SonicWALL NSA 2400MX User manual

Getting Started Guide
SonicWALL Network Security Appliances
NETWORK SECURITY NSA 2400MX

SonicWALL NSA 2400MX Getting Started Guide Page i
SonicWALL NSA 2400MX
Getting Started Guide
This Getting Started Guide provides instructions for basic installation
and configuration of the SonicWALL Network Security Appliance
(NSA) 2400MX running SonicOS Enhanced.
Setup
Additional Configuration and Information
Support and Training Options - page 29
Product Safety and Regulatory Information - page 37
Step Procedure Est. Time
Pre-Configuration Tasks - page 1
Registering Your Appliance - page 5
Deployment Scenarios - page 13
Enabling Essential Security Services - page 23
1
2
3
4

Page ii SonicWALL NSA 2400MX Front Panel
SonicWALL NSA 2400MX Front Panel
2400MX
Network Security Appliance
CLI Port
For connection to SonicOS command
line interface
USB Ports
For use with SonicWALL approved modules
WAN Port (X1)
Provides WAN connectivity
Provides dedicated LAN/WAN port status as follows:
M0
M1
ALARM
TEST
POWER
Status Lights
10/100/1000 Ethernet (X18-X25)
10/100 Ethernet (X2-X17)
Provide 10/100 Ethernet connectivity
Provide 10/100/1000 Ethernet connectivity
LAN Port (X0)
Provides LAN connectivity
module 0 is inserted
module 1 is inserted
minor/major alarm*
firmware loading/booting/safemode*
unit is powered on
*Refer to The SonicOS LED Reference Guide
for more information on ALARM and TEST lights

SonicWALL NSA 2400MX Getting Started Guide Page iii
SonicWALL NSA 2400MX Rear Panel
PML
I
o
M1 / M0 Expansion Bays
Expansion bays for additional SonicWALL
modular accessories
On (I) and Off (o) power switch for the
SonicWALL appliance
AC power connection for use with
the supplied power cable
AC Power Supply
Power Switch

Page iv SonicWALL NSA 2400MX Front Panel

SonicWALL NSA 2400MX Getting Started Guide Page 1
1
Pre-Configuration Tasks
In this Section:
This section provides pre-configuration information. Review this section before setting up your SonicWALL NSA 2400MX appliance.
•Checking NSA 2400MX Package Contents - page 2
•Obtaining Configuration Information - page 3
•Verifying System Requirements - page 4
1

Page 2 Checking NSA 2400MX Package Contents
Checking NSA 2400MX Package Contents
Before setting up your SonicWALL NSA appliance, verify that your
package contains the following parts:
• NSA 2400MX Appliance
• Ethernet Cable
• DB9 -> RJ45 (CLI) Cable
• Rack Mounting Kit
• Standard Power Cord*
• Getting Started Guide
Any Items Missing?
If any items are missing from your package,
please contact SonicWALL support.
A listing of the most current support documents are available online
at: <http://www.sonicwall.com/us/support.html>
*The pictured power cord is intended for use in North America only.
(x6)
(x2)
*
2400MX
Network Security Appliance

SonicWALL NSA 2400MX Getting Started Guide Page 3
Obtaining Configuration Information
Record and keep for future reference:
Registration Information
Networking Information
Administrator Information
Internet Service Provider (ISP) Information
Record the following information about your current Internet service:
Note: If you are not using one of the network configurations above,
refer to <http://www.sonicwall.com/us/support.html>.
Serial Number: Record the serial number found on
the bottom panel of your
SonicWALL appliance.
Authentication Code: Record the authentication code
found on the bottom panel of your
SonicWALL appliance.
LAN IP Address:
. . .
Select a static IP address for your
SonicWALL appliance that is within
the range of your local subnet. If
you are unsure, you can use the
default IP address
(192.168.168.168).
Subnet Mask:
. . .
Record the subnet mask for the
local subnet where you are
installing your SonicWALL
appliance.
Ethernet WAN IP Address:
. . .
Select a static IP address for your
Ethernet WAN. This setting only
applies if you are already using an
ISP that assigns a static IP address.
Admin Name: Select an administrator account
name. (default is admin)
Admin Password: Select an administrator password.
(default is password)
If you connect
using Please record
DHCP No information is usually required , although some
providers may require a host name.
Host name:
Static IP IP Address: . . .
Subnet Mask: . . .
Default Gateway: . . .
Primary DNS: . . .
DNS 2 (optional): . . .
DNS 3 (optional): . . .

Page 4 Verifying System Requirements
Verifying System Requirements
Before you begin the setup process, verify that you have:
• An Internet connection
• A Web browser supporting Java Script and HTTP uploads.
Supported browsers include the following:
Accepted
Browser Browser Version Number
Internet
Explorer 6.0 or higher
Firefox 3.0 or higher
Opera 9.10 or higher for
Windows
Chrome 4.0 or higher
Safari 3.0 or higher for MacOS

SonicWALL NSA 2400MX Getting Started Guide Page 5
2
Registering Your Appliance
In this Section:
This section provides instructions for registering your SonicWALL NSA 2400MX appliance.
•Creating a MySonicWALL Account - page 6
•Registering and Licensing Your Appliance - page 6
•Upgrading Firmware on Your SonicWALL - page 9
Note: Registration is an important part of the setup process and is necessary to receive the benefits of SonicWALL security services,
firmware updates, and technical support.
2

Page 6 Creating a MySonicWALL Account
Creating a MySonicWALL Account
If you already have a MySonicWALL account, skip to the
Registering and Licensing Your Appliance section. Otherwise,
perform the following steps to create an account:
1. In your browser, navigate to www.mysonicwall.com.
2. In the login screen, click the Not a registered user link.
3. Complete the Registration form and click Register.
4. Verify the information is correct and click Submit.
5. In the screen confirming that your account was created,
click Continue.
Registering and Licensing Your Appliance
This section contains the following subsections:
•Product Registration - page 6
•Licensing Security Services and Software - page 7
•Verifying Bundled Services - page 7
•Activating Pre-Purchased Services - page 8
•Purchasing a New Service - page 8
Product Registration
You must register your SonicWALL security appliance on
MySonicWALL to enable full functionality.
1. Login to your MySonicWALL account. If you do not have an
account, you can create one at www.mysonicwall.com.
2. On the main page, type the appliance serial number in
the Register A Product field. Then click Next.
3. On the My Products page, under Add New Product,
type the friendly name for the appliance, select the
Product Group if any, type the authentication code into
the appropriate text boxes, and then click Register.
4. On the Product Survey page, fill in the requested
information and then click Continue.

SonicWALL NSA 2400MX Getting Started Guide Page 7
Licensing Security Services and Software
The Service Management - Associated Products page in
MySonicWALL lists security services, support options, and
software, such as ViewPoint, that you can purchase or try with a
free trial. For details, click the Info button. Your current licenses
are indicated in the Status column with either a license key or
an expiration date. You can purchase additional services now or
at a later time.
The following list highlights several products and services that
are available for the SonicWALL NSA 2400MX:
• Service Bundles:
• Client/Server Anti-Virus Suite
• Comprehensive Gateway Security Suite
• Gateway Services:
• Gateway Anti-Virus, Anti-Spyware,
Intrusion Prevention, Application Firewall
• Global Management System
• Content Filtering: Premium Edition
• Comprehensive Anti-Spam
• VPN Upgrade
• Desktop and Server Software:
• Enforced Client Anti-Virus and Anti-Spyware
• Global VPN Client
• Global VPN Client Enterprise
• ViewPoint
• SSL VPN
• Support Services:
• Dynamic Support 8x5
• Dynamic Support 24x7
• Software and Firmware Updates
• Hardware Warranty
Verifying Bundled Services
If your initial purchase included security services or other
software bundled with the appliance, these licenses are
enabled on MySonicWALL when the SonicWALL appliance is
delivered to you and reflected in the Service Management page
on MySonicWALL.

Page 8 Registering and Licensing Your Appliance
Activating Pre-Purchased Services
To manage your licenses, perform the following tasks:
1. Navigate to the My Products page and click the registered
product you want to manage.
2. If you purchase a service subscription or upgrade from a
sales representative separately, you will receive an
Activation Key for the product. This key is emailed to you
after online purchases, or is on the front of the certificate
that was included with your purchase. Locate the product
on the Service Management page and click Enter Key in
that row.
3. In the Activate Service page, type or paste your key into
the Activation Key field and then click Submit. Depending
on the product, you will see an expiration date or a license
key string in the Status column when you return to the
Service Management page.
Purchasing a New Service
To license a 30-day trial for a service:
1. Click Try in the Service Management page. A 30-day free
trial is immediately activated.
2. Review the status page, which should display relevant
information including the activation status, expiration date,
number of licenses, and links to installation instructions or
other documentation.
To purchase a full license for a service:
1. Click Buy Now.
2. In the Buy Service page, type the number of licenses you
want in the Quantity column for either the 1-year, 2-year,
or 3-year license row and then click Add to Cart.
3. In the Checkout page, follow the instructions to complete
your purchase.
The MySonicWALL server will generate a license key for the
product. The key is added to the license keyset. You can use
the license keyset to manually apply all active licenses to your
SonicWALL appliance.
The service management screen will display the product you
licensed with an expiration date when activation is complete.

SonicWALL NSA 2400MX Getting Started Guide Page 9
Upgrading Firmware on Your SonicWALL
Although your SonicWALL ships with the most current firmware
available at the time of manufacture, firmware upgrades that
provide new features and functionality updates are always
available through MySonicWALL.
This section provides instructions to upgrade your firmware to
the latest version of SonicOS:
•Obtaining the Latest Firmware - page 9
•Saving a Backup Copy of Your Preferences - page 9
•Upgrading the Firmware with Current Settings - page 10
•Using SafeMode to Upgrade Firmware - page 10
Obtaining the Latest Firmware
1. To obtain a new SonicOS Enhanced firmware image file for
your SonicWALL security appliance, connect to your
MySonicWALL account at:
<http://www.mysonicwall.com>
2. Copy the new SonicOS Enhanced image file to a
convenient location on your management station.
Saving a Backup Copy of Your Preferences
Before beginning the update process, make a system backup of
your SonicWALL security appliance configuration settings. The
backup feature saves a copy of the current configuration
settings on your SonicWALL security appliance, protecting your
existing settings in the event that it becomes necessary to
return to a previous configuration state. The System Backup
shows you the current configuration and firmware in a single,
clickable restore image.
In addition to using the backup feature to save your current
configuration state to the SonicWALL security appliance, you
can export the configuration preferences file to a directory on
your local management station. This file serves as an external
backup of the configuration preferences, and can be imported
back into the SonicWALL security appliance.
Perform the following procedures to save a backup of your
configuration settings and export them to a file on your local
management station:
1. On the System > Settings page, click Create Backup.
Your configuration preferences are saved. The System
Backup entry is displayed in the Firmware Management
table.
2. To export your settings to a local file, click Export Settings.
A popup window displays the name of the saved file.

Page 10 Upgrading Firmware on Your SonicWALL
Upgrading the Firmware with Current Settings
Perform the following steps to upload new firmware to your
SonicWALL appliance and use your current configuration
settings upon startup.
1. Download the SonicOS Enhanced firmware image file from
MySonicWALL and save it to a location on your local
computer.
2. On the System > Settings page, click Upload New
Firmware.
3. Browse to the location where you saved the SonicOS
Enhanced firmware image file, select the file and click the
Upload button.
4. On the System > Settings page, click the Boot icon in the
row for Uploaded Firmware.
Note: On the System > Settings page, click the Boot icon in
the row for Uploaded Firmware with Factory Default
Settings.
5. In the confirmation dialog box, click OK. The SonicWALL
restarts and then displays the login page.
6. Enter your user name and password. Your new SonicOS
Enhanced image version information is listed on the
System >Settings page.
Using SafeMode to Upgrade Firmware
If you are unable to connect to the SonicWALL security
appliance’s management interface, you can restart the
SonicWALL security appliance in SafeMode. The SafeMode
feature allows you to recover quickly from uncertain
configuration states with a simplified management interface that
includes the same settings available on the System > Settings
page.
To use SafeMode to upgrade firmware on the SonicWALL
security appliance, perform the following steps:
1. Connect your computer to the X0 port on the SonicWALL
appliance and configure your IP address with an address
on the 192.168.168.0/24 subnet, such as 192.168.168.20.
2. To configure the appliance in SafeMode, perform one of
the following:
• Use a narrow, straight object, such as a straightened
paper clip or a toothpick, to press and hold the reset
button on the back of the security appliance for
30-seconds. The reset button is in a small hole next to
the power supply.
• The Test light starts blinking when the SonicWALL
security appliance has rebooted into SafeMode.

SonicWALL NSA 2400MX Getting Started Guide Page 11
3. Point the Web browser on your computer to
192.168.168.168. The SafeMode management interface
displays.
4. If you have made any configuration changes to the security
appliance, select the Create Backup On Next Boot
checkbox to make a backup copy of your current settings.
Your settings will be saved when the appliance restarts.
5. Click Upload New Firmware, and then browse to the
location where you saved the SonicOS Enhanced firmware
image, select the file and click the Upload button.
6. Select the boot icon in the row for one of the following:
• Uploaded Firmware - New!
Use this option to restart the appliance with your
current configuration settings.
• Uploaded Firmware with Factory Defaults - New!
Use this option to restart the appliance with default
configuration settings.
7. In the confirmation dialog box, click OK to proceed.
8. After successfully booting the firmware, the login screen is
displayed. If you booted with factory default settings, enter
the default user name and password (admin / password) to
access the SonicWALL management interface.
Note: Remember to change your IP address settings back to
DHCP. Otherwise, you may not be able to connect to
the Internet.

Page 12

SonicWALL NSA 2400MX Getting Started Guide Page 13
3
Deployment Scenarios
In this Section:
This section provides detailed overviews of advanced deployment scenarios as well as configuration instructions for connecting your
SonicWALL NSA 2400MX.
•Initializing the SonicWALL - page 14
•Choose a Deployment Scenario - page 15
•Setup for NAT / Route Mode Gateway - page 16
•Setup for Layer 2 Bridge Mode - page 18
•Verifying WAN (Internet) Connectivity - page 21
Tip: Before completing this section, fill out the information in Obtaining Configuration Information - page 3. You will need to enter this
information during the Setup Wizard.
3

Page 14 Initializing the SonicWALL
Initializing the SonicWALL
To begin deployment of your SonicWALL:
1. Connect the SonicWALL appliance to an AC power source.
The Power LED on the front panel lights up blue when you
plug in the SonicWALL NSA. The Test LED will light up and
may blink while the appliance performs a series of
diagnostic tests.
When the Power LED is lit and the Test LED is no longer lit,
the SonicWALL NSA 2400MX is ready for configuration.
This typically occurs within a few minutes of applying
power to the appliance.
Note: If the Test LED remains lit after the SonicWALL NSA
appliance has been booted, restart the appliance by
cycling power.
2. Using standard CAT-5 or better Ethernet cable, connect
your Internet connection (switch/router/modem) to the X1
(WAN) port on your SonicWALL NSA Series appliance.
3. Connect one end of the provided Ethernet cable to the
computer you are using to manage the SonicWALL NSA
appliance.
4. Connect the other end of the cable to the X0 (LAN) port on
your SonicWALL NSA appliance.
The Link LED above the X0 (LAN) port will light up in green
or amber depending on the link throughput speed,
indicating an active connection:
- Amber indicates 1 Gbps
- Green indicates 100 Mbps
- Unlit while the right (activity) LED is illuminated
indicates 10 Mbps
2400MX
Network Security Appliance
SonicWALL NSA 2400MX
Internet
Management
Station
X0 (LAN)
X1 (WAN)

SonicWALL NSA 2400MX Getting Started Guide Page 15
Choose a Deployment Scenario
This Getting Started Guide contains two deployment scenarios.
Select your scenario from one of the following:
NAT/Route Mode Gateway
For installations with a single SonicWALL NSA 2400MX,
configured as an Internet or network gateway.
To complete setup for this scenario, turn to:
Setup for NAT / Route Mode Gateway section, on page 16
Layer 2 Bridge Mode
For installations where the SonicWALL NSA 2400MX is
running in tandem with an existing network gateway.
To complete setup for this scenario, turn to:
Setup for Layer 2 Bridge Mode section, on page 18
NAT/Route Mode Gateway
Internet
LAN 2
LAN 1 DMZ
NetworkSecurityAppliance
NetworkSecurityAppliance
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
2400MX
Network Security Appliance
SecureRemote Access
EX5000
SRA
Local Clients
SSL-VPN Appliance
Web Server
NSA 2400MX
Local Data and Resources
LAN 2
LAN 1 DMZ
NetworkSecurityAppliance
NetworkSecurityAppliance
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
E7500
NetworkSecurityAppliance
SecureRemote Access
EX5000
SRA
Local Clients
SSL-VPN Appliance
Web Server
Local Data and Resources
Layer 2 Bridge Mode
Internet
2400MX
Network Security Appliance
NSA 2400MX
Third Party Gateway