SonicWALL NSA 2650 User manual

SonicWall™NSA2650
GettingStartedGuide
RegulatoryModelNumber:
1RK38‐0C8

Copyright©2017SonicWallInc.Allrightsreserved.
SonicWallisatrademarkorregisteredtrademarkofSonicWallInc.and/oritsaffiliatesintheU.S.A.and/orothercountries.Allothertrademarksandregistered
trademarksarepropertyoftheirrespectiveowners
TheinformationinthisdocumentisprovidedinconnectionwithSonicWallInc.and/oritsaffiliates’products.Nolicense,expressorimplied,byestoppelor
otherwise,toanyintellectualpropertyrightisgrantedbythisdocumentorinconnectionwiththesaleofSonicWallproducts.EXCEPTASSETFORTHINTHETERMS
ANDCONDITIONSASSPECIFIEDINTHELICENSEAGREEMENTFORTHISPRODUCT,SONICWALLAND/ORITSAFFILIATESASSUMENOLIABILITYWHATSOEVERAND
DISCLAIMSANYEXPRESS,IMPLIEDORSTATUTORYWARRANTYRELATINGTOITSPRODUCTSINCLUDING,BUTNOTLIMITEDTO,THEIMPLIEDWARRANT YOF
MERCHANTABILITY,FITNESSFORAPA RT I CU L A R PURPOSE,ORNON‐INFRINGEMENT.INNOEVENTSHALLSONICWALLAND/ORITSAFFILIATESBELIABLEFORANY
DIRECT,INDIRECT,CONSEQUENTIAL,PUNITIVE,SPECIALORINCIDENTALDAMAGES(INCLUDING,WITHOUTLIMITATION,DAMAGESFORLOSSOFPROFITS,
BUSINESSINTERRUPTIONORLOSSOFINFORMATION)ARISINGOUTOFTHEUSEORINABILITYTOUSETHISDOCUMENT,EVENIFSONICWALLAND/ORITS
AFFILIATESHAVEBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES.SonicWalland/oritsaffiliatesmakenorepresentationsorwarrantieswithrespectto
theaccuracyorcompletenessofthecontentsofthisdocumentandreservestherighttomakechangestospecificationsandproductdescriptionsatanytime
withoutnotice.SonicWallInc.and/oritsaffiliatesdonotmakeanycommitmenttoupdatetheinformationcontainedinthisdocument.
Formoreinformation,visithttps://www.sonicwall.com/legal/.
NSA2650GettingStartedGuide
Updated‐August2017
232‐003394‐50RevA
Legend
WARNING:AWARNINGiconindicatesapotentialforpropertydamage,personalinjury,ordeath.
CAUTION:ACAUTIONiconindicatespotentialdamagetohardwareorlossofdataifinstructionsarenotfollowed.
IMPORTANT,NOTE,TIP,MOBILE,orVIDEO:Aninformationiconindicatessupportinginformation.

SonicWallNSA2650GettingStartedGuide 3
1
InthisGuide
ThisSonicWall™NSA2650GettingStartedGuideprovidesinstructionsforbasicinstallationandconfigurationofSonicWallNSA
2650appliance.
Topics:
•Overviewonpage3
•Contentsonpage4
•GettingStartedTaskOverviewonpage7
Overview
TheSonicWallNSA2650appliancerepresentsthecontinuingevolutionofSonicWall’svisionforadeeperlevelofnetworksecurity
withoutaperformancepenalty.TheNSA2650addressesthegrowingtrendsinwebencryptionandmobilitybydeliveringa
solutionthatmeetstheneedforhigh‐speedthreatprevention.TheNSA2650appliancefeaturesthefollowing:
•Increasedportdensitytoaccommodatecustomerdeploymentneeds
•increasedprocessorspeedsandcountsforfastdeeppacketinspectionperformance

4SonicWallNSA2650GettingStartedGuide
•EnhancedprocessorarchitecturethataidsStatefulandDeepPacketinspections
•Increasedconnections
•Pre‐populated,upgradeablestoragemodule
•Redundantpowersupplies
•Addedexpansionmoduleslotforfuturecapabilities
Formoreproductinformation,visithttps://www.sonicwall.com.
Contents
Chapter1Sectionsincluded:
InthisGuideonpage3•Overviewonpage3
•Contentsonpage4
•GettingStartedTaskOverviewonpage7
Chapter2Sectionsincluded:
HardwareOverviewonpage9•NSA2650PackageContentsonpage9
•NSA2650FrontPanelonpage12
•NSA2650BackPanelonpage13

SonicWallNSA2650GettingStartedGuide 5
Chapter3Sectionsincluded:
InitialSetuponpage15 •DeterminingtheWANTypeonpage16
•SystemRequirementsonpage17
•RecordingConfigurationInformationonpage17
•InitialConfigurationonpage19
•ConnectingtotheInternetonpage26
•TroubleshootingConnectionsonpage29
Chapter4Sectionsincluded:
Registering,Licensing,andUpgradingon
page31
•UsingMySonicWallonpage32
•CreatingaMySonicWallAccountonpage32
•RegistrationOverviewonpage33
•RegisteringinSonicOSonpage33
•AlternativeRegistrationOptionsonpage33
•LicensingSecurityServicesonpage35
•ActivatingLicensesUsingaKeyonpage36
•UpgradingFirmwareonpage37

6SonicWallNSA2650GettingStartedGuide
Forgeneralsupportinformation,seeSonicWallSupportonpage57.
Chapter5Sectionsincluded:
SupportandTrainingOptionsonpage43 •CustomerSupportonpage44
•KnowledgeBaseonpage44
•Trainingonpage44
•RelatedDocumentationonpage44
•AdditionallySupportedLanguagesonpage45
Chapter6Sectionsincluded:
SafetyInstructionsonpage48 •SafetyInstructionsonpage48
•Sicherheitsanweisungenonpage50
•安全說明onpage52
•DeclarationofConformityonpage54
•WarrantyInformationonpage54
•台灣 RoHS/ 限用物質含有情況標示資訊onpage55

SonicWallNSA2650GettingStartedGuide 7
GettingStartedTaskOverview
ThefollowingflowchartillustratesthenecessarystepsforgettingstartedwithyournewSonicWallNSAappliance.
Verify
Pre-Configuration
Requirements
Start Up
Management
Computer
Perform Initial
Setup
Register
Appliance in
SonicOS
Complete
Deployment
Configuration
Create a
MySonicWall
Account
Configuration
Registration, Licensing, and Deployment

8SonicWallNSA2650GettingStartedGuide

SonicWallNSA2650GettingStartedGuide 9
2
HardwareOverview
ThissectiondescribestheitemsshippedwiththeNSA2650applianceandprovidesfrontandrearillustrationsofit.
•NSA2650PackageContentsonpage9
•NSA2650FrontPanelonpage12
•NSA2650BackPanelonpage13
NSA2650PackageContents
Beforeyoubeginthesetupprocess,verifythatyourpackagecontainsthefollowingitems:
1OneSonicWallNSA2650appliance
2OneSonicWallNSA2650GettingStartedGuide
3Oneserialconsolecable
4OneEthernetcable

10 SonicWallNSA2650GettingStartedGuide
5Onepowercord*
6Tworackmountearswithsixscrews
7OneSafety,Environmental,andRegulatoryInformationdocument
*Theincludedpowercordisapprovedforuseonlyinspecificcountriesorregions.Beforeusingapowercord,verifythatitisrated
andapprovedforuseinyourlocation.ThepowercordisforACmainsinstallationonly.SeeInstallationRequirementsonpage48
formoreinformation.
Ifanyitemsaremissingfromyourpackage,contactSonicWallSupportat:https://www.sonicwall.com/en‐us/support/contact‐
support.

SonicWallNSA2650GettingStartedGuide 11
NSA2650PackageContents
1
45
2
3
6
7

12 SonicWallNSA2650GettingStartedGuide
NSA2650FrontPanel
X16
X17
MGMT SS
i
2
1
X0
X1
X2
X3
X4
X5
X6
X7
X8
X9
X10
X11
X12
X13
X14
X15
1GE
X18
X19
2.5/1GE 2.5/1GE
NSA 2650
M0
M1
i
N
SA 2650
M0
M1
CONSOLE
SafeMode
Button
POWERButton
1GigabitEthernetPorts
USB
Ports
CONSOLE
Port
MGMT
Port System
StatusLEDs
2.5/1GigabitEthernetPorts
2.5/1GigabitEthernetSFPPorts

SonicWallNSA2650GettingStartedGuide 13
NSA2650BackPanel
Storage Module
Expansion Module M1
M0
PowerSupply
Fans
Slotfor
Redundant
PowerSupply

14 SonicWallNSA2650GettingStartedGuide

SonicWallNSA2650GettingStartedGuide 15
3
InitialSetup
ThissectionprovidesanoverviewofavailableWANtypes,asectiontorecordconfigurationinformation,andinitialsetup
informationandprocedures.
•DeterminingtheWANTypeonpage16
•SystemRequirementsonpage17
•RecordingConfigurationInformationonpage17
•InitialConfigurationonpage19
•ConnectingtotheInternetonpage26
•TroubleshootingConnectionsonpage29

16 SonicWallNSA2650GettingStartedGuide
DeterminingtheWANType
BeforeconfiguringyourSonicWallNSAappliance,youneedto
determinethetypeofWANconnectionthatyoursetupuses.
SonicWallsupportsthefollowingtypes:
•Static—Configurestheapplianceforanetworkthatuses
staticIPaddresses.
•DHCP—ConfigurestheappliancetorequestIPsettings
fromaDHCPserverontheInternet.
•PPPoE—Point‐to‐PointProtocoloverEthernet(PPPoE)is
typicallyusedwithaDSLmodem.IfyourISPrequires
desktopsoftwarewithausernameandpassword,select
NATwithPPPoEmode.
•PPTP—Point‐to‐PointTunnelingProtocol(PPTP)isusedto
connecttoaremoteserver.PPTPtypicallysupportsolder
MicrosoftWindowsimplementationsthatrequire
tunnelingconnectivity.
•L2TP—Layer2TunnelingProtocol(L2TP)isusedtotransmit
Layer2dataoverIPorotherLayer3routednetworks.
InternetServiceProviders(ISPs)oftenuseittoenable
virtualprivatenetworks(VPNs)forcustomersoverthe
Internet.Itdoesnotencryptnetworktrafficitself.IfL2TPis
notavailableintheSetupWizard,youcanconfigureitlater
intheSonicOSmanagementinterface.
•WireMode(2‐PortWire)—Insertstheapplianceintothe
networkusingtwopairedinterfaces.AvailableWireMode
typesincludeBypass,Inspect,andSecure.Bypassmode
allowsforquickandnon‐disruptiveinsertionintothedata
path.InspectmodeextendsBypassmodewithtraffic
inspectionforclassificationandflowreporting.Secure
modeprovidesfullSonicWallReAssembly‐FreeDeep
PacketInspection™(RF‐DPI)andcontrolofnetworktraffic.
SecureModealsoaffordsthesamelevelofvisibilityand
enforcementasconventionalNATorL2BridgedMode
deployments,butwithoutanyL3/L4transformations,and
withnoalterationsofARPorroutingbehavior.IfWire
ModeisnotavailableintheSetupWizard,youcan
configureitlaterintheSonicOSmanagementinterface.
•TapMode(1‐PortTap)—Usingasingleinterface,the
firewallconnectstoandreceivesmirroredpacketsfroman
adjacentswitchSPANport.SimilartoInspectmodeinWire
Mode,butwithasingleportandnotinthephysicalpathof
traffic.
NOTE:WhenoperatinginWireMode,thefirewall’s
MGMTinterfaceisusedforlocalmanagement.To
enableremotemanagementanddynamicsecurity
servicesandapplicationintelligenceupdates,aWAN
interface(separatefromtheWireModeinterfaces)
mustbeconfiguredforInternetconnectivity.

SonicWallNSA2650GettingStartedGuide 17
SystemRequirements
Beforebeginningthesetupprocess,verifythatyouhave:
•AnInternetconnection
•AWebbrowsersupportingJavaScriptandHTTPuploads
RecordingConfiguration
Information
Usethissectiontorecordyourconfigurationinformation.Be
suretokeepitforfuturereference.
RegistrationInformation
SupportedBrowsers
AcceptedBrowser BrowserVersionNumber
InternetExplorer 10.0andhigherorIEEdge
Chrome 45.0andhigher
Firefox 25.0andhigher
Safari 10.0andhigher
NOTE:ThedefaultMGMTinterfaceIPaddressis
192.168.1.254.
SerialNumber:Recordtheserialnumberfound
onthestickeronthetoppanelof
yourSonicWallNSAappliance.
AuthenticationCode:Recordtheauthenticationcode
foundonthestickeronthetop
panelofyourSonicWallNSA
appliance.

18 SonicWallNSA2650GettingStartedGuide
NetworkingInformation AdministratorInformation
InternetServiceProvider(ISP)
Information
RecordthefollowinginformationaboutyourcurrentInternet
service:
LANIPAddress:SelectastaticIPaddressforyour
SonicWallNSAappliancethatiswithin
therangeofyourlocalnetwork.(default
forX0is192.168.168.168)
SubnetMask:Recordthesubnetmaskforthelocal
network(defaultmaskis255.255.255.0).
Clientdevicesconnectingthroughthe
applianceLANinterfaceareassignedIP
addressesinthisnetwork(defaultclient
addressesassignedbytheSonicOSDHCP
serverareonthe192.168.168.0/24
subnet).
WANIPAddress: SelectastaticIPaddressforyour
EthernetWANinterface(X1).Thissetting
onlyappliesifyouareusinganInternet
ServiceProvider(ISP)thatassignsastatic
IPaddress.
WireMode
Interfaceand
PairedInterface:
IfusingWireMode,enterthetwopaired
interfaces.Thesecanbeinanynon‐
wirelesszone(s).
TapInterface: IfusingTapMode,entertheinterface,
andoptionallytheswitchinterface,used.
AdminName: Selectanadministratoraccount
name.(defaultisadmin)
AdminPassword: Selectanadministratorpassword.
(defaultispassword)
Ifyouare
connecting
withDHCP
Noinformationisusuallyrequired.However,
someprovidersmayrequireahostname.
HostName:
Ifyouare
connecting
withaStatic
IPaddress
IPAddress:_____._____._____._____
SubnetMask:_____._____._____._____
DefaultGateway:_____._____._____._____
PrimaryDNS:_____._____._____._____
DNS2(optional):_____._____._____._____
DNS3(optional):_____._____._____._____

SonicWallNSA2650GettingStartedGuide 19
InitialConfiguration
ThediagrambelowillustrateshowtoconnectyourmanagementcomputertotheSonicWallNSAappliance.
X16
X17
MGMT SS
i
2
1
X0
X1
X2
X3
X4
X5
X6
X7
X8
X9
X10
X11
X12
X13
X14
X15
1GE
X18
X19
2.5/1GE 2.5/1GE
NSA 2650
M0
M1
i
N
S
A 2
650
M
0
M1
CONSOLE
M
MGMT
T
T
M
MGMT
Management Computer
SonicWall Appliance
120V AC
(U.S.)

20 SonicWallNSA2650GettingStartedGuide
Thefollowingsectionsprovideinitialconfigurationinformation
andinstructionsforconnectingyourSonicWallNSAappliance
forinitialsetup:
•ConnectingtotheMGMTPortonpage20
•ApplyingPowertotheNSAonpage20
•SonicWallNSALEDActivityonpage20
•UsingtheSetupWizardonpage23
ConnectingtotheMGMTPort
TheMGMTportisadedicated1gigabitEthernetinterfacefor
appliancemanagementandSafeModeaccess.
1UsingtheprovidedEthernetcable,connectoneendof
thecabletothecomputeryouareusingtomanagethe
SonicWallNSAappliance.
2ConnecttheotherendoftheEthernetcabletothe
MGMTportonyourSonicWallNSAappliance.
ApplyingPowertotheNSA
ConnecttheACpowercordfromtheSonicWallNSAappliance
intoanappropriatepoweroutlet.
Forfurtherinformationregardingpowerrequirements,refer
toInstallationRequirementsonpage48ofthisdocument.
SonicWallNSALEDActivity
ThesystemLEDsprovideessentialstatusinformationabout
theNSA2650.
LED/Color Description
Power1andPower2
Blue Respectivepowersupplyisonand
operatingproperly.
Yellow Respectivepowersupplyisbad,not
connectedtoanACsource,orswitched
off.
NOTE:Theremaybea10‐20seconddelay
fromthemomentwhenapowerLED
becomesyellow.Thisisnormaland
associatedwithvoltagedecay.