SonicWALL SMA 200 User manual

SonicWall™
SecureMobileAccess200/400
GettingStartedGuide
SMA200RegulatoryModelNumber:1RK33‐0BB
SMA400RegulatoryModelNumber:1RK33‐0BC

Copyright©2017SonicWallInc.Allrightsreserved.
SonicWallisatrademarkorregisteredtrademarkofSonicWallInc.and/oritsaffiliatesintheU.S.A.and/orothercountries.Allothertrademarksandregistered
trademarksarepropertyoftheirrespectiveowners
TheinformationinthisdocumentisprovidedinconnectionwithSonicWallInc.and/oritsaffiliates’products.Nolicense,expressorimplied,byestoppelor
otherwise,toanyintellectualpropertyrightisgrantedbythisdocumentorinconnectionwiththesaleofSonicWallproducts.EXCEPTASSETFORTHINTHETERMS
ANDCONDITIONSASSPECIFIEDINTHELICENSEAGREEMENTFORTHISPRODUCT,SONICWALLAND/ORITSAFFILIATESASSUMENOLIABILITYWHATSOEVERAND
DISCLAIMSANYEXPRESS,IMPLIEDORSTATUTORYWARR ANT YRELATINGTOITSPRODUCTSINCLUDING,BUTNOTLIMITEDTO,THEIMPLIEDWARRANT YOF
MERCHANTABILITY,FITNESSFORAPA RT I CU L A R PURPOSE,ORNON‐INFRINGEMENT.INNOEVENTSHALLSONICWALLAND/ORITSAFFILIATESBELIABLEFORANY
DIRECT,INDIRECT,CONSEQUENTIAL,PUNITIVE,SPECIALORINCIDENTALDAMAGES(INCLUDING,WITHOUTLIMITATION,DAMAGESFORLOSSOFPROFITS,
BUSINESSINTERRUPTIONORLOSSOFINFORMATION)ARISINGOUTOFTHEUSEORINABILITYTOUSETHISDOCUMENT,EVENIFSONICWALLAND/ORITS
AFFILIATESHAVEBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES.SonicWalland/oritsaffiliatesmakenorepresentationsorwarrantieswithrespectto
theaccuracyorcompletenessofthecontentsofthisdocumentandreservestherighttomakechangestospecificationsandproductdescriptionsatanytime
withoutnotice.SonicWallInc.and/oritsaffiliatesdonotmakeanycommitmenttoupdatetheinformationcontainedinthisdocument.
Formoreinformation,visithttps://www.sonicwall.com/legal/.

SMA200/400GettingStartedGuide
Updated‐March2017
232‐003789‐50RevA
Legend
WARNING:AWARNINGiconindicatesapotentialforpropertydamage,personalinjury,ordeath.
CAUTION:ACAUTIONiconindicatespotentialdamagetohardwareorlossofdataifinstructionsarenotfollowed.
IMPORTANT,NOTE,TIP,MOBILE,orVIDEO:Aninformationiconindicatessupportinginformation.

SonicWallSecureMobileAccess200/400GettingStartedGuide 3
1
InthisGuide
ThisGettingStartedGuideprovidesinstructionsforbasicinstallationandconfigurationoftheSonicWall™SecureMobileAccess
200/400appliances.
Chaptersandsections

Chapter1Sectionsinclude:
InthisGuideonpage3Chaptersandsectionsonpage3

4SonicWallSecureMobileAccess200/400GettingStartedGuide
Chapter2Sectionsinclude:
ApplianceOverviewonpage7SMA200FrontandRearPanelsonpage8
SMA200PackageContentsonpage10
SMA400FrontandRearPanelsonpage11
SMA400PackageContentsonpage13
PowerInputRatingonpage14
Chapter3Sectionsinclude:
SettingUptheApplianceonpage15 WhatYouNeedtoBeginonpage16
PoweringOntheSMAApplianceonpage17
AccessingtheManagementInterfaceonpage17
Troubleshootingonpage18
ChangingYourAdministratorPasswordonpage18
AddingaLocalUseronpage19
SettingtheTimeZoneonpage20
ConfiguringDNSandWINSonpage21

SonicWallSecureMobileAccess200/400GettingStartedGuide 5
Chapter4Sectionsinclude:
RegisteringYourApplianceonpage23 CreatingaMySonicWallAccountonpage24
RegisteringYourSMAApplianceonpage24
ServicesandLicensingonpage25
UpgradingInformationonpage28
Chapter5Sectionsinclude:
DeployingYourApplianceonpage31 SelectingaDeploymentScenarioonpage32
ConfiguringtheX0IPAddressonpage34
ConfiguringaDefaultRouteonpage35
AddingaNetExtenderClientRouteonpage35
SettingYourNetExtenderAddressRangeonpage36
AddingaNewSMACustomZoneonpage38
ScenarioA:ConnectingtheSMAonaNewDMZonpage40
ScenarioB:ConnectingtheSMAonanExistingDMZonpage45
ScenarioC:ConnectingtheSMAontheLANonpage49
TestingandTroubleshootingYourRemoteConnectiononpage52

6SonicWallSecureMobileAccess200/400GettingStartedGuide
Chapter6Sectionsinclude:
SafetyandRegulatoryInformationonpage55 SafetyandRegulatoryInformationonpage56
WarrantyInformationonpage62

SonicWallSecureMobileAccess200/400GettingStartedGuide 7
2
ApplianceOverview
ThissectionprovidesinformationabouttheSonicWallSecureMobileAccess200/400appliances.
•SMA200FrontandRearPanelsonpage8
•SMA200PackageContentsonpage10
•SMA400FrontandRearPanelsonpage11
•SMA400PackageContentsonpage13
•PowerInputRatingonpage14

8SonicWallSecureMobileAccess200/400GettingStartedGuide
SMA200FrontandRearPanels
Secure Mobile Access 200 | O | O |
!
X0
X1
Ethernet Ports (X0-X1)
Provide 1000 Mbps (1 Gb)
Ethernet connectivity
USB / SSD ports (2)
External USB and SSD hard drive support
Console Port
Access the Command Line Interface (CLI) using a
compatible console cable
Power Button
Press button to turn appliance on
or o
Reset Button
Press and hold for several seconds to
set the appliance into SafeMode
Appliance LEDs
- Power LED: Indicates Power Supply status
- Test LED: Indicates appliance activity
- Solid Yellow: Appliance is starting
- Blinking Yellow: SafeMode
- O: Appliance is powered up and operational
- Alarm LED: Indicates a critical warning or error
Front Panel

SonicWallSecureMobileAccess200/400GettingStartedGuide 9
Rear Panel
Exhaust Fans
Provides optimal cooling for the
Sonicwall SMA appliance
Power Supply Plug
Use the supplied power cord to provide
power to the appliance

10 SonicWallSecureMobileAccess200/400GettingStartedGuide
SMA200PackageContents
Beforeyoubeginthesetupprocess,verifythatyourpackage
containsthefollowingitems:
•OneSonicWallSMA200appliance
•OneSonicWallSecureMobileAccess200/400Getting
StartedGuide
•OneSonicWallSafety,Environmental,andRegulatory
InformationGuide
•OneEthernetcable
•Oneserialconsolecable(RJ45toDB9)
•Onerack‐mountkit
•Onepowercord
MissingItems?
Ifanyitemsaremissingfromyourpackage,contactSonicWall
Support:
Web:https://support.sonicwall.com/
NOTE:Theincludedpowercordisapprovedforuseonly
inspecificcountriesorregions.Beforeusingapower
cord,verifythatitisratedandapprovedforuseinyour
location.ThepowercordisforACmainsinstallation
only.
(6)
Secure Mobile Access 200
| O | O |
!
X0
X1
SonicWall
SecureMobileAccess200/400
'ĞƚƚŝŶŐ^ƚĂƌƚĞĚ'ƵŝĚĞ
SMA200RegulatoryModelNumber:1RK33Ͳ0BB
SMA400RegulatoryModelNumber:1RK33Ͳ0BC
SonicWallProducts
Safety,Environmental,andRegulatory
Information
January2017
Thefollowinginformationcomprisesthesafety,environmental,andregulatorymessage
applicabletoSonicWallproducts.Thesemessagesensureproperhandlinganddisposalof
theequipment.
Thevariousmessagesaregroupedbylanguage.Ingeneral,thelanguagesoftheEuropean
Unionappearfirstandaregroupedalphabetically.NonEuropeanUnionlanguagesare
groupedtogethertowardstheback,afterthedoubleline.
sonicwall.com|support.sonicwall.com
232Ͳ001007Ͳ50RevA
Copyright©2017SonicWallInc.Allrightsreserved.
SonicWallisatrademarkorregisteredtrademarkofSonicWallInc.and/oritsaffiliatesintheU.S.A.
and/orothercountries.Allothertrademarksarepropertyoftheirrespectiveowners.
TheinformationinthisdocumentisprovidedinconnectionwithSonicWallInc.and/oritsaffiliates'
products.Nolicense,expressorimplied,byestoppelorotherwise,toanyintellectualpropertyrightis
grantedbythisdocument.SonicWallInc.and/oritsaffiliatesdonotmakeanycommitmenttoupdate
theinformationcontainedinthisdocument.Formoreinformation,visithttps://www.sonicwall.com/
legal/.

SonicWallSecureMobileAccess200/400GettingStartedGuide 11
SMA400FrontandRearPanels
Secure Mobile Access 400 | O | O |
!
X2
X3
X0
X1
Front Panel
Ethernet Ports (X0-X3)
Provide 1000 Mbps (1Gb) Ethernet
connectivity
USB / SSD ports (2)
External USB and SSD hard drive support
Console Port
Access the Command Line Interface (CLI) using a
compatible console cable
Power Button
Press button to turn appliance on
or o
Reset Button
Press and hold for several seconds to
set the appliance into SafeMode
Appliance LEDs
- Power LED: Indicates Power Supply status
- Test LED: Indicates appliance activity
- Solid Yellow: Appliance is starting
- Blinking Yellow: SafeMode
- O: Appliance is powered up and operational
- Alarm LED: Indicates a critical warning or error

12 SonicWallSecureMobileAccess200/400GettingStartedGuide
Rear Panel
Exhaust Fans
Provides optimal cooling for the
SonicWall SMA appliance
Power Supply Plug
Use the supplied power cord to provide
power to the appliance

SonicWallSecureMobileAccess200/400GettingStartedGuide 13
SMA400PackageContents
Beforeyoubeginthesetupprocess,verifythatyourpackage
containsthefollowingitems:
•OneSonicWallSMA400appliance
•OneSonicWallSecureMobileAccess200/400Getting
StartedGuide
•OneSonicWallSafety,Environmental,andRegulatory
InformationGuide
•OneEthernetcable
•Oneserialconsolecable(RJ45toDB9)
•Onerack‐mountkit
•Onepowercord
MissingItems?
Ifanyitemsaremissingfromyourpackage,contactSonicWall
Support:
Web:https://support.sonicwall.com/
NOTE:Theincludedpowercordisapprovedforuseonly
inspecificcountriesorregions.Beforeusingapower
cord,verifythatitisratedandapprovedforuseinyour
location.ThepowercordisforACmainsinstallation
only.
(6)
Secure Mobile Access 400 | O | O |
!
X2
X3
X0
X1
SonicWall
SecureMobileAccess200/400
'ĞƚƚŝŶŐ^ƚĂƌƚĞĚ'ƵŝĚĞ
SMA200RegulatoryModelNumber:1RK33Ͳ0BB
SMA400RegulatoryModelNumber:1RK33Ͳ0BC
SonicWall™ Products
Safety, Environmental, and Regulatory
InformaƟon
January 2017
The following informaƟon comprises the safety,environmental, and regulatory message
applicable to SonicWallproducts. These messages ensure proper handling and disposal of
the equipment.
The variousmessages are grouped by language. In general, the languages of the European
Unionappear Įrst and are grouped alphabĞƟcally. Non European Union languages are
grouped together towards the back, aŌer the double line.
sonicwall.com | support.sonicwall.com
232-001007-50 Rev A
Copyright © 2017 SonicWallInc. All rights reserved.
SonicWallis a trademark or registered trademark of SonicWall Inc. and/or its Ăĸliates in the U.S.A.
and/oro ther countries. All other trademarks are property of their respecƟve owners.
The informaƟŽn in this document is provided in connecƟon with SonicWall Inc. and/or its aĸliates'
products.No license, express or implied, by estoppel or otherwise, to any intellectual property right is
grantedby this document. SonicWall Inc. and/or its aĸliates do not make any commitment to update
the informaƟoncontained in this document. For more informaƟŽn, visit hƩps://www.sonicwall.com/
legal/.

14 SonicWallSecureMobileAccess200/400GettingStartedGuide
PowerInputRating
Thefollowingtabledescribesthepowerinputratingforthe
SonicWallSecureMobileAccess200/400appliances:
V100‐240V~
A1.5AMax.
Hz 50‐60Hz

SonicWallSecureMobileAccess200/400GettingStartedGuide 15
3
SettingUptheAppliance
Thissectionprovidespre‐configurationinformationandproceduresforsettingupyourSonicWallSecureMobileAccess200/400
appliance.
•WhatYouNeedtoBeginonpage16
•PoweringOntheSMAApplianceonpage17
•AccessingtheManagementInterfaceonpage17
•Troubleshootingonpage18
•ChangingYourAdministratorPasswordonpage18
•AddingaLocalUseronpage19
•SettingtheTimeZoneonpage20
•ConfiguringDNSandWINSonpage21

16 SonicWallSecureMobileAccess200/400GettingStartedGuide
WhatYouNeedtoBegin
BeforeyouinstallyourSMAappliance,ensurethefollowing
areavailable:
•AWindows,Linux,orMacOScomputertouseasa
managementstationforinitialconfigurationofthe
SonicWallSecureMobileAccess200/400
•AnInternetconnection
•AWebbrowsersupportingJavaScriptandHTTP
uploads.Supportedbrowsersincludethefollowing:
•Administrativeaccesstothenetworkgatewaydevice,
dependingonthedeploymentscenarioselected
Usethefollowingconfigurationinformationduringthesetup
processandforfuturereference:
NetworkConfigurationInformation
Collectthefollowingaboutyournetworkconfiguration:
PrimaryDNS:_________________________________
SecondaryDNS(optional):______________________
DNSSearchList(inorder):______________________
WINSserver(s)(optional):_______________________
GatewayIPaddress:___________________________
GatewayDMZsubnet(optional):__________________
SupportedBrowser BrowserVersion
InternetExplorer 9.0orhigher
MozillaFirefox Latestversion
AppleSafari Latestversion
GoogleChrome Latestversion
SerialNumber: Recordtheserialnumberfoundon
thetoppanelofyourSonicWall
appliance.
AuthenticationCode: Recordtheauthenticationcode
foundonthetoppanelofyour
SonicWallappliance.
AdminPassword: Selectanadministratorpassword.
(defaultispassword)

SonicWallSecureMobileAccess200/400GettingStartedGuide 17
PoweringOntheSMA
Appliance
TopowerontheSonicWallSecureMobileAccess200/
400appliance:
1PlugoneendofthepowercordintotheSonicWall
SecureMobileAccess200/400andtheotherintoan
appropriatepoweroutlet.
2Theapplianceautomaticallyturnsonwhenpluggedin.
•ThepowerLEDonthefrontpanelilluminates
bluewhentheapplianceisturnedon.
•ThetestLEDilluminatesyellowuntilthe
firmwareisbooted.WhenthetestLEDisno
longerlit,theSonicWallSecureMobileAccess
200/400isreadyforconfiguration.
3ConnectoneendofanEthernetcableintotheX0port
ofyourSonicWallSecureMobileAccess200/400.
Connecttheotherendofthecableintothecomputer
youareusingtomanagetheSonicWallSecureMobile
Access200/400.
AccessingtheManagement
Interface
ToaccesstheWeb‐basedmanagementinterface:
1OnthecomputeryouusetomanagetheSonicWall
SecureMobileAccess200/400,setittohaveastaticIP
addressinthe192.168.200.x/24subnet,suchas
192.168.200.20.UseaSubnetMaskof255.255.255.0.A
DefaultGatewayisnotrequired.
Donotuse192.168.200.1,asthisaddresswillconflict
withtheappliance.
2OpenaWebbrowser,andenterhttps://192.168.200.1
(thedefaultX0managementIPaddress)intheLocation
orAddressfield.
3IntheLoginscreen,enterthedefaultcredentialsand
thenclicktheLoginbutton:
• Username‐admin
•Password‐password
•Domain‐LocalDomain
NOTE:Asecuritywarningmayappear.Clicktheoption
toacceptthecertificateandcontinue.

18 SonicWallSecureMobileAccess200/400GettingStartedGuide
4ASoftwareTransactionAgreementdisplays.Readthe
agreement,selecttheIAcceptthetermsofthis
SoftwareTransactionAgreementcheckbox,andthen
clickContinue.
YouarenowsuccessfullyconnectedtotheSMAmanagement
interface.
Troubleshooting
IfyoucannotconnecttotheSonicWallSecureMobileAccess
200/400,verifythefollowing:
•DidyouplugyourmanagementworkstationintotheX0
interfaceontheSMAappliance?
ManagementcanonlybeperformedthroughX0.
•Isthelinklightilluminatedonboththemanagement
stationandportX0oftheSMAappliance?
•DidyoucorrectlyentertheSMAappliance
managementIPaddressinyourWebbrowser(default
192.168.200.1)?
•IsyourcomputersettoastaticIPaddressinthe
192.168.200.x/24subnet,suchas192.168.200.20?
•IsyourDomainsettoLocalDomainontheloginscreen?
IfyouarestillunabletoconnecttotheSMAappliance,contact
SonicWallSupport:
Web:https://support.sonicwall.com/
ChangingYourAdministrator
Password
Tochangeyouradministratorpassword:
1IntheSMAmanagementinterface,navigatetothe
Users>LocalUserspage.
2 ClicktheConfigurebuttoncorrespondingtotheadmin
account.
CAUTION:Changingyourpasswordfromthefactory
defaultisstronglyrecommended.Ifyouchangeyour
password,besuretokeepitinasafeplace.Ifyoulose
yourpassword,youwillhavetoresettheSMA
appliancetofactorydefaultsettings,losingyour
configuration.

SonicWallSecureMobileAccess200/400GettingStartedGuide 19
3Enterapasswordfortheadminaccountinthe
Passwordfield.Re‐enterthepasswordintheConfirm
Passwordfield.
4 ClickAccepttoapplychanges.
AddingaLocalUser
Fortestingandverification,youcancreatealocaluseraccount
andinthelocalapplianceauthenticationrepository.
Toaddalocaluser:
1NavigatetotheUsers>LocalUserspage.
2 ClicktheAddUserbutton.
3EnteraUserName.
4 SelectLocalDomainfromtheDomainandGroupdrop‐
downmenus.
5EnterapasswordfortheuserinboththePasswordand
ConfirmPasswordfields.