SonicWALL ESA 5000 User manual

SonicWall™ Email Security Appliance 5000/Email
Security Appliance 7000
Beta Getting Started Guide

Copyright © 2017 SonicWall Inc. All rights reserved.
SonicWall is a trademark or registered trademark of SonicWall Inc. and/or its affiliates in the U.S.A. and/or other countries. All other trademarks and registered
trademarks are property of their respective owners
The information in this document is provided in connection with SonicWall Inc. and/or its affiliates’ products. No license, express or implied, by estoppel or
otherwise, to any intellectual property right is granted by this document or in connection with the sale of SonicWall products. EXCEPT AS SET FORTH IN THE TERMS
AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, SONICWALL AND/OR ITS AFFILIATES ASSUME NO LIABILITY WHATSOEVER AND
DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON- INFRINGEMENT. IN NO EVENT SHALL SONICWALL AND/OR ITS AFFILIATES BE LIABLE FOR ANY
DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS,
BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF SONICWALL AND/OR ITS
AFFILIATES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SonicWall and/or its affiliates make no representations or warranties with respect to
the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time
without notice. SonicWall Inc. and/or its affiliates do not make any commitment to update the information contained in this document.
For more information, visit https://www.sonicwall.com/legal/.
ESA 5000/ESA 7000 Getting Started Guide
Updated - January 2017
232-003432-50 Rev 00
Legend
WARNING: A WARNING icon indicates a potential for property damage, personal injury, or death.
CAUTION: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed.
IMPORTANT, NOTE, TIP, MOBILE, or VIDEO: An information icon indicates supporting information.

SonicWall Email Security Appliance 5000/Email Security Appliance 7000 Getting Started Guide i
Preface
In this Guide
The Email Security Appliances (ESA) have been rebuilt, taking advantage of 64-bit architecture. They offer increased memory and
the option for faster, detachable disk drives, depending upon the model selected. Appliance functionality focuses on:
•Effectively scanning inbound and outbound email
•Providing multi-layer protection
•Managing compliance and encryption
•Managing Capture ATP
This Getting Started Guide provides instructions for basic installation and configuration of the SonicWall ESA 5000 and the
SonicWall ESA 7000.
Chapter 1 Section included:
Planning on page 1•Package Contents on page 1
•Prerequisites on page 3
•Using MySonicWall on page 3
•Configuration Information on page 4

ii SonicWall Email Security Appliance 5000/Email Security Appliance 7000 Getting Started Guide
Chapter 2 Section included:
Installation and Setup on page 7•Installing Your Appliance on page 8
•Accessing Quick Settings on page 9
•Changing the Default Administrator Password on page 11
•Registering Your Products on page 12
Chapter 3 Section included:
Support and Training Options on page 17 •Customer Support on page 17
•Knowledge Base on page 18
•User Forums on page 18
•Training on page 18
•Professional Services on page 18
•Related Documentation on page 18
•Additionally Supported Languages on page 19
Chapter 4 Section included:
Safety and Regulatory Information on
page 21
•Notices on page 21
•Warranty Information on page 28

SonicWall Email Security Appliance 5000/Email Security Appliance 7000 Getting Started Guide iii
Appliance Overview
SonicWall produces three different configurations of the 64-bit
appliances for Email Security: the ESA 5000, ESA 7000, and ESA
9000. Because the ESA 5000 and ESA 7000 are built in the
same chassis, with similar interfaces, both appliances are
documented in this Getting Started Guide. The ESA 9000 is
documented in the SonicWall Email Security Appliance 9000
Getting Started Guide.
The configuration details for each appliance are shown below:
ESA 5000 ESA 7000
CPU Model Celeron G1820 i3-4330
Number of Cores per
CPU
22
CPU Frequency 2.7 GHz 3.5 GHz
Gigabit LAN 22
10G SFP+ N/A N/A
Memory 8 GB DDR3
1600 MHz ECC
16 GB DDR3
1600MHz ECC
Memory Quantity 2 x 4 GB 2 x 8 GB
Hard Drive 2.5-inch, 500 GB
SATA 7200 rpm
2.5-inch, 1 TB
SATA 7200 rpm
Hard Drive Quantity
and Type
1 Internal 2 Removable
ESA 5000 ESA 7000

iv SonicWall Email Security Appliance 5000/Email Security Appliance 7000 Getting Started Guide
The following shows the front and rear panels of the ESA 5000 and ESA 7000.
1 Display Port
2 Serial Port
3 Ethernet Ports
4 LED Indicators
5 Network Ports
6 Power Switch
7 Power Connection
Front and Back Panel for ESA 5000
Front View
Rear View

SonicWall Email Security Appliance 5000/Email Security Appliance 7000 Getting Started Guide v
The LED indicators on the front panel show the following:
Product Licensing
SonicWall Email Security components must be registered on
MySonicWall to enable full functionality and the benefits of
SonicWall security services, firmware updates, and technical
support. Refer to Using MySonicWall for more information on
how to set up an account.
The ESA 5000 and ESA 7000 appliances come with the base
license for Email Security, but additional options are available
that must be licensed separately. For maximum effectiveness,
all modules are recommended. The following licenses are
available:
• Email Protection (Anti-Spam and Anti-Phishing):
Additional license that protects against email spam and
phishing attacks.
• Email Anti-Virus (McAfee and SonicWALL Time Zero):
Provides updates for McAfee anti-virus definitions and
SonicWALL Time Zero technology for immediate
protection from new virus outbreaks.
• Email Anti-Virus (Kaspersky and SonicWALL Time
Zero): Provides updates for Kaspersky anti-virus
definitions and SonicWALL Time Zero technology for
immediate protection from new virus outbreaks.
• Email Anti-Virus (SonicWALL Grid A/V and SonicWALL
Time Zero): Provides updates for SonicWALL Grid anti-
virus definitions and SonicWALL Time Zero technology
for immediate protection from new virus outbreaks.
• Email Anti-Virus Cyren: Provides updates for Cyren
anti-virus definitions and SonicWALL Time Zero
Hard disk drive: when blinking shows hard disk
activity.
Alarm: indicates a thermal or other alert
condition.
Not used.
Power: indicates the power is on or off.

vi SonicWall Email Security Appliance 5000/Email Security Appliance 7000 Getting Started Guide
technology for immediate protection from new virus
outbreaks.
• Email Encryption Service: License for encryption
features enabling the secure exchange of sensitive and
confidential information. It includes predefined
dictionaries to ensure proper protection.
• Email Compliance Subscription: License for compliance
features. It includes predefined polices for easy
compliance, allows multiple governance policies,
identifies email for compliance policy enforcement, and
provides compliance reporting and monitoring.
• Capture Advanced Threat Protection: service that
analyzes various types of content for malicious
behavior. At least one other anti-virus option needs to
licensed for Capture ATP to work.

SonicWall Email Security Appliance 5000/Email Security Appliance 7000 Getting Started Guide 1
1
Planning
Review this section before setting up your SonicWall ESA 5000 or ESA 7000. It can help you plan for installation and configuration.
•Package Contents on page 1
•Prerequisites on page 3
•Configuration Information on page 3
•Using MySonicWall on page 4
Package Contents
Before setting up the Email Security appliance, verify that your package contains the following parts:
1 One ESA 5000 or ESA 7000 appliance
2 One SonicWall Email Security Appliance 5000/Email Security Appliance 7000 Getting Started Guide and one Safety,
Environmental, and Regulatory Information
3 One ethernet cable
4 One serial cable

2SonicWall Email Security Appliance 5000/Email Security Appliance 7000 Getting Started Guide
5 Two power cords
6 One Rack Mount Kit
If any items are missing from your package, contact SonicWall Support: https://support.sonicwall.com/contact-support.
IMPORTANT: The included powers cords are approved for use only in the specific region or country noted on the packaging.
Before using a power cord, verify that it is rated and approved for use in your location. The power cord is for AC mains
installation only. Refer to Safety and Regulatory Information for details.
1 2

SonicWall Email Security Appliance 5000/Email Security Appliance 7000 Getting Started Guide 3
Prerequisites
To configure an ESA 5000 or ESA 7000, you must have access to
the following:
•A MySonicWall account
•An internet connection
•A computer to use as a management station for initial
configuration of Email Security software
•A web browser supporting Java Script and HTTP
uploads. Supported browsers include:
Using MySonicWall
MySonicWall is a one-stop resource for registering all your
SonicWall security appliances, activating or purchasing licenses
for various security services, accessing security notifications
and getting support. You need to set up a MySonicWall
account prior to configuring your appliance, if you don’t
already have one.
To create a MySonicWall account:
1 In a web browser navigate to https://
www.mysonicwall.com/.
2 In the login screen, select the Register Now link.
3 Complete the registration form and click on Register
when done.
Browser Type Browser Version
Internet Explorer 11.0
Firefox Supported on the latest version
Chrome Supported on the latest version
NOTE: MySonicWall registration information is not sold
or shared with any other company.

4SonicWall Email Security Appliance 5000/Email Security Appliance 7000 Getting Started Guide
4 Verify that the information is correct and click on
Submit.
5 To confirm your account was created, click Continue.
Configuration Information
To ease the configuration process, SonicWall recommends that
you collect certain networking and general information ahead
of time.
Networking Information
General Information
1 Enter the subnet mask
for the local subnet.
Email Security subnet mask:
2 Record the IP address
of your network’s
gateway device (your
perimeter firewall or
router, for example).
Gateway IP address:
3 Record your DNS
server information.
DNS Server 1:
DNS Server 2 (optional):
4 Record the fully
qualified domain
name within your
network for your
Email Security
appliance. (32
characters maximum)
Host name:
5 Record the IP address
or hostname of your
directory services
server (your LDAP or
Active Directory
server).
Server IP for LDAP or AD:
1 Select a friendly name
for your Email
Security appliance.
(32 characters
maximum)
Friendly server name:
2 Select a password for
your Email Security
appliance. The default
is password.
Password:

SonicWall Email Security Appliance 5000/Email Security Appliance 7000 Getting Started Guide 5
3 Record the serial
number on the label
of your Email Security
appliance.
Serial number:
4 Record the
registration code that
is generated in
mysonicwall.com.
Refer to Using
MySonicWall for more
information.
Registration code:

6SonicWall Email Security Appliance 5000/Email Security Appliance 7000 Getting Started Guide

SonicWall Email Security Appliance 5000/Email Security Appliance 7000 Getting Started Guide 7
2
Installation and Setup
This chapter reviews how to install and configure your Email Security appliance.
Topics:
•Installing Your Appliance on page 8
•Accessing Quick Settings on page 9
•Changing the Default Administrator Password on page 11
•Registering Your Products on page 12
Installing Your Appliance
Your Email Security appliance is designed to operate in most network setups with minimal configuration. Describe how to connect
and cable your appliance.
•Mounting the Appliance in a Rack on page 8
•Connecting the Appliance to Your Network on page 8

8SonicWall Email Security Appliance 5000/Email Security Appliance 7000 Getting Started Guide
Mounting the Appliance in a Rack
When delivered, your ESA 5000 or ESA 7000 includes rack
slides so you can mount the appliance in an equipment rack.
Instructions for assembling the slides and attaching them to
the appliance are also included. Refer to the SonicWall 1U
Rackmount Slide Installation Guide for more details.
Connecting the Appliance to Your
Network
The Email Security appliance comes pre-configured with two IP
addresses:
To physically connect the Email Security appliance to your
network:
1 Plug one end of the provided Ethernet cable into the
LAN port on the back of your appliance.
2 Plug the other end of the Ethernet cable into an open
port on your network hub or switch.
3 Plug the supplied power cable into the back of the
appliance.
4 Plug the other end of the supplied power cable into an
AC socket.
5 Connect a monitor to the display port.
6 Turn on your appliance by pushing the power button.
The appliance begins its boot process which you can
see on the monitor. This can take a few minutes.
7 Log in to the appliance. The default user name is admin
and the password is password.
8 Type the following commands to redefine the
appliance’s IP addresses to work in your network:
interface eth0 <IP address> <subnet>
interface eth1 <IP address> <subnet>
route --add default --destination <gateway
IP>
Replace the variables <IP address>, <subnet> and
<gateway IP> with the values needed for your network.
9 Log out when done. Now you can access the appliance
from any computer on the network.
Ethernet 0 192.168.168.169
Ethernet 1 192.168.168.170
NOTE: IP addresses 192.168.168.168, 192.168.168.169,
and 192.168.168.170 are reserved and used by Email
Security.

SonicWall Email Security Appliance 5000/Email Security Appliance 7000 Getting Started Guide 9
Accessing Quick Settings
To validate operation of the appliance, you can access the web
interface and define some basic setting.
To access the web management interface:
1 Open a web browser and navigate to the new IP
address that you set up in the previous section.
2 Review and agree to the User Agreement that pops up.
After agreeing, you’ll be redirected to the login page.
3 Enter admin for the User Name.
4 Type password in the Password field.
5 Click on Login.
The interface opens to the Quick Settings section of the
Monitoring window.
CAUTION: If you have to shut down your appliance be
sure to follow proper procedures. To shut down the
appliance, use the web interface or press the power
button once. Holding down the power button or
unplugging your appliance does not give it time to write
all the data from volatile memory into stable memory
and you may lose settings or data, impacting
performance.

10 SonicWall Email Security Appliance 5000/Email Security Appliance 7000 Getting Started Guide

SonicWall Email Security Appliance 5000/Email Security Appliance 7000 Getting Started Guide 11
1 Define the hostname for your appliance in the
Hostname section.
2 Type the Email address of administrator who receives
emergency alerts.
3 Enter the email address for the Postmaster for the
MTA.
4 Enter the Name or IP address of backup SMTP servers.
5 Under Date and Time Settings:
a Select a time zone from the drop down list.
b Set the system date and time from the drop
down lists.
6 Verify the information in the Networking section. It
should match what you previously defined from the
command line.
Use the Test Fallbacks button to test the fallback
connection.
7 Provide the Remote Drive information if your
appliance is connected to remote storage:
• Hostname (FQDN)
• Shared Drive name
• Remote login userid
• Remote login password
Use the Mount button and the Test Mount button to
mount and test your remote drive.
8 Select Apply Changes. Your appliance automatically
reboots.
Changing the Default
Administrator Password
To protect your appliance, change the password from the
default.
1 Log in to the web interface.
2 Navigate to the System > Administration page.
3 Enter your Username and Old Password.
4 Enter the New Password and Confirm Password.
5 Click Apply Changes.

12 SonicWall Email Security Appliance 5000/Email Security Appliance 7000 Getting Started Guide
Registering Your Products
All registration takes place on MySonicWall, whether you login directly or navigate to the site from the Email Security management
interface.
To register your products:
1 While logged into the appliance navigate to System > License Management.
2 In the Quick Registration section, type the serial number for the appliance in the field for registering a product.
3 Click on Next.
4 On the next page, enter a friendly name for your appliance.
5 Select the appropriate product group from the drop down list, if available.
IMPORTANT: Registration is an important part of the
setup process and is necessary to receive the benefits of
SonicWall security services, firmware updates and
technical support.