SonicWALL SMA 500v Quick start guide

Type
Quick start guide

SonicWALL SMA 500v is a virtual appliance that provides secure remote access to corporate networks and resources for employees and partners. It offers a range of capabilities, including:

  • Secure remote access: SMA 500v allows users to securely access corporate networks and resources from anywhere with an internet connection. It supports a variety of authentication methods, including two-factor authentication, to ensure that only authorized users can access the network.
  • Policy-based access control: SMA 500v allows administrators to create and enforce policies that control who can access the network and what resources they can access. This helps to protect sensitive data and applications from unauthorized access.

SonicWALL SMA 500v is a virtual appliance that provides secure remote access to corporate networks and resources for employees and partners. It offers a range of capabilities, including:

  • Secure remote access: SMA 500v allows users to securely access corporate networks and resources from anywhere with an internet connection. It supports a variety of authentication methods, including two-factor authentication, to ensure that only authorized users can access the network.
  • Policy-based access control: SMA 500v allows administrators to create and enforce policies that control who can access the network and what resources they can access. This helps to protect sensitive data and applications from unauthorized access.
SonicWall™SecureMobileAccess
SMA500vVirtualAppliance8.6
GettingStartedGuide
Copyright©2017SonicWallInc.Allrightsreserved.
SonicWallisatrademarkorregisteredtrademarkofSon icWallInc.a nd/oritsaffiliatesintheU.S.A.and/o rothercountries.Allother
trademarksandregisteredtrademarksareprope rt yoftheirrespectiveow ners
TheinformationinthisdocumentisprovidedinconnectionwithSonicWallInc.and/oritsaffili ates’products.Nolicense,expressor
implied,
byestoppelorotherwise,toanyintellectualpropert yrightisgrantedbythisdocumentorinconnectionwiththesaleofSonicWallproducts.
EXCEPTASSE TFORTHINTHETERMSANDCONDITIONSASSPECIFIEDINTHELICENSEAGREEMENTFORTHISPRODUCT,SONICWALL AND/OR
ITSAFFILIATESASSUMENOLIABILITYWHATSOEV ERAND
DISCLA IMSANYEXPRESS,IMPLIEDORSTATU TORYWARRANT YRELAT IN GTOITS
PRODUCTSINCLUDING,BUTNOTLIMITEDTO,THEIMPLIEDWARRANT YOFMERCHANTABILITY,FITNESSFORAPA RTI CUL ARPURPOSE,OR
NON‐INFRINGEMENT.INNOEVENTSHALLSONICWALLAND/ORITSAFFILIATESBELIABLEFORANYDIRECT,INDIREC T,CONSEQUENTIA L,
PUNITIVE,SPECIALORINCIDENTALDAMAGES(INCLUDING,
WITHOUTLIMITAT ION ,DAMAGESFORLOSSOFPROFITS,BUSINESS
INTERRUPTIONORLOSSOFINFORMATION)ARISINGOUTOFTHEUSEORINA B ILITYTOUSETHISDOCUMENT,EVENIFSONICWALLAND/OR
ITSAFFILIATESHAVEBEENADVISEDOFTHEPOSSIBILIT YOFSUCHDAMAGES.SonicWalland/oritsaffi liatesmakenorepresentationsor
warrantieswithrespectto
theaccuracyorcompletenessofthecontentsofthisdo cumentandreservestherighttomakechangesto
specificationsandprodu ctdescriptionsatanytimewithoutnotice.SonicWallInc.and/oritsaffil i atesdonotmakeanycommitmentto
updatetheinformationcontainedinthisdocument.
Formoreinformation,visithttps://www.sonicwall.com/legal/.
SMA
500vGettingStartedGuide
Updated‐April2017
SoftwareVersion‐8.6
23200381900Rev.A
Legend
WARNING:AWARNINGiconindicatesapotentialforpropertydamage,personalinjury,ordeath.
CAUTION:ACAUTIONiconindicatespotentialdamagetohardwareorlossofdataifinstructionsarenotfollowed.
IMPORTANT,NOTE,TIP,MOBILE,orVIDEO:Aninformationiconindicatessupportinginformation.
Contents
SMA500vVirtualAppliance8.6
GettingStartedGuide
3
Overview............... . ................ ..........................................5
BeforeYouBegin ........................
............................................6
SupportedPlatforms .....
................................ .............................. 6
Requirements.............................. .......
............... .................. ... 6
FilesforInstallation ...........
................................................. ........ 7
CreatingaMySonicWallAccount ................... .....................
................. 7
InstallingtheSMA500vVirtualAppliance...........................
....................8
DownloadingtheSMA500v VirtualApplianceSoftware ......... ...............
.............. 8
InstallingtheSMA500v............... .................
............................... 10
ConfiguringtheSMA500vVirtualAppliance.............
.............. ................ .17
PoweringtheVirtualApplianceOnorOff .... .........
................................ ....17
ConfiguringinterfaceIPandroutesettingsontheconsole .....
.............................. 18
UsingtheCommandLineInter face...............
................................ .......19
SetupWizard.........
........................................................... 20
Reboot........... .................. ...........
..................................20
RestartSSLVPNServices ............
............... ................................ 21
Logout ..
................................................. .................. .....21
SaveTSRtoFlash.........................
................................ ........21
DisplayEULA........
................................ ............................. 21
ConfiguringSettingsontheApplianceWebInterface................................
....... 21
RegisteringYourAppliance ........................................
...................23
Usingthe30dayTrialVersion..........................
..............................24
DeploymentConsiderations ............. ......
............... .................. ........24
Registeringthe30dayTrialVirtualAppliance..
............... .................. .......... 25
UpgradingYourAppliance....
.......................................................27
ObtainingtheLatestImageVersion .................................. ........
............ 27
ExportingaCopyofYourConfigurationSettings... ............................
............ 27
UploadingaNewImage........................ ..........
............................. 28
SMA500vVirtualAppliance8.6GettingStartedGuide
Part1
4
Introduction
Overview
BeforeYouBegin
InstallingtheSMA500vVirtualAppliance
SMA500vVirtualAppliance8.6GettingStartedGuide
1
5
Overview
ThisGettingStartedGuidecontainsinstallationproceduresandconfigurationguidelinesfordeployingthe
SonicWallSMA500vVirtualApplianceonaserveronyournetwork.TheSMA500vincludesasoftware
appliance,whichhasbeenpreinstalledandpreconfiguredforVMwareenvironments,andallowsforthe
secureandeasydevelopmentof
SMA500vVirtualAppliancesolutionswithinavirtualenvironment.
TheSMA500vprovidesthefollowingbenefits:
ScalabilityandRedundancy
Multiplevirtualmachinescanbedeployedasasinglesystem,enab lingspecialization,scalability,and
redundancy.
OperationalEase
Userscanvirtualizetheirentireenvironmentanddeploymultiplemachineswithinasingle
serveror
acrossmultipleservers.
ProductVersatility
SMA500viscompatiblewithotherSonicWallplatformseitherasastandalone(AllinOne)unit,control
center,orremoteanalyzer.
Security
SMA500vprovidesanoptimized,nontamperablesoftwareandhardwarearchitecture.
FormoreSMA500vinformation,refertotheSonicWallSecure
MobileAccessAdministratorsGuide.Thisand
otherdocumentationareavailableat:
https://support.sonicwall.com/sonicwallsecuremobileaccess/sma%206200/technicaldocuments
SMA500vVirtualAppliance8.6GettingStartedGuide
2
6
BeforeYouBegin
Thissectioncontainsthefollowingtopics:
SupportedPlatformsonpage6
Requirementsonpage6
FilesforInstallationonpage7
CreatingaMySonicWallAccountonpage7
SupportedPlatforms
TheelementsofbasicVMwarestructuremustbeimplementedpriortodeployingtheSMA500v.Thefollowing
VMwareplatformsaresupported:
ESXi6.0
ESXi5.5
ESXi5.1
Youcanusethefollowingclientapplicationstoimporttheimageandconfigurethevirtualsettings:
•VMwarevSphere—Providesinfrastructureandapplicationservicesina
graphicaluserinterfaceforESXi,
includedwithESXi.ProvidesThickProvisioningwhendeployingaSMA500v.
Requirements
ThefollowingaretheminimumrequirementsfortheSMA500v:
•2GBRAM
ThisistheminimumamountofRAMneededbytheSMA500voperatingsystemtomeettheproduct
performanceandcapacityspecifications.AsmalleramountofRAMcanbeconfigured,butisnot
recommended.
•1CPU
Thisisthedefault
numberofCPUsprovisionedintheSMA500v.TheminimumrequirednumberofCPUs
is1.
•2GBHardDiskspace
•Internetaccess(forcommunicationbetweentheandtheSonicWallLicensingManager)
SMA500vVirtualAppliance8.6GettingStartedGuide
7
FilesforInstallation
SMA500visavailablefordownloadfromhttp://www.MySonicWall.com.Forafreshinstall,theOpenVirtual
Appliance(OVA)filewithafilenamesimilartothefollowingformatisavailableforimportanddeploymentto
yourESXiserver:
sw_smavm_eng_8.6.0.0_tip_5sv_966392.ova
CreatingaMySonicWallAccount
AMySonicWallaccountisrequiredforproductregistration.Ifyoualreadyhaveanaccount,loginandcontinue
totheRegistrationsection.
TocreateaMySonicWallaccount:
1Inyourbrowser,navigatetohttp://w ww.MySonicWall.com.
2Intheloginscreen,clicktheRegisterNowlink.
3Completetheregistrationform,thenclickRegister.
4Verifythattheinformationiscorrect,thenclickSubmit.
5Inthescreenconfirmingthatyouraccountwascreated,clickContinue.
NOTE:Youwillusedifferentfilesforafreshinstallationthanwhenupdatingtoanewerversion
NOTE:MySonicWallregistrationinformationisnotsoldorsharedwithanyothercompany.
SMA500vVirtualAppliance8.6GettingStartedGuide
3
8
InstallingtheSMA500vVirtualAppliance
TheSMA500vVirtualApplianceisinstalledbydeployinganOVAfiletoyourESXiserver.EachOVAfilecontains
allsoftwarecomponentsrelatedtotheSMA500v.
YoucandeploytheOVAfilesasneededforyourSMA500venvironment.TheSMA500vcanbeconfiguredfora
singleserver
orinadistributedenvironmentonmultipleservers.
Thissectioncontainsthefollowingtopics:
DownloadingtheSMA500v VirtualApplianceSoftwareonpage8
InstallingtheSMA500vonpage10
DownloadingtheSMA500vVirtualAppliance
Software
ThissectiondetailstheprocessfordownloadingtheSMA500vsoftwarefromMySonicWall.Ifyoudonothavea
MySonicWallaccount,youcaneasilycreateone.Ref ertoCreatingaMySonicWallAccountonpage7formore
information.
Tocompletethedownloadprocess:
1Navigatetowww.MySonicWall.com.
SMA500vVirtualAppliance8.6GettingStartedGuide
9
2EnteryourUsername/EmailandPasswordintherequiredfields,thenclickLogin.TheMySonicWallpage
displaysthefollowingscreen:
3 ClicktheDownloadsbuttonintheleftpanemenu.TheDownloadCenterpageisdisplayed.
4 ClicktheLanguagedropdownlist,andselectyourpreferredlanguage.
5 ClicktheSoftwareTypedropdown
list,andselectSMA500vVirtualApplianceBaseFirmware.
6IntheAvailableSoftwarelist,clickSMA500vVirtualApplianceBaseFirmware.
7SavetheSMA500vVirtualApplianceimagetoyourcomputer.
SMA500vVirtualAppliance8.6GettingStartedGuide
10
InstallingtheSMA500v
YoucandeployanOVAfilebyusingthevSphereclient,whichcomeswithESXi.ForvSphere,pointyourbrowser
toyourESXiserver,andclickDownloadvSphereClient.
ToperformafreshinstalloftheSMA500vusingthevSphereclient:
1DownloadtheOVAfile(similartothefilenameformat:
sw_smavm_eng_8.6.0.0_tip_5sv_966392.ova)fromMySonicWalltoasystemthatisaccessibleto
yourESXiserver.
SMA500vVirtualAppliance8.6GettingStartedGuide
11
2 LaunchvSphereanduseittologontoyourESXiserver.
3FromtheHomescreen,clicktheInventoryicontodisplaythevirtualappliancesrunningonyourESXi
server.
SMA500vVirtualAppliance8.6GettingStartedGuide
12
4Tobeginthe importprocess,clickFileandselectDeployOVFTemplate.
5IntheSourcescreenoftheDeployOVFTemplatewindow, underDeployfromafileorURLclickBrowse
andthenselecttheOVAfiletoimportortypetheURLoftheOVAfile.ClickNext.
6Inthe
OVFTemplateDetailsscreen,verifytheinformationabouttheselectedfile.Tomakeachange,
clicktheSourcelinktoreturntotheSourcescreen,andselectadifferentfi le.Tocontinue,clickNext.
7IntheEndUserLicenseAgreementscreen,readthe agreement,andclickAccept.Then,click
Next.
8IntheNameandLocationscreen,enteradescriptivenameforthevirtualapplianceintheNamefield.
9 SelectthedesiredlocationintheInventoryLocationfield.ClickNext.
10 IfusingESXi4,intheDiskFormatscreen,selecteitherThinprovisionedformatorThickprovisioned
format.Thickprovisioned
formatallocatesthemaximumstoragespaceondi skimmediately,whileThin
provisionedallocatesasmallamountimmediatelyandallocatesextrastorageasneeded,uptothe
maximum.
IfusingESXi5,intheDiskFormatscreen,select:
•ThickProvisionLazyZeroed‐ThickprovisionedLazyZeroedformatallocatesthemaximumstorage
spaceon
diskimmediately, buttheblocksaren’tactivelyzeroedout.
•ThickProvisionEagerZeroed‐ThickprovisionedEagerZeroedformatallocatesthemaximumstorage
spaceondiskimmediatelyandallallocatedblocksareimmediatelyzeroedout.Eagerzeroingisslightly
fasterthanLazyzeroingbecauseitdoesn’thavetoperiodicallyzerooutblocks
whenmorestor ageis
needed.
SMA500vVirtualAppliance8.6GettingStartedGuide
13
•ThinProvision‐Thinprovisionedformatallocatesasmallamountimmediatelyandallocatesextra
storageasneeded,uptothemaximum.
SMA500vVirtualAppliance8.6GettingStartedGuide
14
11 IntheNetworkMappingscreen,mapthenetworksusedintheOVFtemplatetonetworksinyour
inventory.
SMA500vVirtualAppliance8.6GettingStartedGuide
15
12 IntheReadytoCompletesection,reviewandverifythedisplayedinformation.Tobeginthedeployment
withthesesettings,clickFinish.Otherwise,clickBacktonavigatebackthroughthescreenstomakea
change.
13 Whenthedeploymentiscompleted,clickFinishintheDeploymentCompletedSuccessfullydialogbox.
Thenameof
thenewSMA500vappearsintheleftpaneofthevSpherewindow.
SMA500vVirtualAppliance8.6GettingStartedGuide
Part2
16
UsingtheSMA500vVirtualAppliance
ConfiguringtheSMA500vVirtualAppliance
RegisteringYourAppliance
Usingthe30dayTrialVersion
UpgradingYourAppliance
SMA500vVirtualAppliance8.6GettingStartedGuide
4
17
ConfiguringtheSMA500vVirtual
Appliance
ThissectiondescribeshowtopoweronandconfigurebasicsettingsontheSMA500vVirtualAppliance,
includingvi rtualhardwaresettingsandnetworkingsettings.
Thissectioncontainsthefollowingtopics:
PoweringtheVirtualApplianceOnorOffonpage17
ConfiguringinterfaceIPandroutesettingsontheconsoleonpage
18
UsingtheCommandLineInter faceonpage19
ConfiguringSettingsontheApplianceWebInterfaceonpage21
PoweringtheVirtualApplianceOnorOff
Therearemultip lewaystopowertheSMA500vonoroff:
RightclicktheSMA500vintheleftpaneandnavigatetoPower>PowerOnorPower>PowerOffinthe
rightclickmenu.
SelecttheSonicWallSMA500vVirtualApplianc eintheleftpaneand
thenclickPoweronthevirtual
machineorShutdownthevirtualmachineontheGettingStartedtabintherightpane.
SelecttheSonicWallSMA500vVirtualApplianceintheleftpaneandthenclickPowerOnorShutdown
guestontheSummarytabintherightpane.
SMA500vVirtualAppliance8.6GettingStartedGuide
18
ConfiguringinterfaceIPandroutesettingson
theconsole
ToopentheconsoleandconfiguretheIPaddressanddefaultroutesettings:
1InvSphere,rightclicktheSonicWallSMA500vVirtualApplianceintheleftpaneand selectOpen
Consoleintherightclickmenu.
2Whentheconsolewindowopens,clickinsidethewindow,typeadminattheLoginpromptandpress
Enter.Then,typepasswordatthePasswordpromptandpressEnter.
TheSNWLCLI>promptisdisplayed.
3ConfigurethelocalIPaddressforthevirtualappliancewiththecommand:
interface eth0 <IP Address> <SubnetMask>
4ConfiguretheDNSwiththecommand:
dns --namesrver <DNS IP>
NOTE:Themousepointerdisappearswhenyouclickintheconsolewindow.Toreleaseit,press
Ctrl+Alt.
SMA500vVirtualAppliance8.6GettingStartedGuide
19
5Configurethedefaultrouteforthevirtualappliancewiththecommand:
route --add default -- destination <gateway IP>
Youcantestconnectivitybypinginganotherserveroryourmaingateway,forexample:
ping <gateway IP>
PressCtrl+ctostoppinging.
6Typeexittoexitthe CLI.ClosetheconsolewindowbyclickingtheX.
UsingtheCommandLineInterface
TheCommandLineInterface(CLI)isatextonlymechanismforinteractingwithacomputeroperatingsystemor
softwarebytypingcommandstoperformspecifictasks.ItisacriticalpartofthedeploymentoftheSMA500v
VirtualAppliance,wherebasicnetworkingneedstobeconfiguredfromtheconsole.
While
thephysicalSMA500vVirtualAppliancehasadefaultIPaddressandnetworkconfigurationthatrequires
aclientsnetworksettingstobereconfiguredtoconnect,asthenetworksettingsintheVMwarevirtual
environmentmightconflictwiththeSonicWalldefaults.TheCLIutilityremediesthisbyallowingbasic
configurationof
thenetworksettingswhendeployingtheSMA500vVirtualAppliance.
AftertheSMA500vVirtualAppliancefirmwarehasfullybooted,aloginpromptisdisplayed.
ToaccesstheCLI,loginasadmin.Thepasswordisthesameasthepasswordforthe“adminaccountconfigured
ontheappliance.Thedefaultis
password.
Ifanincorrectpasswordisentered,theloginpromptisdisplayedagain.Ifthecorrectpasswordisentered,the
CLIislaunched.
Basicsysteminformationandnetworksettingsaredisplayedalongwiththemainmenu.
Themainmenuhassixselections:
SetupWizardonpage20
Rebootonpage20
RestartSSLVPNServicesonpage21
Logoutonpage21
SaveTSRtoFlashonpage21
DisplayEULAonpage21
NOTE:RefertoUsingtheCommandLineInterfaceonpage19formoreinformationaboutchangingthe
settings.
NOTE:TheUserinputusedintheexampleshighlightedinredindicatestextenteredbytheuser,thereis
nocoloringoftextdoneontheactualCLI.
SMA500vVirtualAppliance8.6GettingStartedGuide
20
SetupWizard
Thisoptionlaunchesasimplewizardtochangethebasicnetworksettings,startingwiththeX0IPAddress,X0
subnetmask,defaultgateway ,primaryandsecondaryDNS,andthehostname.ThefollowingCLIoutput
illustratesanexamplewhereeachfieldischanged:
Ifafieldisnotfilledout,theprior
valueisretained,allowingyoutochangeonlyasinglefield.Aftereachfield
hasbeenprompted,thenewnetworksettingsareshownandaconfirmationmessageisgivenfortheuserto
reviewandverifythechangesbeforeapplyingthem.Thefollowingshowstheresultwhenyousavethechanges:
Aftersavingthechanges,pressEntertoreturntotheoriginaldisplayoftheSystemInformationandNetwork
Settings.Verifythatthechangeshavetakeneffect
Ifnochangesaresaved,amessagedisplays.PressingEnterreturnstotheinitialdisplayoftheSystem
InformationandNetworksettings.
Reboot
Selectingthisoptiondisplaysaconfirmationprompt,andthenreboots:
NOTE:WhenapplyingsettingsthatchangetheIPaddress,theremightbeadelayofuptofivesecondsas
theinterfacesettingsareupdated.
  • Page 1 1
  • Page 2 2
  • Page 3 3
  • Page 4 4
  • Page 5 5
  • Page 6 6
  • Page 7 7
  • Page 8 8
  • Page 9 9
  • Page 10 10
  • Page 11 11
  • Page 12 12
  • Page 13 13
  • Page 14 14
  • Page 15 15
  • Page 16 16
  • Page 17 17
  • Page 18 18
  • Page 19 19
  • Page 20 20
  • Page 21 21
  • Page 22 22
  • Page 23 23
  • Page 24 24
  • Page 25 25
  • Page 26 26
  • Page 27 27
  • Page 28 28
  • Page 29 29

SonicWALL SMA 500v Quick start guide

Type
Quick start guide

SonicWALL SMA 500v is a virtual appliance that provides secure remote access to corporate networks and resources for employees and partners. It offers a range of capabilities, including:

  • Secure remote access: SMA 500v allows users to securely access corporate networks and resources from anywhere with an internet connection. It supports a variety of authentication methods, including two-factor authentication, to ensure that only authorized users can access the network.
  • Policy-based access control: SMA 500v allows administrators to create and enforce policies that control who can access the network and what resources they can access. This helps to protect sensitive data and applications from unauthorized access.

Ask a question and I''ll find the answer in the document

Finding information in a document is now easier with AI