SonicWALL NSA 250M series User manual

SonicOS 7
Getting Started Guide
for the NSsp 13700 and NSa Series

Contents
Introduction 4
NSa Series Overview 5
Deployment Options 5
Internet Edge Deployment 6
Medium and Distributed Enterprises 7
NSa Hardware Features 7
NSa System Requirements 9
NSsp 13700 Overview 11
Features 11
Connectivity, Port Density and Performance 11
Firmware Features 12
Hardware Features 13
Front Panel 13
Rear Panel 17
System Specifications 17
Determining the WAN Type 19
System Setup 21
Default Settings 21
System Startup 22
Basic Configuration 23
Registration and Licensing 23
Creating a MySonicWall Account 24
Setup Options 25
Zero Touch 25
Setting Up with NSM 25
Setting Up with SonicExpress 28
Setting Up with CLI 29
Running the Setup Wizard 30
Testing and Troubleshooting Connectivity 32
Testing Your Internet Connection 32
Troubleshooting your Internet Connection 32
SonicOS 7 Getting Started Guide for the NSsp 13700 and NSa Series
Contents
2

Troubleshooting Your MGMT Connection 33
Troubleshooting Your LAN Connection 33
Using SafeMode 33
Migration Tool 34
About Migration 34
Using the Migration Tool 35
SonicWall Support 38
About This Document 39
SonicOS 7 Getting Started Guide for the NSsp 13700 and NSa Series
Contents
3

Introduction
Today’s distributed IT—where end points are on premises, in the cloud, in the data center, at a branch office or in
a home office—is creating an unprecedented explosion of exposure across organizations. As the exposure
points to multiply, business risks continue to escalate, and each one needs to be protected from today’s
sophisticated threats. SonicWall offers several firewall models to suit your business.
The NSa Series offers a mid-range solution. They are designed for businesses having 250 users and up. With
cloud-based and on-box capabilities like TLS/SSL decryption and inspection, application intelligence and control,
secure SD-WAN, real-time visualization, and WLAN management, the NSa Series provides flexible, fast and
cost-effective security to keep the threats out.
To resolve similar challenges for enterprise-level customers, the SonicWall Network Security services platform
(NSsp) is a high-end firewall series delivering advanced threat protection and fast speeds demanded by large
enterprises, data centers and service providers. The NSsp 13700 is the enterprise firewall to replace existing NSa
9650 firewalls.
This document describes how to get started on one of the firewalls from the NSa Series or on the NSsp 13700.
These systems run classic SonicOS 7. It also includes information on how to migrate the configuration settings
from older firewalls to firewalls covered by this document.
NOTE: This document does not include information pertaining to the NSsp 15700. For more information
about that firewall, refer to SonicOSX7 NSsp 15700 Getting Started Guide.
Topics in this document include:
lNSa Series Overview
lNSsp 13700 Overview
lDetermining the WAN Type
lSystem Setup
lSetup Options
lRunning the Setup Wizard
lTesting and Troubleshooting Connectivity
lMigration Tool
SonicOS 7 Getting Started Guide for the NSsp 13700 and NSa Series
Introduction
1
4

NSa Series Overview
The NSa Series offers a mid-range solution. They are designed for businesses having 250 users and up. With
cloud-based and on-box capabilities like TLS/SSL decryption and inspection, application intelligence and control,
secure SD-WAN, real-time visualization, and WLAN management, the NSa Series provides flexible, fast and
cost-effective security to keep the threats out.
The updated NSa Series has been built from the ground up with the latest hardware components, all designed to
deliver multi-gigabit threat prevention throughput — even for encrypted traffic. The firewalls support high port
density, including multiple 40 GbE and 10 GbE ports, hardware redundancy with high availability, and dual power
supplies, depending on the model.
This section describes how to get started on one of the firewalls from the NSa Series:
lDeployment Options
lNSa Hardware Features
lNSa System Requirements
Deployment Options
The NSa Series has two main deployment options for medium and distributed enterprises:
lInternet Edge Deployment
lMedium and Distributed Enterprises
SonicOS 7 Getting Started Guide for the NSsp 13700 and NSa Series
NSa Series Overview
2
5

Internet Edge Deployment
In this standard deployment option, the NSa Series—a next generation firewall (NGFW)—protects private
networks from malicious traffic coming from the internet.
It allows you to:
lDeploy a proven NSa Series solution with highest performance and port density (including 40 GbE and 10
GbE connectivity) in its class
lGain visibility and inspect encrypted traffic, including TLS 1.3, to block evasive threats coming from the
Internet — all without compromising performance
lProtect your enterprise with integrated security, including malware analysis, cloud app security, URL
filtering and reputation services
lSave space and money with an integrated solution that includes advanced security and networking
capabilities
lReduce complexity and maximize efficiency using a central management system delivered through an
intuitive single-pane of-glass user interface
SonicOS 7 Getting Started Guide for the NSsp 13700 and NSa Series
NSa Series Overview
6

Medium and Distributed Enterprises
The SonicWall NSa Series supports SD-WAN and can be centrally managed, making it an ideal fit for medium
and distributed enterprises.
This deployment allows organizations to:
lFuture-proof against an ever-changing threat landscape by investing in a firewall with multi-gigabit threat
analysis performance
lProvide direct and secure internet access to distributed branch offices instead of back-hauling through
corporate headquarters
lAllow distributed branch offices to securely access internal resources in corporate headquarters or in a
public cloud, significantly improving application latency
lAutomatically block threats that use encrypted protocols such as TLS 1.3, securing networks from the
most advanced attacks
lReduce complexity and maximize efficiency using a central management system delivered through an
intuitive single pane of glass user interface
lLeverage high port density that includes 40 GbE and 10 GbE connectivity to support a distributed
enterprise and wide area networks
NSa Hardware Features
The following images show the front and back panel of each of the NSa Series firewalls. The ports and key
features are also identified.
SonicOS 7 Getting Started Guide for the NSsp 13700 and NSa Series
NSa Series Overview
7

NSa 2700:
NSa 3700:
NSa 4700:
SonicOS 7 Getting Started Guide for the NSsp 13700 and NSa Series
NSa Series Overview
8

NSa 6700:
NSa System Requirements
The NSa Series firewalls meet the following system requirements:
Model NSa 2700 NSa 3700 NSa 4700 NSa 6700
Storage 64GB (M.2) 128GB (M.2) 128 GB 256GM (M.2)
System Memory Storage expansion
slot, up to 256GB
Storage expansion
slot, up to 256GB
Storage expansion
slot, up to 1TB
Storage expansion
slot, up to 1TB
VLAN interfaces 256 256 512 512
Maximum access
point supported
32 32 512 512
Interfaces l16 x 1GbE
l3 x 10G SFP+
l2 USB 3.0
l1 Console
l1 Mgmt port
l24 x 1GbE,
l6 x 10G SFP+
l4 x 5G SFP+
l2 USB 3.0
l1 Console
l1 Mgmt port
l6 x
10G/5G/2.5G/1G
SFP+
l24 x 1GbE,
l2 USB 3.0
l1 Console
l1 Mgmt port
l2 x 40G
l8 x 25G
l4 x
10G/5G/2.5G/1G
SFP+
l4 x
10G/5G/2.5G/1G
Cu
l16 x 1GbE,
l2 USB 3.0
l1 Console
l1 Mgmt port
SonicOS 7 Getting Started Guide for the NSsp 13700 and NSa Series
NSa Series Overview
9

Model NSa 2700 NSa 3700 NSa 4700 NSa 6700
Fans 1 2 2 (removable) 2 (removable)
Power supply 60W 90W 1x350W 1x350W
Chassis
Dimension (1U)
16.9 x 12.8 x. 1.8 in
43 x 32.5 x 4.5 cm
16.9 x 12.8 x. 1.8 in
43 x 32.5 x 4.5 cm
16.9 x 18.1 x. 1.8 in
43 x 46.5 x 4.5 cm
16.9 x 18.1 x. 1.8 in
43 x 46.5 x 4.5 cm
SonicOS 7 Getting Started Guide for the NSsp 13700 and NSa Series
NSa Series Overview
10