpha-numeric characters in
the format XXXXXXXX.
5. Enter the activation code for the service in the Activation Key field and click
Submit.
The Service Name table will list a 27 digit alpha-numeric license key for the service in the
format XXX-XXX-XXX-XXX-XXX-XXX-XXX-XXX-XXX.
6. Record the license key in the table below.
7. Repeat this for each service you want to activate.
8. Record all of your license keys from the Service Name table and either paste them
into a text file or word processing document, or write them down in the table below.
Note: You will need these license keys in order to activate services locally on your
appliance. Record any license keys before continuing with the setup process.
Service License Key
Email Security Appliance
Anti-Spam and Anti-Phishing
Anti-Virus (McAfee/SonicWALL)
Anti-Virus (Kaspersky/SonicWALL)
Email Compliance

SonicWALL Email Security 6000 Getting Started Guide Page 11
Setting Up the SonicWALL Email Security Appliance
This section contains the following sub-sections:
• “Apply Power to the SonicWALL Email Security Appliance” on page 11
• “Connect Directly to the SonicWALL Email Security Appliance” on page 11
• “Login to the SonicWALL Email Security Appliance” on page 12
• “Initial System Configuration” on page 13
Apply Power to the SonicWALL Email Security Appliance
1. Plug the power cord into the back of the SonicWALL Email Security appliance and
into an appropriate power outlet. The unit will power on and beep once during the
initial boot sequence, the entire sequence may take several minutes.
Note: The Power LED on the front panel lights up green when you power on the
SonicWALL Email Security appliance. The HDD LED lights up and may blink
while the appliance performs a series of diagnostic tests. When the HDD LED is
no longer lit, the SonicWALL Email Security appliance is ready for configuration.
Connect Directly to the SonicWALL Email Security Appliance
The SonicWALL Email Security appliance comes configured with an IP address of
192.168.168.169. Before you can connect your management station to it, you must
configure your management station to have an address in the same subnet.
1. Make a note of your computer’s current network settings.
2. Set the computer you use to manage the SonicWALL Email Security appliance to
have a static IP address in the 192.168.168.x range, such as 192.168.168.50 and a
netmask of 255.255.255.0. For help with setting up a static IP address on your
computer, refer to “Advanced Configurations” on page 27.
3. Using the supplied crossover cable and the computer you are using to administer the
SonicWALL Email Security appliance, connect the LAN port on the computer to the
LAN (1) port on the back of your SonicWALL Email Security appliance.
3

Page 12
Login to the SonicWALL Email Security Appliance
1. Open a Web browser on the computer you are using to administer the SonicWALL
Email Security appliance.
2. Enter http://192.168.168.169 (the default IP address of the SonicWALL Email
Security appliance) in the Location or Address bar. The SonicWALL Email Security
Web management login screen displays.
Note: Depending on your browser settings, one or more security warnings may
display while connecting to the Email Security Web management interface.
Choose to accept the certificates in order to log into the SonicWALL Email
Security appliance.
3. Log into SonicWALL Email Security appliance using “admin” as the user name and
“password” as the password.

SonicWALL Email Security 6000 Getting Started Guide Page 13
Initial System Configuration
1. The first time you log in to the SonicWALL Email Security appliance, you are directed
to the system configuration page. Configure your settings as follows:
Monitoring
Email address of the
administrator who
receives emergency
alerts:
The email address of the mail server administrator. Enter the
complete email address. For example, [email protected]
Postmaster for the
MTA:
The email address of the Mail Transfer Agent administrator.
Enter the complete email address. For example,
[email protected]
Name or IP address
of backup SMTP
servers:
Enter fully qualified domain names or IP addresses. For
example, mail2.example.com or 10.100.0.1.

Page 14
Hostname and Networking
Hostname: Enter a hostname you can use within your network to address
the SonicWALL Email Security appliance. Enter a fully qualified
domain name, for example, emailsecurity.example.com
Get all network
settings from DHCP:
Select this if you want your SonicWALL Email Security appliance
to get dynamic IP settings from the DHCP server on your
network.
Use the static
settings below:
Select this to assign your SonicWALL Email Security appliance a
static IP address.
Enter:
• This machine's IP address
• Primary DNS server IP address (the local DNS server
that has the MX record for your mail server)
• Fallback DNS server IP address
• Default gateway IP address
• Subnet mask

SonicWALL Email Security 6000 Getting Started Guide Page 15
Date and Time
Note: To ensure optimal network performance of your SonicWALL Email Security
appliance, it is important that you select the proper time zone.
2. Click the Apply Changes button to save this configuration.
3. Disconnect the crossover cable from the SonicWALL Email Security appliance.
4. Reset your management computer’s IP settings to work with your network. For
example, if your network uses DHCP, reset your Local Area Connection to obtain an
IP address and DNS settings dynamically from the server.
5. Reconnect your management computer to your network. You will use the network to
access the SonicWALL Email Security appliance in the next steps.
System Date and
Time:
Select the current year, month, day, hour, and minute.
Current Time Zone: Displays the currently configured time zone.
Available Time
Zones:
Select the time zone for your area.
Automatically Adjust
for Daylight Savings
Time:
Select this if your area observes Daylight Saving Time.

Page 16
Connecting and Configuring the SonicWALL Email
Security Appliance on the Network
This section contains the following sub-sections:
• “Connecting the SonicWALL Email Security Appliance to Your Network” on
page 16
• “The SonicWALL Email Security Interface” on page 17
• “Change the Default Administrator Password” on page 18
• “Enter the License Keys for Each Service” on page 18
• “Using Quick Configuration to Set Up Email Management” on page 19
Connecting the SonicWALL Email Security Appliance to Your
Network
Your SonicWALL Email Security appliance is designed to operate in most network
setups with minimal configuration. The diagrams below provide a “before” and “after”
view of a network using SonicWALL Email Security.
1. Plug one end of the provided Ethernet cable into the LAN port on the back of your
SonicWALL Email Security appliance.
2. Plug the other end of the cable into an open port on your network hub or switch.
4
Local
Clients
Incoming
Email
Outgoing
Email
Incoming
Email
Outgoing
Email
Mail Flow Before SonicWALL Email Security
Mail Flow After SonicWALL Email Security

SonicWALL Email Security 6000 Getting Started Guide Page 17
The SonicWALL Email Security Interface
The SonicWALL Email Security management interface has eight buttons across the top
of the screen. Each button corresponds to a different set of management topics. Each
button brings up a set of management pages you can navigate with a menu in the left
column. When you select a different button at the top, the left-navigation menu changes.
At all times in the management interface, one button is selected and one page in the left-
navigation menu is selected.
Click here to send a
message to SonicWALL
Technical Support
Click here to get application information
Click here to change
UI language
Left hand side menu
Module icons
User’s login
User’s role

Page 18
Change the Default Administrator Password
1. Login to the SonicWALL Email Security appliance using the IP address you entered
in “Hostname and Networking” on page 14.
The Server Configuration > License Management page displays.
2. Enter a new management password into the Password field.
3. Enter it again in the Confirm Password field.
4. Click Apply Changes.
Enter the License Keys for Each Service
1. Retrieve the license keys you recorded in “Activating SonicWALL Email Protection
Services” on page 9. Enter each license key for a service in the License Key field.
2. Click the Add License Key button.
3. Repeat this step for each license key. The Module table will display the licensing
status of each service you enter a key for.

SonicWALL Email Security 6000 Getting Started Guide Page 19
Using Quick Configuration to Set Up Email Management
The Quick Configuration page will walk you step-by-step through the configuration of
your SonicWALL Email Security appliance. Use this window the first time you configure
SonicWALL Email Security if you are installing SonicWALL Email Security as an All-In-
One server and have only one downstream server. More options for these settings are
available in the other Server Configuration pages.
Click at the bottom of the
Server Configuration > License Management page to launch the Quick
Configuration page.
Network Architecture
1. Configure the inbound and outbound message processing paths:
Inbound destination
server: Click for more information.
Inbound SMTP
setup:
Select one of the two inbound SMTP setups options. If you
select to specify domains, enter the domains to permit.
Separate domains with a <CR>. Example:
example.com
example.net
Click to test communication with
the domains you entered.
Outbound path
setup:
Check this box to route outbound mail across the Internet
using MX records.