SonicWALL TZ 170 User manual

SonicWALL Security Appliances
APPLIANCES SonicWALL TZ 170 Series
533 2915 339
200 158
659
320
123
cool gray 5
& silver met
SonicWALL TZ 170
Getting Started Guide

SonicWALL TZ 170 Getting Started Guide Page 1
SonicWALL TZ 170 Security Appliance
Getting Started Guide
The SonicWALL®TZ 170 security appliance is a total security platform for your network,
delivering enterprise-class layered security by integrating gateway anti-virus, anti-
spyware, intrusion prevention, and content filtering capabilities in an easy-to-use, low
cost platform.
This Getting Started Guide provides instructions for basic installation and configuration of
the SonicWALL TZ 170. After you complete this guide, up to 10, 25, or an unlimited
number of computers (depending on your license) on your network will have secure
Internet access.
Note: For complete documentation, refer to the SonicOS Standard Administrator’s
Guide on the SonicWALL Resource CD or at:
<http://www.sonicwall.com/support/documentation.html>.
SonicWALL TZ 170 Configuration Steps
1
Before You Begin page 2
2
Applying Power to the SonicWALLTZ 170 page 5
3
Connecting the SonicWALLTZ 170 page 5
4
Accessing the Management Interface page 6
5
Using the SonicWALL Setup Wizard page 8
6
Testing Your Connection page 13
7
Registering Your SonicWALLTZ 170 page 14
8
Activating SonicWALL Security Services page 17
9
Connecting Computers to Your SonicWALLTZ 170 page 20

1
Page 2
Before You Begin
Check Package Contents Any Items Missing?
If any items are missing from your package,
contact:
SonicWALL Support
Web: <http://www.sonicwall.com/support/>
1. One SonicWALLTZ 170
security appliance
2. One Getting Started Guide
3. One SonicOS Standard
Release Note
4. One straight-through Ethernet cable
5. One RJ45 CLI cable*
6. One 5 Volt DC power supply
7. One power cord**
8. One SonicWALLTZ 170 Resource CD
*The RJ45 CLI cable is only included with the purchase of a SonicWALLTZ 170 with
SonicOS Enhanced.
**A power cord is included only with units shipped to North America.
** Das eingeschlossene Netzkabel ist für Gebrauch in Nordamerikas nur vorgehabt.
Für Europaïsche Union (EU) Kunden, ist ein Netzkabel nicht eingeschlossen.

SonicWALL TZ 170 Getting Started Guide Page 3
SonicWALL TZ 170 Front and Back Panels Overview
Power Light WAN:
Link, Activity, 100
LAN:
Link, Activity
Test Light
Console Port
Link, Activity, 100
WAN Port Optional Port LAN Ports 1-5 Power
Optional Zone:
Front Bezel Feature Description
Power Light Indicates the SonicWALL TZ 170 Series appliance is powered on.
LAN: Link, Activity Indicates a LAN link (green), or LAN activity (blinking) on the specified port.
Optional Zone:
Link, Act, 100 Indicates a link, activity, and speed of the opt port connection.
WAN: Link, Act, 100 Indicates a link, activity, and speed of the WAN port connection.
Test Light Indicates the SonicWALL TZ 170 Series appliance is in test mode.
Back Panel Feature
Console Port Provides access to the command-line interface
(only for use with SonicOS Enhanced software).
WAN Port Provides a primary (Ethernet) connection to the Internet (WAN).
Optional Port Provides and optional configurable port.
LAN Ports 1-5 Provide multiple connections to your LAN.
Power Provides power connection using the power cord and power supply.

Page 4
Collecting Internet Service Provider (ISP) Information
Collect the following information about your Internet service:
If you connect via You probably use Please record
Cable modem,
DSL with a router DHCP No Internet connection information usually required.* *Some service providers require a host name. Check
with your ISP.
Host Name:
Home DSL PPPoE User Name:
Password:
Note: Your ISP may require your user name in the
format: [e-mail]
T1,
Static broadband,
Cable or DSL with
a static IP
Static IP IP Address:
Subnet Mask:
Default Gateway
(Router IP Address):
Primary DNS:
Secondary DNS (optional):
Dial in to a server PPTP Server Address:
User Name:
Password:
Note: If you are not using one of the network configurations above, refer to the
SonicOS Standard Administrator’s Guide.
Other Information
These are the default settings for accessing your SonicWALL TZ 170 Web-based
management interface:
User Name: admin
Password: (Default: password)
What You Need to Begin
• A computer to use as a management station for initial configuration of the
SonicWALL TZ 170
• An Internet connection
• A Web browser supporting Java and HTTP uploads. Internet Explorer 5.0 or higher,
Netscape Navigator 4.7 or higher, Mozilla 1.7 or higher, or Mozilla Firefox are
recommended

SonicWALL TZ 170 Getting Started Guide Page 5
2
Applying Power to the SonicWALLTZ 170
Plug the power supply into the back of the SonicWALL security appliance and into an
appropriate power outlet.
The Power LED on the front panel lights up green when you plug in the
SonicWALL TZ 170. The Test LED lights up and may blink while the appliance
performs a series of diagnostic tests. When the Test light is no longer lit, the SonicWALL
security appliance is ready for configuration.
If the Test LED remains lit after the SonicWALL TZ 170 has booted, restart the
SonicWALL security appliance.
For more trouble shooting information, refer to the SonicOS Standard Administrator’s
Guide.
3
Connecting the SonicWALL TZ 170
Connecting the WAN Cable to the Internet
WAN
DSLorCable
Modem
Internet
1. Connect one end of an Ethernet cable to your Internet connection, such as a DSL
modem or cable modem.
This cable may already be connected between your computer and your modem. If
so, disconnect it from your computer, and leave it connected to the Internet.
2. Connect the other end of the cable to the WAN port on the back of your
SonicWALL TZ 170.
The WAN LEDs on the front panel lights up indicating an active connection.

Page 6
Connecting the LAN Cable to Your Management Station
Management
Station
LAN port #1
1. Connect one end of an Ethernet cable to the computer you are using to manage the
SonicWALL TZ 170.
2. Connect the other end of the cable to port # 1on the back of your
SonicWALL TZ 170.
The port # 1LEDs on the front panel light up indicating an active connection.
4
Accessing the Management Interface
The computer you use to manage the SonicWALLTZ 170 must be set up to accept a
dynamic IP address, or have an unused IP address in the 192.168.168.x/24 subnet,
such as 192.168.168.20. For instructions on configuring your IP address, see
“Configuring Computers for Your Network with DHCP” on page 20.
To access the Web-based management interface of the SonicWALLTZ 170:
1. On the computer you have connected to port # 1, start your Web browser.
Alert: Disable pop-up blocking software or add the management IP address of your
SonicWALL (192.168.168.168 by default) to your pop-up blocker's allow list
before accessing the SonicWALL management interface.
Your Web browser must support Java and HTTP uploads. Current versions of Internet
Explorer, Netscape Navigator, Mozilla, and Firefox are recommended.

SonicWALL TZ 170 Getting Started Guide Page 7
2. Enter 192.168.168.168 (the default LAN management IP address) in the Location or
Address field.
3. The SonicWALL Setup Wizard launches and guides you through the configuration
and setup of your SonicWALL TZ 170.
If the SonicWALL Setup Wizard Does Not Appear
If you cannot connect to the SonicWALL TZ 170 appliance or the Setup Wizard does
not display, verify the following configurations:
• Did you correctly enter the SonicWALLTZ 170 management IP address,
192.168.168.168, in your Web browser?
• Is your computer running pop-up blocking software?
• Are the Local Area Connection settings on your computer set to obtain an IP
address dynamically (DHCP) or set to a static IP of 192.168.168.20? See
“Configuring Computers for Your Network with DHCP” on page 20 for instructions
on changing your Local Area Connection settings.
• Do you have the Ethernet cable connected to your computer and to one of the
LAN ports (1through 5) on your SonicWALL TZ 170?
• Some browsers may not launch the Setup Wizard automatically. In this case, log
into SonicWALLTZ 170 using “admin” as the user name and “password” as the
password. After you log in, click the Wizards button on the System > Status
page. Select Setup to begin configuring your SonicWALLTZ 170.
• Some popup blockers may prevent the launch of the setup wizard. You can
temporarily disable your popup blocker, or add the management IP address of
your SonicWALL (192.168.168.168 by default) to your popup blocker's allow list.

5
Page 8
Using the SonicWALL Setup Wizard
The SonicWALL Setup Wizard provides user-guided instructions for configuring your
SonicWALL TZ 170.
Note: It is important that you have collected any required ISP information before using
the Setup Wizard. See the list in Procedure 1, “Before You Begin” on page 2.
Tip: If you do not know what type of Internet connection you have, contact your ISP. In
addition, the SonicWALL Setup Wizard will attempt to detect your connection
settings.
Configuring the SonicWALL TZ 170
Welcome - Click Next to begin.
1. Change Password - Change the administrative password. This is the password for
the admin account.
Old Password Should be populated with the default password, password.
New Password Enter your new password.
Confirm Re-enter your new password.
Note: Keep your new password in a safe place. If you lose your password, you will
have to reset the SonicWALL security appliance to factory settings and lose your
configuration. For instructions on resetting your SonicWALL security appliance,
refer to the SonicOS Standard Administrator’s Guide.
Click Next.
2. Change Time Zone - Change the Time Zone setting to your local time zone.
Time Zone Select the time zone for your location from the list.
Automatically
adjust clock for
daylight saving time
Check this setting if you live in an area that observes Daylight
Saving Time.

SonicWALL TZ 170 Getting Started Guide Page 9
Note: It is important that you set the time zone correctly before you register your
SonicWALL TZ 170.
Click Next.
3. WAN Network Mode - The Setup Wizard automatically detects most networking
modes. If it does not detect a networking mode, you may have a static IP address.
See Procedure 1, “Before You Begin” on page 2.
Confirm the selection or select the correct type of network connection for your
network.
Static IP Select Static IP if you want to give the SonicWALLTZ 170 a
specific, unchanging IP address.
DHCP Select DHCP if your ISP assigns your computer a dynamic IP
address. DHCP is commonly used with cable modems.
PPPoE Select PPPoE if your ISP requires a username and password to
establish a connection and assign a dynamic address. PPPoE
is commonly used with DSL modems.
PPTP Select PPTP if you dial into a specific server and log into a VPN
to establish a connection. With PPTP, you can have either a
static or dynamic IP Address.
Click on the yellow link for a networking type to see a definition.
Click Next.
4. WAN Network Mode - The second WAN network mode screen configures your
WAN settings for the selection you made in the previous screen.
Static IP
The Setup Wizard screen should display:
WAN Network Mode: NAT Enabled (Static IP)
SonicWALL WAN IP
Address Enter a single, static IP address. This must be in the address range assigned to you by your ISP.
WAN Subnet Mask Enter the subnet mask for your network, provided by your ISP.
For example, 255.255.255.0.
Gateway (Router)
Address Enter the IP address of your Internet gateway, provided by your ISP.
DNS Server Address Enter the IP address of the DNS server for your network,
provided by your ISP.

Page 10
Click Next.
DHCP
The Setup Wizard screen should display:
WAN Network Mode: NAT with DHCP Client
If you selected DHCP, you do not need to enter any WAN networking settings. The
network settings are provisioned automatically from a DHCP server.
Click Next.
PPPoE
The Setup Wizard screen should display:
WAN Network Mode - NAT with PPPoE Client
Obtain an IP Address
Automatically Select this if your ISP assigns you a dynamic IP address.
Use the following
IP Address Select this if your ISP has assigned you a static IP address,
and enter the address.
PPPoE User Name Enter the user name for your Internet account. Your ISP may
require you to enter your username in e-mail address format,
including “@” and the domain name, for example,
[email protected].
PPPoE Password Enter the password for your Internet account.
Inactivity Disconnect
(minutes) Check this box if you want the SonicWALL TZ 170 to disconnect from the Internet if there is no traffic for the number
of minutes you enter.
Click Next.
PPTP
The Setup Wizard screen should display:
WAN Network Mode - NAT with PPTP Client
DNS Server Address
#2 (optional) You can enter a secondary, back-up DNS server to use if the first one fails.
PPTP Server IP
Address Enter the address of the PPTP server.
PPTP User Name Enter your network user name.
PPTP Password Enter your network password.

SonicWALL TZ 170 Getting Started Guide Page 11
Click Next.
5. LAN Settings - The LAN Settings screen configures your LAN interface.
SonicWALL LAN
IP Address Accept the default IP address or enter a new IP address of the
LAN interface. Record the address:
LAN Subnet Mask Accept the default, or enter a subnet mask for your LAN.
Enable Windows
Networking Support Leave this option checked if you plan to have more than one Windows computer on your network. Windows Networking has
no effect on computers with other operating systems.
By default, your SonicWALLTZ 170 is configured with a LAN network IP address,
192.168.168.168, and subnet mask, 255.255.255.0, which will work well for most
installations. In most cases, leave the default LAN IP address and subnet mask
unchanged.
Note: The LAN IP address is the address you will use to access the
SonicWALL TZ 170 management interface.
Click Next.
Obtain an IP Address
Automatically Select this if the server assigns you a dynamic IP address.
Use the following
IP Address Check this if you have been given a static IP address, and fill in the following three fields.
SonicWALL WAN
IP Address Enter the static IP address for your connection.
WAN Subnet Mask Enter the subnet mask for your connection.
Gateway (Router)
Address Enter the address of your Internet Gateway.

Page 12
6. LAN DHCP Settings - The LAN DHCP Settings screen allows you to select whether
or not to use the DHCP server in the SonicWALLTZ 170 to automatically distribute
IP addressing information to computers and other network devices on your LAN.
Enable DHCP Server
on LAN Leave this checkbox checked to use the DHCP server in the
SonicWALLTZ 170 security appliance.
Do not select this option if you already have a DHCP server
on your network, or if you want to require your network clients
to have static IP addresses.
LAN Address Range If you enabled the DHCP Server, enter a range of IP
addresses in the same subnet as the LAN IP address, or
leave the default range unchanged. The default DHCP range
will work for most installations.
Click Next.
7. SonicWALL Configuration Summary - Displays your network configuration
information. Confirm that the settings displayed match the information you collected
in Procedure 1: “Before You Begin” on page 2.
Click Apply to apply your settings to the SonicWALL security appliance. If you click
Cancel, no settings will be applied to the SonicWALL security appliance.
The Storing SonicWALL Configuration screen displays during this process.
Setup Wizard Complete - Your SonicWALL TZ 170 is now successfully configured
for LAN and Internet access.
Click Restart to complete the configuration process. The SonicWALL security
appliance will reboot, which will take approximately one minute. When the Test LED
is no longer lit, the SonicWALL security appliance is ready for network traffic.

66
SonicWALL TZ 170 Getting Started Guide Page 13
Testing Your Connection
1. After the SonicWALLTZ 170 reboots and the login page reappears, open another
Web browser and navigate to: <http://www.sonicwall.com>.
If you can view the SonicWALL home page, you have configured your
SonicWALL TZ 170 correctly.
2. If you cannot view the SonicWALL home page, try a second URL.
3. If you still cannot view a Web page, try one of these solutions:
Restart your Management Station
Your management station may need to restart to accept new network settings
from the DHCP server in the SonicWALL security appliance.
Restart your DSL Modem
Your DSL Modem may need to restart to communicate with the DHCP Client in
the SonicWALL security appliance.
Enter a Host Name in your WAN DHCP Settings
If you selected DHCP for your WAN settings, you may need to specify a host
name for your connection:
a. Check with your ISP to see if a host name is required.
b. Go to Procedure 4, “Accessing the Management Interface” on page 6, and
use the LAN IP address you set in Procedure 5, Step 6: “LAN Settings” on
page 11.
c. Log in as “admin” with your administrative password.
d. In the menu on the left, click .
e. In the Interfaces table, click the configure icon in the WAN line.
f. In the WAN Properties window, enter the host name and click OK.
Run the Setup Wizard
Use the Setup Wizard again to reconfigure your network settings:
a. Go to Procedure 4, “Accessing the Management Interface” on page 6, and
use the LAN IP address you set in Procedure 5, Step 6: “LAN Settings” on
page 11.
b. Log in as “admin” with your administrative password.
c. Click the Wizards button in the top-right corner of the management interface
to restart the wizard.
d. Select Setup and click Next to start the Setup Wizard.

7
Page 14
Registering Your SonicWALL TZ 170
Once you have established your Internet connection, it is recommended you register
your SonicWALL security appliance at mySonicWALL.com. Registering your SonicWALL
security appliance provides the following benefits:
• Activate 30-day subscriptions to SonicWALL's
- Gateway Anti-Virus, Anti-Spyware, and Intrusion Prevention Service
- Content Filtering Service
- Network Anti-Virus Service
• Activate SonicWALL security service licenses
• Access SonicOS firmware updates
• Obtain SonicWALL technical support
Before You Register
Verify that the time and DNS settings on your SonicWALL security appliance are correct
when you register the device. You should have set these settings in Procedure 5: Using
the SonicWALL Setup Wizard, Step 3: “Change Time Zone” on page 8 and Step 5: “WAN
Network Mode” on page 9.
You need a mySonicWALL.com account to register your SonicWALL security appliance.
You can create a new mySonicWALL.com account directly from the SonicWALL
management interface.
If you already have a mysonicWALL.com account, go to “Registering Your
SonicWALLTZ 170” on page 16 to register your SonicWALL security appliance.
Note: mySonicWALL.com registration information is not sold or shared with any other
company.
Creating a mySonicWALL.com Account
Creating a mySonicWALL.com account is fast, simple, and FREE. Simply complete an
online registration form in the SonicWALLTZ 170 management interface.
If you already have a mysonicWALL.com account, go to “Registering Your
SonicWALLTZ 170” on page 16 to register your SonicWALL security appliance.
1. If you are not logged into the SonicWALLTZ 170 management interface, log in with
the username admin and the administrative password you set in the Setup Wizard.

SonicWALL TZ 170 Getting Started Guide Page 15
2. If the System > Status page is not displayed in the management interface, click
System in the left-navigation menu, and then click on the Status subfolder.
3. On the System > Status page, in the Security Services section, click the Register
link.
4. In the mySonicWALL.com Login page, click the here link in “If you do not have a
mySonicWALL account, please click here to create one.” The
mySonicWALL.com account form is displayed.
5. In the MySonicWall Account page, enter in your information in the Account
Information, Personal Information and Preferences fields. All fields marked with
an asterisk (*) are required fields.
Note: Remember your username and password to access your mySonicWALL.com
account.
6. Click Submit after completing the MySonicWALL Account form.
7. When the mySonicWALL.com server has finished processing your account, you will
see a page saying that your account has been created. Click Continue.
Congratulations. Your mySonicWALL.com account is activated.

Page 16
Registering Your SonicWALLTZ 170
1. If you are not logged into the SonicWALLTZ 170 management interface, log in with
the username admin and the administrative password you set in the Setup Wizard.
2. If the System > Status page is not displaying in the management interface, click
System in the left-navigation menu.
3. On the System > Status page, in the Security Services section, click the Register
link. The mySonicWALL.com Login page is displayed.
4. Enter your mySonicWALL.com account username and password in the User Name
and Password fields, then click Submit.
5. The next several pages inform you about SonicWALL’s Security Services. Click
Continue on each page.
6. At the top of the Product Survey page, enter a “friendly name” for your SonicWALL
security appliance in the Friendly Name field. The friendly name allows you to easily
identify your SonicWALL security appliance in your mySonicWALL.com account.
7. Please complete the Product Survey. SonicWALL uses this information to further
tailor services to fit your needs.
Note: SonicWALL Product Survey information is not sold or shared with any other
company.
8. Click Submit.
9. When the mySonicWALL.com server has finished processing your registration, you
will see a page informing you that your SonicWALLTZ 170 appliance is registered.
Click Continue, and the System > Licenses page is displayed showing the
available security services. You can activate the services from this page now or at
any time in the future.

SonicWALL TZ 170 Getting Started Guide Page 17
Congratulations
Your SonicWALL TZ 170 is now fully operational.
You can continue with this Getting Started Guide to:
• Activate SonicWALL Security Services.
• Set up computers on your network for secure Internet access.
8
Activating SonicWALL Security Services
When you register your SonicWALLTZ 170, you are eligible for a Free Trial of the
SonicWALL Security Services:
•Gateway Anti-Virus/Anti-Spyware/Intrusion Prevention Service - Provides real-
time protection for all hosts behind your SonicWALL from viruses, spyware, worms
and application-layer attacks using deep packet inspection to detect and prevent
malicious content before it can reach hosts on your network.
•Network Anti-Virus - Protects hosts on your network from viruses by enforcing the
use client-based Anti-Virus software.
•Premium Content Filtering Service - Enhances productivity by limiting access to
objectionable Web content.
At the end of your free trial period, the services will automatically expire unless you
purchase a subscription from your reseller or at <https://www.mySonicWALL.com>.
Activate the SonicWALL Security Services
If your SonicWALL management interface is displaying the Manage Services Online
table on the System > Licenses page, skip to Step 5.
1. Log in to your SonicWALL management interface.
2. In the left-navigation menu, click System and then Licenses.
3. Near the bottom of the System > Licenses page, under Manage Security Services
Online, click the link: For Free Trials, Click Here.
4. Log in with your mySonicWALL.com account name and password, if prompted.
5. In the Manage Services Online table, click Try in the Free Trial column for
Gateway Anti-Virus.
6. In the SonicWALL Gateway Anti-Virus page, click Continue.
Your Gateway Anti-Virus, Anti-Spyware, and Intrusion Prevention Service free trial is
now activated.
7. In the Manage Services Online table, click Try in the Free Trial column for Network
Anti-Virus and for CFS Premium Service to activate the
Complete Anti-Virus and Content Filtering Service (CFS) free trials.

Page 18
Your SonicWALL Security Service free trials are now activated. You must now enable
each service on your SonicWALL security appliance. Use the following instructions to
configure each service with its default values. For complete configuration instructions,
see the administrative guides available on your SonicWALL Resource CD and on the
Web at: <http://www.sonicwall.com/support/documentation.html>.
Enabling Premium Content Filtering Service
1. Select the Security Services > Content Filter page in the SonicWALL
management interface.
2. Select the LAN checkbox to apply the filter to all computers on your LAN interface.
3. Click Configure, select the categories to block in the URL List tab, and click OK.
4. Click in the top-right corner of the page.
Enabling Network Anti-Virus Service
1. Select the Security Services > Network Anti-Virus page in the SonicWALL
management interface.
2. Select the Enable Anti-Virus checkbox.
3. Click in the top-right corner of the page.
Users on your network will be prompted to download the SonicWALL Anti-Virus client.
Enabling Intrusion Prevention Service
1. Select the Security Services > Intrusion Prevention page in the SonicWALL
management interface.
2. In the IPS Global Settings section, click the Enable IPS on Interface checkbox,
and check the WAN and LAN interface check boxes.
3. In the Signature Groups table, select Prevent All for High Priority attacks.
4. Click in the top-right corner of the page.

SonicWALL TZ 170 Getting Started Guide Page 19
Enabling Gateway Anti-Virus Service
1. Select the Security Services > Gateway Anti-Virus page in the SonicWALL
management interface.
2. In the Gateway Anti-Virus Global Settings section, click the Enable Gateway
Anti-Virus on Interface checkbox, and check the WAN and LAN interface boxes.
3. Click in the top-right corner of the page.
Enabling Anti-Spyware Service
1. Select the Security Services > Anti-Spyware page in the SonicWALL management
interface.
2. In the Gateway Anti-Spyware Global Settings section, click the
Enable Anti-Spyware checkbox.
3. Select which interfaces you want to apply Anti-Spyware service on. You can select
any combination of WAN, LAN, and OPT.
4. For best protection from spyware, select the Prevent All checkbox for High, Medium,
and Low danger levels. This will block all spyware that can be detected.
5. Click in the top-right corner of the page.