SonicWALL 2100 CF Manuel utilisateur

COMPREHENSIVE INTERNET SECURITY™

SSSonicWALL Content Security Manager 2100 CF

Getting Started Guide

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 1

SonicWALL Content Security Manager 2100 CF

Getting Started Guide

Thank you for purchasing the SonicWALL Content Security Manager 2100 Content Filter

(hereafter referred to as the Content Security Manager). The Content Security Manager is an

Internet content and application filtering solution that enhances security and employee

productivity, optimizes network bandwidth and mitigates legal liabilities.

The Content Security Manager integrates into virtually any network topography to provide

powerful, scalable, cost-effective Internet content filtering. It is easy to implement, requiring no

change to your network clients. The Content Security Manager filters all HTTP traffic on any port,

regardless of whether the network clients use external proxy servers.

This Getting Started Guide provides basic installation and configuration instructions for the

Content Security Manager. After you complete the configuration steps in this guide, you may need

to further configure your Content Security Manager to fit the complexities of your network.

Note: For complete configuration instructions, refer to the SonicWALL Content Security Manager

2100 CF Administrator’s Guide available on the SonicWALL Content Security Manager Resource

CD and on the SonicWALL Documentation Web site at:

<http://www.sonicwall.com/services/documentation.html>

Before You Begin

Check Package Contents

• One SonicWALL Content Security Manager

2100 CF

• One SonicWALL Content Security Manager

2100 CF Getting Started Guide

• One SonicOS CF 1.0 Release Notes

• One SonicWALL Regulatory Statement

• Two straight-through Ethernet cables

• One red crossover Ethernet cable

• One power cord*

• One SonicWALL Content Security Manager Resource CD, which contains:

•The Content Security Manager 2100 CF Administrator’s Guide

•TheContent Security Manager 2100 CF Getting Started Guide

•TheSonicWALL ViewPoint User’s Guide

•TheSonicOS Log Events Reference Guide

*A power cord is included only with units shipped to North America.

Note: SonicWALL ADConnector and SonicWALL ViewPoint software for the SonicWALL

Content Security Manager are available for download from <https://www.mysonicwall.com>.

Any Items Missing?

If any items are missing from your package,

contact:

SonicWALL Support

Web: <http://www.sonicwall.com/support/>

E-mail: [email protected]

Page 2

What You Need to Provide

• A firewall or security appliance protecting your LAN

• PC or Macintosh computer to act as an offline management station for initial configuration of

the Content Security Manager

• Web browser for accessing the Content Security Manager’s Web-based management

interface. The Web browser must support Java and HTTP uploads. Internet Explorer 5.0 or

higher or Netscape Navigator 4.7 or higher are recommended.

Important Information You Need

LAN

LAN IP address range:

LAN netmask:

DNS server:

Firewall or Security Appliance

Firewall or router gateway IP address:

Firewall or security appliance management IP address:

mySonicWALL.com Account

This is sensitive information. Store this information carefully.

Username:

Password:

Content Security Manager Management Account

This is sensitive information. Store this information carefully.

Username: (default: admin)

Password: (default: password)

Content Security Manager Configuration Steps

Getting started with your Content Security Manager comprises the following steps:

“Applying Power to the Content Security Manager” on page 3

“Accessing the SonicWALL Management Interface” on page 3

“Configuring the Network Interfaces” on page 5

“Configuring the Time Zone” on page 6

“Setting the Administrator Name and Password” on page 6

“Connecting the Content Security Manager to Your Network” on page 7

“Registering Your Content Security Manager” on page 9

“Modifying the *Default Policy Group” on page 11

“Applying Application Filters” on page 13

“Integrating the Content Security Manager with Microsoft Active Directory” on page 14

Note: After step 6, the Content Security Manager is fully functional, using the built-in default policy

group to filter content for all users, blocking Adult Content, Drugs/Alcohol/Tobacco, and Racism/

Hate/Violence/Weapons. Follow steps 7, 8, and 9 to further customize your installation.

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 3

Applying Power to the Content Security Manager

1. Plug the power cord into the Content Security Manager and into an appropriate power outlet.

2. Turn on the Content Security Manager appliance using the On/Off switch located on the back

of the appliance.

The Power LED shines green when you activate the power switch. The Test LED lights up and

may blink while the appliance performs a series of diagnostic tests. When the Test light is no

longer lit, the Content Security Manager is ready for configuration.

Accessing the SonicWALL Management Interface

To access the Web-based management interface of the Content Security Manager:

1. Configure the computer you are using to manage the Content Security Manager (the offline

management station) with the following TCP/IP address properties:

• Address Type: Static

• IP Address: 192.168.168.20

• Subnet Mask: 255.255.255.0

Note: You do not need to configure the default gateway or DNS settings.

2. Connect one end of the red crossover Ethernet cable to the Ethernet port

of the offline management station. Connect the other end of the red

crossover cable to the X2 port on the Content Security Manager.

Note: The X2 port is for offline management only, and has no network

connection.

3. Start your Web browser.

Alert: Your Web browser must support Java and HTTP uploads. Internet Explorer 5.0 or

higher or Netscape Navigator 4.0 or higher are recommended.

Page 4

4. Enter http://192.168.168.168 in the Location or Address field and press Enter.

Unable to Connect?

If you cannot connect to the Content Security Manager, verify the following configurations:

• Did you correctly enter the Content Security Manager X2 management IP address,

http://192.168.168.168, in your Web browser?

• Did you change the TCP/IP network settings on your computer?

• Do you have the Ethernet cable connected to your computer and to the X2 (offline

management) port on your Content Security Manager?

• Did you use a crossover cable to connect your offline management station to the

Content Security Manager?

5. In the Content Security Manager authentication page, enter admin in the Name field and

password in the Password field and click Login. The System > Status page is displayed.

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 5

Configuring the Network Interfaces

Configure the Content Security Manager’s X0 Internal and X1 External interfaces to use an IP

address in the same range as your LAN. When you configure the X1 External interface, the

X0 Internal interface is automatically configured.

Alert: You must configure the network interfaces before connecting the Content Security Manager

to your network. If you have already connected cables to the X0 and X1 interfaces, disconnect

them before continuing this step.

Set the X2 Management interface to an use IP Address that does not conflict with any device on

your LAN:

Configuring the X0 Internal and X1 External Interfaces

1. In the left-navigation menu, click Network and then click Interfaces.

2. From the Network > Interfaces page, select the edit icon for the X1 External interface,

and enter the following IP addressing information in the Edit Interface window:

•IP Address - a static IP address in the correct range for your LAN. Make sure this address

will not be assigned to any other device

•Subnet Mask - the network subnet for your LAN

•Default Gateway - the default gateway of your network

•DNS Server - the DNS server address for your network

3. By default, HTTP, HTTPS and Ping management options are enabled on X0, X1, and X2

interfaces. You may login to the management interface and configure appliance from your LAN

or WAN by using the IP address of X0/X1 interfaces.

4. Click OK.

Configuring the Offline Management Interface

If a device on your network uses 192.168.168.168 (such as the LAN IP address of your firewall or

Internet gateway), you must change the default IP address of the offline management interface on

your Content Security Manager:

1. From the Network > Interfaces page, select the edit icon for the X2 Management

interface, and configure the IP address, network mask, default gateway and DNS servers in

the Edit Interface window.

2. Write the new offline management IP address and store it: ____________________________

3. Click OK.

Note: The X2 port is used for management only and does not have any access to the network or

the Internet. The Content Security Manager online help is not available from this port when you

click on the help button on any management interface page.

Page 6

Configuring the Time Zone

Before you register your Content Security Manager or use the content filtering database and

dynamic rating feature, you must set the time zone on the content security appliance to the correct

time zone for your location:

1. In the left-navigation menu, click System, and then click Time.

2. In the Time Zone list, select the correct time zone for your location.

3. Set the time correctly, or check the box for Set time automatically using NTP.

4. Check the box next to Automatically adjust clock for daylight saving time.

5. Click Apply in the top-right corner of the System > Time page.

Setting the Administrator Name and Password

For security reasons, you should set the administrative user name and password:

1. In the management interface, in the left-navigation menu, click System and then click

Administration.

2. In the System > Administration page, enter a new user name in the Administrator Name field.

The default name is admin.

3. Enter password in the Old Password field.

4. Enter a new administrative password in New Password field and enter it again in the Confirm

Password field.

5. Click Apply in the top-right corner of the page for your changes to take effect.

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 7

Connecting the Content Security Manager to Your Network

Connect the Content Security Manager between your LAN and your firewall/security appliance,

allowing it to filter content requests from the LAN before they pass through the firewall/security

appliance to the Internet.

Alert: Do not connect the Content Security Manager to your network until you have configured the

X0 and X1 interfaces. See Step 3, “Configuring the Network Interfaces” on page 5.

Connecting the Ethernet Cables

1. Connect one end of the Ethernet cable connected to your internal network (your LAN hub,

switch, or router) to the X0 (Internal) port of the Content Security Manager.

The LEDs on the X0 port light up indicating an active connection.

2. Connect one end of an Ethernet cable connected to your firewall or internet connection to the

X1 (External) port of the Content Security Manager.

The LEDs on the X1 port light up indicating an active connection.

Test Your Connectivity

1. Log into the Content Security Manager management interface.

2. In the left-navigation menu, click System and then click Diagnostics.

3. In the System > Diagnostics page, Select Ping from the Diagnostic Tool list.

4. In the Ping host or IP address field, enter your firewall or router gateway IP address and click

Go. Note the result.

5. Enter an address outside your firewall, such as www.sonicwall.com and click Go. Note the

result.

Internal

External

Offline

Management

Firewall

Internet

Offline

Management

Station

LAN

Page 8

6. Enter the IP address of your DNS server and click Go. Note the result.

7. If any of the addresses you tried to ping did not respond or responded with a slow Ping time

(greater than 50 milliseconds), you may need to create static routes from your

Content Security Manager to the firewall or router gateway and to your DNS server.

Add Static Routes

If you cannot connect to the firewall or router gateway or to URLs outside your firewall, and your

network consists of multiple subnets, you may need to add static routes to your company routers,

internal DNS servers, and your ADConnector.

To add static routes in the Content Security Manager management interface, perform the following

steps:

1. In the Content Security Manager management interface, in the left-navigation menu, click

Network and then click Interfaces.

2. In the Network > Interfaces page, click Add below the Routing Table.

3. Click Add in the Routing Table section. The Add Route window is displayed.

4. Enter the beginning IP address of the IP address range to which the DNS server or Internet

gateway belongs in the IP Address From field.

5. Enter the ending IP address of the IP address in the IP Address To field.

6. Enter the IP address of the gateway device to which the DNS server or Internet gateway are

attached in the Gateway IP field.

7. Select Internal (X0) or External (X1) from the Interface menu.

8. Click OK. The static route entry is added to the Routing Table.

The Routing Table displays the list of destinations that the IP software maintains on each host

and router.

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 9

Registering Your Content Security Manager

Once you have established an Internet connection for your Content Security Manager, you must

• Allowed Nodes/Users license

• SonicWALL Content Filtering Service subscription

• Dynamic Rating Update Service

• Application Filter Service subscription

Registering your Content Security Manager also allows you to:

• Download related software:

• SonicWALL ADConnector

• SonicWALL ViewPoint

• Receive firmware updates

• Access to SonicWALL technical support

• Get subscription renewals

• Upgrade node/user licenses

Before You Register

You need a mySonicWALL.com account to register your Content Security Manager. You can

create a new mySonicWALL.com account directly from the SonicWALL management interface.

Alert: Verify that the DNS and Time settings on your Content Security Manager are correct when

you register the device. Configure Time settings in the System > Time page. Configure DNS

settings in the Edit Interface window from the Network > Interfaces page.

Note: mySonicWALL.com registration information is not sold or shared with any other company.

Creating a mySonicWALL.com Account

Creating a mySonicWALL.com account is fast, simple, and FREE. Simply complete an online

registration form in the Content Security Manager management interface.

If you already have a mysonicWALL.com account, go to “Registering Your

Content Security Manager Using the Management Interface” on page 10 to register your

appliance.

1. If you are not logged into the Content Security Manager management interface log in with the

Content Security Manager administrative user name and password.

2. If the System > Status page is not displaying in the management interface, click System in

the left-navigation menu, and then click Status.

Table des matières

Autres manuels SonicWALL Pare-feu

SonicWALL

SonicWALL TZ 180 Manuel utilisateur

SonicWALL

SonicWALL PRO 2040 Manuel utilisateur

SonicWALL

SonicWALL SMA 210 Guide de référence rapide

SonicWALL

SonicWALL TZ270 Manuel utilisateur

SonicWALL

SonicWALL NSa 5700 Manuel utilisateur

SonicWALL

SonicWALL Email Security 800 Manuel utilisateur

SonicWALL

SonicWALL Secure Mobile Access 6210 Manuel utilisateur

SonicWALL

SonicWALL SMA Series Manuel du propriétaire

SonicWALL

SonicWALL NSA 250M series Manuel utilisateur

SonicWALL

SonicWALL Internet Security Manuel utilisateur

SonicWALL

SonicWALL TZ 100 / 200 Manuel utilisateur

SonicWALL

SonicWALL Email Security 6000 Manuel utilisateur

SonicWALL

SonicWALL NSA 250M series Manuel utilisateur

SonicWALL

SonicWALL CSa 1000 Manuel d'utilisation et d'entretien

SonicWALL

SonicWALL TZ 150 Wireless Manuel utilisateur

SonicWALL

SonicWALL SuperMassive 9200 Manuel utilisateur

SonicWALL

SonicWALL Email Security 200 Manuel utilisateur

SonicWALL

SonicWALL TZ 190 Manuel utilisateur

SonicWALL

SonicWALL TZ 100 Series Manuel utilisateur

SonicWALL

SonicWALL SuperMassive 9800 AC Manuel utilisateur

SonicWALL

SonicWALL SMA Manuel technique

SonicWALL

SonicWALL TZ600 Manuel utilisateur

SonicWALL

SonicWALL SonicOS Enhanced 2.2 Manuel de service

SonicWALL

SonicWALL ESA 5000 Manuel utilisateur

Manuels Pare-feu populaires d'autres marques

Cisco

Cisco S190 Manuel utilisateur

Fortinet

Fortinet FortiGate Voice Series Manuel utilisateur

ADTRAN

ADTRAN NetVanta 2300 Manuel utilisateur

SecureLogix

SecureLogix ETM System Manuel utilisateur

NETGEAR

NETGEAR ProSafe FVX538 Manuel utilisateur

Lanner

Lanner FW-8877 Manuel utilisateur

Huawei

Huawei USG6000 Series Manuel d'installation et d'exploitation

H3C

H3C SecPath F5000-AI-15 Manuel utilisateur

Nexcom

Nexcom DNA 1150 Manuel utilisateur

Fortinet

Fortinet FortiGate-60 series Manuel utilisateur

Cisco

Cisco 3110 Manuel

Draytek

Draytek Vigor2860 Series Manuel utilisateur

Lanner electronics

Lanner electronics FW-7650 Series Manuel utilisateur

Swisscom

Swisscom Internet Backup Manuel utilisateur

DPtech

DPtech FW1000 SERIES Manuel utilisateur

FEITIAN

FEITIAN MultiPass FIDO Manuel utilisateur

EBLOCKER

EBLOCKER PRO Manuel utilisateur

GTA

GTA GB-200 Manuel utilisateur