SonicWALL UMA EM5000 Manual de usuario

PROTECTION AT THE SPEED OF BUSINESS™

UMA EM5000 Getting Started Guide

SonicWALL UMA EM5000Getting Started Guide Page i

SonicWALL UMA EM5000

Getting Started Guide

This Getting Started Guide contains installation

procedures and configuration guidelines for deploying the

SonicWALL Universal Management Appliance EM5000

(SonicWALL UMA EM5000) in your network. The

SonicWALL UMA EM5000 runs SonicWALL Global

Management System, which is a Web-based application

that can configure, manage, and monitor the status of

thousands of SonicWALL Internet security appliances

and non-SonicWALL appliances from a central location.

The SonicWALL UMA EM5000 provides these benefits:

• Centralized security and network management

• Sophisticated VPN deployment and configuration

• Active device monitoring and alerts

• Intelligent reporting and activity visualization

• Centralized logging and offline management

Note: For complete documentation, refer to the SonicWALL

GMS Administrator’s Guide. This and other documentation

are available at: http://www.sonicwall.com/us/Support.html. For

the latest SonicWALL UMA EM5000 firmware version

downloads and documentation, login to the MySonicWALL

website at http://www.mysonicwall.com.

Page ii Document Contents

Document Contents

This document contains the following sections:

Before You Begin - page 1

Connecting and Initializing the UMA EM5000 - page 9

Registering Your Appliance - page 19

Configuring the Role of Your Appliance - page 23

Using the SonicWALL GMS Management Interface - page 41

Managing SonicWALL Appliances - page 49

Reporting - page 57

Monitoring - page 63

Front Panel LCD Controls - page 73

Support and Training Options - page 77

Product Safety and Regulatory Information - page 85

Page 1

Before You Begin

In this Section:

This section provides pre-configuration information before setting up your SonicWALL UMA EM5000.

•Checking Package Contents - page 2

•Overview of the SonicWALL UMA EM5000 - page 3

•System Requirements - page 5

•Recording Configuration Information - page 8

Page 2 Checking Package Contents

Checking Package Contents

Before setting up your SonicWALL UMA EM5000, verify that

your package contains the following parts:

SonicWALL UMA EM5000

Getting Started Guide

Crossover Cable

Ethernet Cable

Standard Power Cord*

Front Bezel Keys

Rack Mounting Kit (not pictured)

Any Items Missing?

If any items are missing from your package,

please contact SonicWALL support.

A listing of the most current support documents are available online

at: http://www.sonicwall.com/us/Support.html

*The included power cord is intended for use in North America only.

For European Union (EU) customers, a power cord is not included.

Getting Started Guide

SonicWALL Network Security Appliances

3 4

Universal Management Appliance

UMA EM5000

Page 3 Overview of the SonicWALL UMA EM5000

Overview of the SonicWALL UMA EM5000

Front Panel

• Pressing the reset button for several seconds will result in a reboot of the SonicWALL UMA EM5000.

• Do not plug devices into any ports (other than those indicated) unless explicitly instructed to do so by a SonicWALL technical

support representative; doing so may void your warranty.

Universal Management Appliance

UMA EM5000

LED Indicators

Reset Button

Reboots the SonicWALL appliance

Power Switch

Allows the SonicWALL appliance to be

powered on or off

D-Pad Controls

Provides up, left, right, and down buttons to

navigate the LCD menu:

Up/Down: Navigate lists

Left: Cancel changes / return to previous

Right: Accept changes

Provides the following system status indications:

ALARM: Thermal or other alert condition*

ETH0/ETH1: Ethernet link (solid), activity (blinking)

HDD: Hard disk activity (blinking)

PWR: The appliance is powered (off/on)

*For a full list of alerts, refer to the SonicWALL LED Alerts technote document.

LCD Display

Provides access to basic system

information, settings, and features using

the D-Pad controls

Front Bezel Release

Allows access to drive bays under the

front bezel for addition/replacement of

hard disks (requires use of included key)

Page 4 Overview of the SonicWALL UMA EM5000

Rear Panel

For future use

USB Ports (2)

Power Supply

Provides power connection

using the supplied power

cables

Ethernet Port 0 (Management/LAN)

Provides conﬁgurable Gigabit-capable

Ethernet connection to your local network

Provides access to a command line interface

(CLI) for SonicWALL technical support use

Serial Port

Not authorized for use unless explicitly instructed

by a SonicWALL technical support representative

VGA Port

For future use

eSATA Port (1)

Ethernet Port 1

Not authorized for use

SonicWALL UMA EM5000 Getting Started Guide Page 5

System Requirements

The SonicWALL UMA EM5000 comes with a default license to

manage 10 nodes. You can purchase additional licenses on

MySonicWALL. For more information on licensing additional

nodes, visit:

http://www.sonicwall.com/us/Products_Solutions.html

Database Requirements

The SonicWALL UMA EM5000 comes installed with a built-in

MySQL 5.0 database and supports the following databases on

external systems:

• On external SonicWALL UMA EM5000 appliances:

• MySQL 5.0

• On Windows Server 2008, Windows Server 2003 (SP1),

or Windows Server 2000 (SP4):

• Microsoft SQL Server 2005 (SP2)

• Microsoft SQL Server 2000 (SP4)

• MySQL 5.0 as bundled with SonicWALL Universal

Management Suite

Java Requirements

Java Plug-in version 1.5 or higher is required on client

machines when accessing the SonicWALL UMA EM5000 or the

SonicWALL GMS application. SonicWALL Universal

Management Suite (UMS) automatically downloads the Java

Plug-in 1.5. SonicWALL UMS services use JRE 1.5.0_06. For

Microsoft SQL Server installations, SonicWALL UMS uses

Tomcat 5.5.26.

Browser Requirements

The following browser requirements apply to client machines

when accessing the SonicWALL UMA EM5000 or the

SonicWALL GMS application:

• Microsoft Internet Explorer 6.0 or higher

• Mozilla Firefox 2.0 or higher

• Pop-up blocker disabled

The SonicWALL UMA EM5000 supports SSL 3.0/TLS 1.0 for

HTTPS management of SonicWALL appliances, and for direct

For enhanced security across a managed network in

installations that must comply with stringent regulatory

compliance and account management controls as found in such

standards as PCI, SOX, or HIPAA, the following browsers have

SSL 3.0/TLS 1.0 as standard encryption protocols:

• Microsoft Internet Explorer 7.0 or higher

• Mozilla Firefox 2.0 or higher

You can set other browsers to use these protocols in the Tools

> Options page on the Advanced or Encryption tab.

Note: On Windows Server 2008, Internet Explorer 7 requires

that the URL for the SonicWALL UMA EM5000 is

added to your trusted sites before it will display the

appliance login page. The Trusted Sites list is

available in Tools > Internet Options > Security.

Page 6 System Requirements

SonicWALL Platform and Firmware Support Legacy or older-generation models are not supported, such as,

SonicWALL XPRS/XPRS2, SonicWALL SOHO2, SonicWALL

Tele2, and SonicWALL PRO-VX.

For the most recent platform support and firmware version

information, refer to the latest SonicWALL UMA EM5000

Getting Started Guide available at:

http://www.sonicwall.com/us/Support.html

Non-SonicWALL Appliance Support

The SonicWALL UMA EM5000 provides monitoring support for

non-SonicWALL TCP/IP and SNMP-enabled devices and

applications.

Network Requirements

To complete the SonicWALL UMA EM5000 deployment

process, the following network requirements must be met:

• Access to the Internet

• A static IP address

• Network connection must be able to accommodate

1 KB/s for each device under management. For example,

if the SonicWALL UMA EM5000 is monitoring 100

SonicWALL appliances, the connection must support at

least 100 KB/s.

Depending on the configuration of SonicWALL log settings and

the amount of traffic handled by each device, the network traffic

can vary dramatically. The 1KB/s for each device is a general

recommendation. Your installation requirements may vary.

SonicWALL

Platforms SonicWALL Firmware Version

Firewall / UTM / VPN

TZ Series

NSA Series

PRO Series

SonicOSEnhanced 3.2or newer

SonicOS Standard 3.1or newer

SonicWALL CSM

Series SonicOS CF 2.0 or newer

Secure Remote Access

SonicWALL SMB

SSL-VPN Series SonicOS SSL-VPN 2.0 or newer

SonicWALL Aventail

Series Aventail 9.0 or newer

Backup and Recovery

SonicWALL CDP

Series SonicWALL CDP 2.3 or newer

SonicWALL UMA EM5000 Getting Started Guide Page 7

GMS Gateway Recommendations

A GMS gateway is a SonicWALL UTM appliance that allows for

secure communication between the SonicWALL UMA EM5000

and managed appliance(s) using VPN tunnels. A GMS gateway

is not required in all deployment scenarios, as described in this

section.

When deployed, the GMS gateway must be a SonicWALL VPN-

based network security appliance running SonicOS Enhanced

firmware or another VPN device that is interoperable with

SonicWALL VPN. SonicWALL strongly recommends that the

GMS gateway be, at minimum, a SonicWALL NSA 2400

network security appliance with SonicOS Enhanced 5.1 or

higher firmware.The GMS gateway provides a VPN

management tunnel for each managed appliance. The number

of management tunnels depends on the number of VPNs

supported by the GMS gateway appliance and may be a limiting

factor.

There are three SonicWALL appliance management methods

with varying GMS gateway requirements. When using HTTPS

as the management method, it is optional to have a GMS

gateway between each SonicWALL UMA EM5000 agent server

and the managed SonicWALL appliance(s). If you select

Existing VPN tunnel as the management method, a gateway is

optional. If you select Management VPN tunnel, you must have

a GMS gateway between the SonicWALL UMA EM5000 agent

appliance and the managed SonicWALL appliance(s) to allow

each SonicWALL UMA EM5000 agent to securely communicate

with its managed appliance(s). The following list provides more

detail on SonicWALL appliance management methods and

gateway requirements:

•Management VPN tunnel – A GMS gateway is required.

Each SonicWALL UMA EM5000 agent must have a

dedicated gateway. The security association (SA) for this

type of VPN tunnel is created when the appliance is

configured for SonicWALL GMS management using the

Management Tunnel method.

• The SonicWALL UMA EM5000 automatically creates the

SA in the gateway. For this configuration, the gateway must

be a SonicWALL VPN-based appliance. The gateway can

be configured in NAT-Enabled or transparent mode.

•Existing VPN tunnel – A GMS gateway is optional. The

SonicWALL UMA EM5000 can use VPN tunnels that

already exist in the network to communicate with the

managed appliance(s). The GMS gateway can be a

SonicWALL VPN-based appliance or another VPN device

that is interoperable with SonicWALL VPN.

•HTTPS – A GMS gateway is optional. The SonicWALL

UMA EM5000 can use HTTPS management instead of a

VPN tunnel to communicate with the managed

appliance(s).

Note: A management VPN tunnel is only supported for

SonicWALL UTM appliances, but is not supported for

SonicWALL CDP or SonicWALL SSL-VPN appliances.

Tabla de contenidos

Otros manuales de Hardware de red de SonicWALL

SonicWALL

SonicWALL 1RK52-110 Manual del propietario

SonicWALL

SonicWALL SRA 1200 Manual de usuario

SonicWALL

SonicWALL TELE3 TZ Manual de usuario

SonicWALL

SonicWALL TELE3 SP Manual de usuario

SonicWALL

SonicWALL SSL-R Manual de usuario

SonicWALL

SonicWALL NSA 6600 Manual del propietario

SonicWALL

SonicWALL 1RK38-0C8 Manual del propietario

SonicWALL

SonicWALL Zero-Touch Guía de referencia rápida

SonicWALL

SonicWALL SonicOSX 7 Manual de usuario

SonicWALL

SonicWALL SonicPoint-N Dual-Band Manual de usuario

SonicWALL

SonicWALL TELE3 SP Manual de servicio

SonicWALL

SonicWALL ECLASS NSA E5500 Manual de usuario

SonicWALL

SonicWALL PRO 4100 Manual de usuario

SonicWALL

SonicWALL Content Security Manager 2200 Manual de usuario

SonicWALL

SonicWALL NSA 3600 Manual del propietario

SonicWALL

SonicWALL SonicPoint-Ne Manual de usuario

SonicWALL

SonicWALL NSA 5600 Manual del propietario

SonicWALL

SonicWALL NSa 4650 Manual de usuario

SonicWALL

SonicWALL Email Security 200 Manual de usuario

SonicWALL

SonicWALL NSa 4700 Manual del propietario

SonicWALL

SonicWALL NSa 3700 Manual de usuario

SonicWALL

SonicWALL ECLASS NSA E8500 Manual de usuario

SonicWALL

SonicWALL NSA 2400MX Manual de usuario

SonicWALL

SonicWALL TZ 205 Series Manual de usuario

Manuales populares de Hardware de red de otras marcas

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Manual de usuario

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Manual de usuario

Yudor

Yudor YDS-16 Manual de usuario

D-Link

D-Link ShareCenter DNS-320L Manual de usuario

Samsung

Samsung ES1642dc Instrucciones de uso

Honeywell Home

Honeywell Home LTEM-PV Instrucciones de montaje

evertz

evertz 7700 Series Manual de usuario

D-Link

D-Link ShareCenter DNS-343 Manual de usuario

Asante

Asante AsanteBridge 1012 Manual de usuario

FireBrick

FireBrick FB2700 Manual de usuario

Audiovox Electronics

Audiovox Electronics ARWH2T Manual de usuario

ADC

ADC DSX-1 Manual

NetComm

NetComm NF2 Manual de usuario

Alcatel-Lucent

Alcatel-Lucent 5620 Manual de usuario

Dell EMC

Dell EMC XC6420 Series Manual de usuario

Lanner

Lanner NCA-1020A Manual de usuario

Allied Telesis

Allied Telesis AT-TN121-A Manual de usuario

Arista

Arista CCA-ETM-Q12 Manual de usuario