SonicWALL TZ 170 SP User manual

COMPREHENSIVE INTERNET SECURITY™
SonicWALL TZ 170 SP
SonicWALL TZ 170 Wireless
Quick Start Guide

SonicWALL TZ 170 SP/SonicWALL TZ 170 Wireless Quick Start Guide Page 1
SonicWALL TZ 170 SP/SonicWALL TZ 170 Wireless
Quick Start Guide
Thank you for purchasing a SonicWALL TZ 170 SP or TZ 170 Wireless security appliance. This Quick Start
Guide provides instructions for installing and configuring the SonicWALL TZ 170 SP and SonicWALL TZ
170 Wireless security appliances running SonicOS Standard. After you complete this guide, you can
access the Internet securely from your network.
Note! For complete SonicWALL TZ 170 security appliance documentation, see the SonicWALL SonicOS
Standard Administrators Guide located on your SonicWALL Resource CD or available at the SonicWALL
documentation Web site: http://www.sonicwall.com/services/documentation.html.
SonicWALL TZ 170 SP
The SonicWALL TZ 170 SP security appliance is a total security platform that ensures continuous network
uptime for critical, secure data connectivity through integrated and automated fail-over and fail-back. The
TZ 170 SP security appliance delivers broadband to analog WAN redundancy, high-performance deep
packet inspection firewall protection, an IPSec VPN gateway that accommodates 6,000 simultaneous
connections, and support for SonicWALL subscription-based security services, such as Intrusion
Prevention Service, Content Filtering Service, and Network Anti-Virus.
SonicWALL TZ 170 Wireless
The SonicWALL TZ 170 Wireless security appliance delivers enterprise-class wireless and wired security
to small networks. The TZ 170 Wireless security appliance integrates 802.11b/g wireless, deep packet
inspection firewall protection, an IPSec VPN gateway that accommodates 6,000 simultaneous
connections, and support for SonicWALL subscription-based security services, such as Intrusion
Prevention Service, Content Filtering Service, and Network Anti-Virus.
SonicWALL TZ 170 SP/Wireless Configuration Steps
Getting started with your SonicWALL TZ 170 comprises the following steps:
Step 1: “Setting Up the SonicWALL TZ 170” on page 6
Step 2: “Connecting the SonicWALL TZ 170 to Your Network” on page 8
Step 3: “Configuring Your Management Station” on page 9
Step 4: “Accessing the SonicWALL TZ 170 Management Interface” on page 11
Step 5: “Using the SonicWALL Setup Wizard” on page 12
Step 6: “Configuring Computers on Your Network for Internet Access” on page 17
Step 7: “Registering Your SonicWALL TZ 170” on page 20

Page 2
Before You Begin
Check Package Contents
• One SonicWALL security appliance
• One SonicWALL Quick Start Guide
• One SonicWALL Resource CD
• One Ethernet cable
• One RJ45 CLI cable*
• One 5 Volt DC power supply
• One power cord**
• One mounting kit
• Two antennas (TZ 170 Wireless only)
*The RJ45 CLI cable is only included with the purchase of a TZ 170 with SonicOS Enhanced.
**A power cord is included only with units shipped to North America.
SonicWALL TZ 170 SP Front and Back Panels
Console Port
LAN Ports 1-5
WAN Port Power
Optional Port
Modem Port
Power Light
opt
LAN
Test Light
WAN
Modem
Any Items Missing?
If any items are missing from your package, contact:
SonicWALL Support
Web: http://www.sonicwall.com/support/
Phone: [phone]

SonicWALL TZ 170 SP/SonicWALL TZ 170 Wireless Quick Start Guide Page 3
SonicWALL TZ 170 Wireless Front and Back Panels
What You Need to Get Connected
• SonicWALL security appliance
• Internet connection
• 10/100 Ethernet network or network enabled computers/devices to connect to the SonicWALL TZ 170
security appliance’s 5-port Auto-MDIX LAN switch or 802.11 b/g enabled computers/devices for
wireless networking (TZ 170 Wireless)
• PC or Macintosh computer to act as a Management Station for initial configuration of the SonicWALL
security appliance.
• Web browser (Microsoft Internet Explorer v 5.0 or later, or Netscape Navigator v 4.7 or later) for
accessing the SonicWALL security appliance’s Management Interface. Your Web browser must
support Java and HTTP uploads in order to fully manage the SonicWALL security appliance).
Console Port
LAN Ports 1-5
WAN Port Power
Power Light
WAN:
PoE Indicator
LAN 1-5
Link, Activity
Test Light
opt
WiFiSec
Enforcement
Optional Port
Wireless
On/Activity

Page 4
ISP Connection Information
Before you can begin installing your SonicWALL security appliance, determine the IP addressing method
your Internet Service Provider (ISP) uses for your Internet connection. The most common IP addressing
used for Internet connections include:
• A single, public static IP address assigned for Internet connectivity or a range or public addresses
• A dynamic IP address assigned by the ISP using DHCP (commonly used for cable-based Internet
service)
• A dynamic or static IP address assigned by the ISP for PPPoE-based DSL Internet service
Alert! If you are not using one of the network configurations above, step-by-step installation instructions for
additional networking methods are found in your SonicOS Standard Administrator’s Guide. The
Administrator’s Guide is located on your SonicWALL Resource CD and requires Acrobat Reader to view it.
Acrobat Reader is also provided on your product CD.
Record all of your networking information in the checklist below:
Dialup Phone Number
If you are using a dialup modem connection:_______________________
IP Addressing using DHCP
No action necessary. The SonicWALL security appliance automatically detects the presence of a DHCP
server during setup.
IP Addressing using PPPoE
The SonicWALL security appliance automatically detects the presence of a PPPoE connection, but you
need your IPS account username and password.
User Name:________________________
Password:_________________________
IP Addressing using a Single, Static Public IP Address
IP Address:________________________
Subnet Mask:______________________
Default Gateway:___________________
Primary DNS:______________________
Secondary DNS:___________________
Other Information
WLAN
SSID:________________________
mySonicWALL.com Account
Username:________________________
Password:______________________
SonicWALL Management Interface
Password:______________________

SonicWALL TZ 170 SP/SonicWALL TZ 170 Wireless Quick Start Guide Page 5
Glossary of Networking Terms
•802.11 - A set of IEEE standards for wireless networking (WLANs). 802.11b supports transmissions up
to 11 Mbps. 802.11g supports transmissions up to 54 Mbps. Both 802.11b and 802.11g operate in the
2.4GHz range.
•Default Gateway - A device on an internetwork that forwards packets to another network.
•DHCP - Dynamic Host Configuration Protocol allocates IP addresses to computers on the network
automatically without assigning a computer a static (fixed) IP address.
•DNS (Domain Name System) - A hierarchical naming system that resolves a domain name with its
associated IP address. A DNS server looks up the name of a computer and finds the corresponding IP
address. This allows users to access hosts using friendly text-based names instead of IP addresses.
These names are called fully qualified domain names (FQDN).
•IP Address - A set of numbers in the format, XXX.XXX.XXX.XXX, used to address computers on the
Internet.
•LAN - A Local Area Network is typically a group of computers located at a single location, and is
commonly based on the Ethernet architecture.
•PPPoE - The Point to Point Protocol over Ethernet supports the transmission of network packets over
serial transmission lines such as DSL or POTS (Plain Old Telephone Service).
•Router - A device used in TCP/IP networks, the Internet being a prime example of a large routed
network. Routers are commonly used by ISPs to connect customer networks to the Internet via their
networks.
•Subnet Mask - A set of numbers in IP address format using 255 in place of the XXX’s. It determines
the type of network by “masking” out numbers. A Class C network has a subnet mask of
255.255.255.0.
•VPN - A Virtual Private Network is a virtual network that encrypts data and sends it privately over the
Internet to protect sensitive information.
•WAN - A Wide Area Network is a geographically distributed network composed of multiple networks
joined into a single large network. The Internet is a global WAN.

Page 6
Setting Up the SonicWALL TZ 170
Physically setting up your TZ 170 involves:
• Installing the Antennas (TZ 170 Wireless)
• Adjusting the Antennas (TZ 170 Wireless)
• Mounting (TZ 170 Wireless)
• Applying Power
• Applying Power with the SonicWALL Power over Ethernet (PoE) Injector (TZ 170 Wireless)
Installing the Antennas (TZ 170 Wireless)
To use the wireless feature of the TZ 170 Wireless, you must install the antennas on the back of the
appliance. Remove the antennas from the bag and place one on each connector. Finger tighten the fittings
on the connectors.
Adjusting the Antennas (TZ 170 Wireless)
You can adjust the antennas for best radio reception. In most cases, the antennas should be pointing
straight up and perpendicular to the box. Start from that position, and move them until you notice better
reception. Certain area, such as the area directly below the TZ 170 Wireless, have relatively poorer
reception.
Mounting (TZ 170 Wireless)
Step-by-step instructions for mounting the SonicWALL TZ 170 Wireless on a wall or ceiling are available in
the Regulatory Statement and Safety Instructions document included in your package.
1

SonicWALL TZ 170 SP/SonicWALL TZ 170 Wireless Quick Start Guide Page 7
Applying Power
Attach the power supply to the power cord. Plug the power adapter into the TZ 170 and plug the other end
into a power outlet.
The Power light turns green when power is applied to the TZ 170. Also, the Test light remains lit for
approximately 90 seconds while the TZ 170 performs a series of diagnostic tests.
Applying Power with the SonicWALL Power over Ethernet (PoE) Injector
(TZ 170 Wireless)
The SonicWALL TZ 170 Wireless can use a regular power supply, or it can get power through the LAN 1
Ethernet port using the an 802.3af standard Power over Ethernet injector, like the SonicWALL PoE injector.
To apply power with the PoE injector:
1. Plug the power cord of the PoE injector into the power outlet.
2. Connect an Ethernet cable to the Data and Power out port on the PoE Injector and connect the other
end of the cable to the LAN 1 port on the back of your SonicWALL TZ 170 Wireless.
Alert! The PoE Injector Ethernet cable must be inserted into the LAN 1 port only to power the TZ 170
Wireless TZ 170 Wireless.
SonicWALL
PoE Injector
Data in
Data and
Power out
To Internet
To power source
Ethernet cable
LAN 1

Page 8
Connecting the SonicWALL TZ 170 to Your Network
Connecting your SonicWALL TZ 170 involves
• Connecting the WAN port
• Connecting the Modem (TZ 170 SP)
• Connecting Your LAN
• Connecting Your WLAN (TZ 170 Wireless)
Connecting the WAN Port
Connect one end of an Ethernet cable to your DSL modem, cable modem, or Internet router. Connect the
other end of the Ethernet cable to the WAN port of the TZ 170. The link LED lights indicating an active
connection.
Connecting the Modem (TZ 170 SP)
Connect one end of an standard phone cable to your telephone line jack. Connect the other end of the
cable to the Modem port of the TZ 170 SP. The modem LED lights indicating a connection.
Connecting a Computer to the TZ 170 for Initial Configuration
Connect one end of an Ethernet cable to the Ethernet port of a computer (Management Station) you will
use to initially configure the TZ 170. Connect the other end of the cable to any LAN port (1, 2, 3, 4 or 5) on
your TZ 170. The link LED lights indicating an active connection.
Connecting Your LAN
You connect individual computers and other network devices, or LAN hubs/switches via straight-through
Ethernet cables directly to any of the five LAN ports on the TZ 170.
Connecting Your WLAN (TZ 170 Wireless)
If you are using the SonicWALL TZ 170 Wireless, your wireless clients connect to the security appliance
using a built-in 802.11b/g wireless adapter or an installed wireless card. No wired Ethernet cable
connection is required beyond connecting your DSL modem, cable modem, or Internet router to the WAN
port.
Note! See the SonicOS Standard Administrator’s Guide for more information on deploying the SonicWALL
TZ 170 Wireless security appliance in WLAN environments.
2

SonicWALL TZ 170 SP/SonicWALL TZ 170 Wireless Quick Start Guide Page 9
Configuring Your Management Station
Your TZ 170 is configured with the default IP address of 192.168.168.168. This IP address is used
to initially access the TZ 170 Management Interface and launch the Setup Wizard. To access the
Management Interface for the first time, you must configure your computer (Management Station)
with an IP address in the same network range as the TZ 170. Follow the instructions below for your
operating system:
Windows XP
1. Click Start, then Connect to.
2. Right-click on the Local Area Connection icon and select Properties.
3. Open the Local Area Connection Properties window.
4. Double-click Internet Protocol (TCP/IP) to open the Internet Protocol (TCP/IP) Properties window.
5. Select Use the following IP address.
6. Type 192.168.168.20 in the IP address field.
7. Type 255.255.255.0 in the Subnet Mask field.
8. Type the DNS IP address in the Preferred DNS Server field. If you have more than one address, type the second
one in the Alternate DNS server field.
9. Click OK for the settings to take effect on the computer.
Windows 2000
1. From your Windows task bar, click Start.
2. Then click Settings.
3. Click Network and Dial-up Connections.
4. Double-click the network icon to open the connection window.
5. Click Properties.
6. Highlight Internet Protocol (TCP/IP) and click Properties.
7. Select Use the following IP address.
8. Type 192.168.168.20 in the IP address field.
9. Type 255.255.255.0 in the Subnet field.
10. If you have a DNS Server IP address from your ISP, enter it in the Preferred DNS Server field.
Windows NT
1. From the Start list, highlight Settings and then select Control Panel.
2. Double-click the Network icon in the Control Panel window.
3. Double-click TCP/IP in the TCP/IP Properties window.
4. Select Specify an IP Address.
5. Type 192.168.168.20 in the IP Address field.
6. Type 255.255.255.0 in the Subnet Mask field.
7. Click DNS at the top of the window.
8. Type the DNS IP address in the Preferred DNS Server field. If you have more than one address, enter the
second one in the Alternate DNS server field.
9. Click OK, and then click OK again.
10. Restart the computer.
3

SonicWALL TZ 170 SP/SonicWALL TZ 170 Wireless Quick Start Guide Page 11
Accessing the SonicWALL TZ 170 Management Interface
Once you have configured your Management Station, you can access the SonicWALL TZ 170
Management Interface to access the SonicWALL Setup Wizard to automate the setup of the
SonicWALL security appliance in your network environment. In most cases, the procedures in the
Setup Wizard completes your network to Internet connectivity configuration.
Launching the Setup Wizard
To access the TZ 170 Management Interface and launch the Setup Wizard from your Management
Station, follow the instructions below:
1. Launch your Web browser.
Alert! Because you are temporarily disconnected from the Internet, you may receive an error message
when your Web browser first opens. This does not affect your installation process. Continue with the steps
below.
2. Enter 192.168.168.168 in the Location or Address field and press Enter.
Alert! Your Web browser must support Java and HTTP uploads in order to fully manage the SonicWALL
security appliance. Internet Explorer 5.0 or higher, as well as Netscape Navigator 4.0 or higher, are
recommended.
3. The SonicWALL Setup Wizard launches and guides you through the configuration and setup of your TZ 170.
Can’t Connect?
If you cannot connect to the SonicWALL TZ 170, check the following:
• Did you correctly enter the SonicWALL TZ 170 LAN IP address in your Web browser?
• Is the SonicWALL TZ 170 connected to the same network as your computer?
• Have you changed the TCP/IP network settings on your computer?
• Do you have the crossover cable connected to your Management Station and the SonicWALL TZ 170.
4

Page 12
Using the SonicWALL Setup Wizard
The SonicWALL Setup Wizard provides easy to follow instructions for configuring the TZ 170 on
your network. The Setup Wizard pages display different pages depending on which TZ 170
security appliance model you are configuring:
SonicWALL TZ 170 SP - the Setup Wizard helps you set up Internet connectivity on your WAN
port and your modem port, dialup backup for your WAN port, and networking on your LAN port.
SonicWALL TZ 170 Wireless - the Setup Wizard helps you set up your wireless networking
environment, Internet connectivity on your WAN port, and networking on your LAN port.
Note! Make sure you have any required ISP information to complete the configuration before using the
Setup Wizard.
Tip! Certain browser configurations may not launch the Setup Wizard automatically. In this case, you
must log into the TZ 170 using “Admin” as the User Name and “password” as the Password.After you
log into the TZ 170, click the Wizards button on the System > Status page. Select Setup to begin
configuring the TZ 170.
Configuring the TZ 170 SP for Network to Internet Connectivity
1. Welcome - read the information on the Welcome dialogue box. Click Next.
2. Change Password - change the TZ 170 password to your personal password. Click Next.
Alert! Remember your password. You will need it to access the SonicWALL TZ 170 Management Interface
after the initial configuration.
3. Change Time Zone - change the Time Zone setting to your location’s time zone. Click Next.
4. Configure Modem - select whether you will use the modem as a backup for the WAN connection, use
it for primary Internet connection, or don’t want to use it. Click Next.
If you are using the modem as a backup for the WAN connection, in the Stand-alone Dial-up
Connection page, enter your dial-up account information in the Phone Number, User Name, and
Password fields. Click Next.
5