SonicWALL Content Security Manager 2200 User manual

COMPREHENSIVE INTERNET SECURITY
™
b
SonicWALL Content Security Manager Series
SonicWALL CSM 2200
Getting Started Guide

SonicWALL CSM Series Appliance Getting Started Guide Page 1
SonicWALL Content Security Manager 2200 Getting
Started Guide
Thank you for purchasing a SonicWALL Content Security Manager (CSM) series
appliance. The SonicWALL CSM is an Internet content and application filter that
enhances security and employee productivity, optimizes network bandwidth and
mitigates legal liabilities. The SonicWALL CSM integrates into virtually any network to
provide powerful, scalable, cost-effective Internet content filtering that is easy to
implement, requiring no change to your network clients. The SonicWALL CSM filters
HTTP traffic on any port, regardless of whether the network clients use external proxy
servers.
Note: For complete instructions, refer to the SonicOS CF 2.5 Administrator’s Guide. For
solutions using SonicWALL ADConnector, refer to the SonicWALL Content
Security Manager Integrated Solutions Guide, available on the
SonicWALL CSM Resource CD and at
<http://www.sonicwall.com/support/documentation.html>.
Contents
This getting started guide contains the following sections:
•“Before You Begin” on page 2
• “Check Package Contents” on page 3
• “What You Need to Provide” on page 4
• “Important Information You Need” on page 4
• “SonicWALL CSM 2200 Front and Back Panels Overview” on page 5
•“Configuring Your SonicWALL CSM” on page 6
1
“Applying Power to the SonicWALL CSM” on page 6
2
“Accessing the SonicWALL Management Interface” on page 7
3
“Configuring Your SonicWALL CSM Using the Setup Wizard” on page 9
4
“Connecting the SonicWALL CSM to Your Network” on page 14
5
“Registering Your SonicWALL CSM” on page 17
6
“Understanding the *Default Policy” on page 21
7
“Verifying the *Default Policy” on page 23
8
“Integrating the SonicWALL CSM with Microsoft Active Directory” on page 24
•“Advanced Configuration” on page 32

Page 2
Before You Begin
This section contains the following subsections:
•“Check Package Contents” on page 3
•“What You Need to Provide” on page 4
•“Important Information You Need” on page 4
•“SonicWALL CSM 2200 Front and Back Panels Overview” on page 5

SonicWALL CSM Series Appliance Getting Started Guide Page 3
Check Package Contents
1. One SonicWALL SonicWALL CSM appliance
2. One SonicWALL CSM Getting Started Guide
3. One SonicOS Release Note
4. One Thank You card
5. One straight-through Ethernet cable
6. One red crossover Ethernet cable
7. One power cord*
8. One SonicWALL CSM Resource CD
9. Rack mounting hardware
*The power cord is for North America use only.
* Das eingeschlossene Netzkabel ist für Gebrauch in Nordamerikas nur vorgehabt.
Für Europaïsche Union (EU) Kunden, ist ein Netzkabel nicht eingeschlossen.
Note: SonicWALL ADConnector and SonicWALL ViewPoint software for the
SonicWALL CSM are available for download from the SonicWALL Web site
<https://www.mysonicwall.com>.
.

Page 4
What You Need to Provide
• A firewall or security appliance protecting your LAN
• PC or Macintosh computer to act as an out-of-band management station for initial
configuration of the SonicWALL CSM
• Web browser for accessing the SonicWALL CSM’s Web-based management
interface. The Web browser must support Java and HTTP uploads. Internet Explorer
5.0 or higher or Netscape Navigator 4.7 or higher are recommended.
Important Information You Need
LAN
LAN IP address range:
LAN netmask:
DNS server:
Firewall or Security Appliance
Firewall or router gateway IP address:
Firewall or security appliance management IP address:
mySonicWALL.com Account
This is sensitive information. Store this information carefully.
Username:
Password:
SonicWALL CSM Management Account
This is sensitive information. Store this information carefully.
Username: (default: admin)
Password: (default: password)

SonicWALL CSM Series Appliance Getting Started Guide Page 5
SonicWALL CSM 2200 Front and Back Panels Overview
Power Test Alarm X0 X1 X2 X3/HF-Port
Console LED LED LED Port Port Port
On/Off
Power Switch
Front Panel Feature Description
Console Provides access to command-line interface.
Power LED Indicates the SonicWALL CSM appliance is
powered on.
Test LED Indicates the SonicWALL CSM appliance is in test mode.
Alarm LED Indicates a critical error or failure.
X0 Port Provides a connection to your LAN.
X1 Port Provides a primary (Ethernet) connection to the Internet.
X2 Port Provides a connection for out-of-band management. This
port has no network connection.
X3/HF-Port Provides an optionally configurable HF (hardware failover)
port. Note: This port is not configurable for other types of
connections.
Back Panel Feature Description
Power Provides power connection using supplied power cord.
On/Off Switch Powers the SonicWALL CSM appliance on and off.

Page 6
Configuring Your SonicWALL CSM
Configuring your SonicWALL CSM comprises the following steps:
1
“Applying Power to the SonicWALL CSM” on page 6
2
“Accessing the SonicWALL Management Interface” on page 7
3
“Configuring Your SonicWALL CSM Using the Setup Wizard” on page 9
4
“Connecting the SonicWALL CSM to Your Network” on page 14
5
“Registering Your SonicWALL CSM” on page 17
6
“Understanding the *Default Policy” on page 21
7
“Verifying the *Default Policy” on page 23
8
“Integrating the SonicWALL CSM with Microsoft Active Directory” on page 24
1
Note: After step 7, the SonicWALL CSM is fully functional, using the built-in *Default
Policy to filter content. Continue to step 8 to further customize your installation.
Applying Power to the SonicWALL CSM
To apply power to your SonicWALL CSM appliance:
1. Plug the power cord into the back panel of the SonicWALL CSM and into an
appropriate power outlet.
2. Turn on the SonicWALL CSM appliance using the On/Off switch located on the back
panel of the appliance.
The Power LED shines green when you activate the power switch. The Test LED and
Alarm LED light up and may blink while the appliance performs a series of diagnostic
tests. When the Test LED and Alarm LED are no longer lit, the SonicWALL CSM is ready
for configuration.

2
SonicWALL CSM Series Appliance Getting Started Guide Page 7
Accessing the SonicWALL Management Interface
To access the Web-based management interface of the SonicWALL CSM, configure your
out-of-band management station (the computer you are using to manage the SonicWALL
CSM) with the following static TCP/IP address properties:
• IP address: Use an available IP address on the 192.168.168.0/24 subnet. For
example, 192.168.168.20.
• Subnet mask: 255.255.255.0
• DNS settings: You do not need to configure the default gateway or DNS
settings.
For help configuring a static IP address, refer to “Configuring Static IP” on page 33.
When you have configured the static IP address and subnet mask on your management
station, perform the following steps to access the SonicWALL CSM management
interface:
1. Connect one end of the red crossover Ethernet cable to the Ethernet port of the out-
of-band management station. Connect the other end of the red crossover cable to
the X2 port on the SonicWALL CSM.
Note: The X2 port is for out-of-band management and has no network connection.
2. Start your Web browser.
Alert: Your Web browser must support Java and HTTP uploads. Internet Explorer 5.0
or higher or Netscape Navigator 4.0 or higher are recommended.

Page 8
3. Enter http://192.168.168.168 in the Location or Address field and press Enter on
your keyboard.
Note: For additional security, you may also access the appliance using HTTPS.
4. In the SonicWALL CSM authentication page, enter admin in the Name field and
password in the Password field and click Login. The Setup Wizard page is
displayed.
5. Unable to connect?
If you cannot connect to the SonicWALL CSM, verify the following configurations:
• Did you correctly enter the SonicWALL CSM X2 management IP address,
http://192.168.168.168, in your Web browser?
• Did you change the TCP/IP network settings on your computer?
• Did you use the red crossover Ethernet cable to connect your out-of-band
management station to the X2 (out-of-band management) port on your
SonicWALL CSM?

SonicWALL CSM Series Appliance Getting Started Guide Page 9
3Configuring Your SonicWALL CSM Using the Setup Wizard
The SonicWALL CSM Setup Wizard page automatically displays after the CSM is
properly powered on and configured for and connected to your management station. The
Setup Wizard allows you to configure the following components:
• Password
•Timezone
• Network setup
To configure your SonicWALL CSM using the Setup Wizard, perform the following steps:
1. The SonicWALL Setup Wizard will automatically launch.
2. The Welcome to the SonicWALL Configuration Wizard screen displays. Confirm
that the radio button next to Setup Wizard is selected and click Next> to continue.
3. In the Change Password screen, you will be prompted to create a new password.
The Old Password is pre-populated. Enter a new password in the New Password
field and re-enter it in the Confirm field. Click Next> to continue. Passwords are
case-sensitive.

Page 10
4. In the Time Zone drop down list, select the correct time zone for your location.
Check the box next to Automatically adjust clock for daylight saving time if you
live in a region that observes Daylight Saving Time. Click Next> to continue.
Note: For best performance, you need to configure the time zone to accurately reflect
geographic location. It is important that you set the time zone correctly before you
register your SonicWALL CSM appliance.

SonicWALL CSM Series Appliance Getting Started Guide Page 11
5. The Network Setup screen will prompt you for information to configure the
SonicWALL CSM’s X0 and X1 interfaces, which will enable Internet connectivity.
Refer to the table below for a description of the Network Setup fields. After you have
entered the required information, press Next> to continue.
Alert: You must configure the network interfaces before connecting the
SonicWALL CSM to your network. If you have already connected cables to the
X0 and X1 interfaces, disconnect them before continuing this step.
Field Description
SonicWALL WAN IP Address Enter a single, static IP address to assign to the
SonicWALL CSM appliance. Make sure this address
will not be assigned to any other device.
WAN Subnet Mask Enter the subnet mask for your network. For example,
255.255.0.0.
Gateway (Router) Address Enter the default gateway of your network.
DNS Server Address Enter the DNS server address for your network.
DNS Server Address #2
(optional)
Enter a secondary, back-up DNS server to use if the
first one fails.

Page 12
6. The SonicWALL Configuration Summary displays. Click Apply to confirm the
settings. After you click the Apply button, the Storing SonicWALL Configuration
screen displays. It may take up to two minutes while changes are being applied to
your SonicWALL CSM appliance.
7. When the configuration has been stored, you will see the Setup Wizard Complete
screen. Click Close to close the Wizard. Continue to “Connecting the SonicWALL
CSM to Your Network” on page 14. Keep a hardcopy record of your IP address, user
name and password for your SonicWALL CSM appliance for administrator login.

SonicWALL CSM Series Appliance Getting Started Guide Page 13
8. Disconnect your crossover cable from your management station and the CSM
appliance and refer to “Connecting the SonicWALL CSM to Your Network” on
page 14.
Note: After initial configuration using the X2 out-of-band management interface, you
can now perform management from the LAN (X0) interface.

4
Page 14
Connecting the SonicWALL CSM to Your Network
Connect the SonicWALL CSM between your LAN and your firewall/security appliance,
allowing it to filter content requests from the LAN before they pass through the firewall/
security appliance. This step contains the following procedures:
• “Connecting the Ethernet Cables” on page 15
• “Testing Your Connectivity” on page 15
• “Adding Static Routes” on page 16
Figure 1: SonicWALL CSM Configuration Between the LAN and WAN
Alert: Do not connect the SonicWALL CSM to your network until you have configured
the X0 and X1 interfaces. Refer to “Configuring Your SonicWALL CSM Using the
Setup Wizard” on page 9.
Note: Before you connect the SonicWALL CSM to your network, reconfigure the TCP/
IP address properties of your out-of-band management station to the original IP
address and subnet mask settings.

SonicWALL CSM Series Appliance Getting Started Guide Page 15
Connecting the Ethernet Cables
1. Connect one end of the Ethernet cable connected to your internal network (your LAN
hub, switch, or router) to the X0 (Internal) port of the SonicWALL CSM.
The LEDs on the X0 port light up indicating an active connection.
2. Connect one end of an Ethernet cable connected to your firewall or Internet
connection to the X1 (External) port of the SonicWALL CSM.
The LEDs on the X1 port light up indicating an active connection.
Testing Your Connectivity
1. Open a Web browser and log into the CSM management interface by typing the IP
address you assigned to the SonicWALL CSM appliance in the Address or
Location bar.
2. In the left-navigation menu, click System and then click Diagnostics.
3. Under Network Settings, click Run Test.
4. The test may take up to two minutes before the results display.

Page 16
Tip: The System > Diagnostics > Run Test page provides the status of your network
connection and security services. The example on this page shows test results for
a SonicWALL CSM appliance with multiple active network DNS server
connections. The Content Filtering Server status is displayed as “not configured”
in red, which accurately reflects this SonicWALL CSM appliance not having an
active Content Filtering Server subscription service. Adding subscription services is
discussed later in this document.
Adding Static Routes
If you cannot connect to the firewall or router gateway or to URLs outside your firewall,
and your network consists of multiple subnets, you may need to add static routes to your
company routers, internal DNS servers, and your SonicWALL ADConnector. Refer to
“Figure 1: SonicWALL CSM Configuration Between the LAN and WAN” on page 14.
To add static routes in the SonicWALL CSM management interface, perform the
following steps:
1. In the SonicWALL CSM management interface, in the left-navigation menu, click
Network and then click Interfaces.
2. In the Network > Interfaces page, click Add below the Routing Table.
3. The Add Route window is displayed.
4. Enter the beginning IP address of the IP address range to which the DNS server or
Internet gateway belongs in the IP Address From field.
5. Enter the ending IP address of the IP address in the IP Address To field.
6. Enter the IP address of the gateway device to which the DNS server or Internet
gateway are attached in the Gateway IP field.
7. Select Internal (X0) or External (X1) from the Interface menu.
8. Click OK. The static route entry is added to the Routing Table.
9. The Routing Table displays the list of destinations that the IP software maintains on
each host and router.

SonicWALL CSM Series Appliance Getting Started Guide Page 17
5Registering Your SonicWALL CSM
Once you have established an Internet connection for your SonicWALL CSM, you must
register the SonicWALL CSM to activate:
• Allowed Nodes/Users license
• SonicWALL Content Filtering Service subscription
• Client Anti-Virus
• Gateway Anti-Virus
• Anti-Spyware
• Application Filter Service subscription
• Multimedia Application Filters
• Intrusion Prevention Service
•ViewPoint
Registering your SonicWALL CSM also allows you to:
• Download related software:
• SonicWALL ADConnector
• SonicWALL ViewPoint
• Receive firmware updates
• Access to SonicWALL technical support
• Get subscription renewals
• Upgrade node/user licenses

Page 18
Before You Register
You need a mySonicWALL.com account to register your SonicWALL CSM. You can
create a new mySonicWALL.com account directly from the SonicWALL management
interface.
Alert: Verify that the DNS and Time settings on your SonicWALL CSM are correct
when you register the device. Your DNS and Time settings should have been
configured with the Setup Wizard. You can verify the Time settings in the
System > Time page. You can verify the DNS settings from the
Network > Interfaces page under Interface Settings by clicking the Configure
icon next to the X1 (External) port.
Note: mySonicWALL.com registration information is not sold or shared with any other
company.

SonicWALL CSM Series Appliance Getting Started Guide Page 19
Creating a mySonicWALL.com Account
Creating a mySonicWALL.com account is fast, simple, and FREE. Simply complete an
online registration form in the SonicWALL CSM management interface. You must have
your SonicWALL CSM and your management station connected to the Internet to
complete the online registration process. If you already have a mysonicWALL.com
account, refer to “Registering Your SonicWALL CSM Using the Management Interface”
on page 20.
1. If you are not logged into the SonicWALL CSM management interface, log in with the
SonicWALL CSM administrative user name and password.
2. The System > Status page automatically displays. If the System > Status page
does not automatically display, click System in the left-navigation menu, and then
click Status.
3. On the System > Status page, in the Security Services section, click the Register
link in Your SonicWALL is not registered. Click here to Register your
SonicWALL.
4. In the mySonicWALL.com Login page, click the here link in “If you do not have a
mySonicWALL account, please click here to create one.” The
mySonicWALL.com account form is displayed.
5. In the mySonicWALL Account page, enter in your information in the Account
Information, Personal Information and Preferences fields. All fields marked with
an asterisk (*) are required fields. Be sure to remember your username and
password to access your mySonicWALL.com account.
6. Click Submit after completing the mySonicWALL Account form.
7. When the mySonicWALL.com server has finished processing your account, you will
see a page saying that your account has been created. Click Continue.Your
mySonicWALL.com account is activated. Now you need to log into
mySonicWALL.com to register your SonicWALL CSM.