DELL SONICWALL NSA 6600 User Manual

Dell SonicWALL Network Security Appliances  
NETWORK SECURITY  
NSA 6600  
Getting Started Guide  
For localized product information, see page 48.  
ޣ
ᵜൠॆӗ૱ؑ᚟ˈ䈧৲➗ㅜꢀꢁꢂꢀ亥DŽ  
䝻䞊䜹䝷䜲䝈䛥䜜䛯〇ရ䛾᝟ሗ䛻䛴䛔䛶䛿䚸㻠㻥㻌䝨䞊䝆䜢ཧ↷䛧䛶䛟䛰䛥䛔䚹  
Ь˲߭ꢀ
૽ꢀ
ؿࢽ
Еꢀꢁꢂꢀ૓
एձꢀॳˈଜ
ࡁۿ
ꢃ  
Para informação localizada do produto, veja página 50.  
In this Guide  
The Dell SonicWALL NSA 6600 is designed to be the most scalable, reliable, and best performing multifunction appliance in its class.  
This Getting Started Guide provides instructions for basic installation and configuration of the Dell SonicWALL NSA 6600.  
Chapter 1  
Sections Include  
Chapter 2  
Sections Include  
2
|
In this Guide  
4
|
In this Guide  
1
Introduction to the NSA 6600  
In this Section:  
This section describes the items shipped with the Dell SonicWALL NSA 6600 appliance, provides front and rear illustrations of the  
NSA 6600, and includes a flow diagram illustrating the steps for setting up the appliance.  
|
5
 
NSA 6600 Package Contents  
Before you begin the setup process, verify that your package contains the following items:  
1. One Dell SonicWALL NSA 6600 appliance  
2. One Rack Mounting Kit  
3. One serial CLI cable  
4. One Ethernet cable  
5. One power cord*  
6. One Dell SonicWALL NSA 6600 Getting Started Guide  
*The included power cord is approved for use only in specific countries or regions. Before using a power cord, verify that it is rated and approved for use in your location. The  
power cord is for AC mains installation only. See Safety and Regulatory Information for more information.  
1
10GE  
1GE  
1GE  
2
X14  
X15  
X12  
X13  
X10  
X11  
X8  
X9  
X6  
X7  
X4  
X5  
X2  
X3  
X0  
X1  
X18  
X19  
X16  
X17  
SDHC  
M0  
BYPASS  
STATUS  
ALARM  
TEST  
PWR  
SonicWALL NSA 6600  
CONSOLE  
MGMT  
6
Dell SonicWALL Network Security Appliance  
NSA 6600  
3
4
5
NETWORK SECURITY  
Getting Started Guide  
Missing Items? If any items are missing from your package, contact Dell SonicWALL Support:  
6
|
NSA 6600 Package Contents  
   
The Front Panel  
SDHC Port  
Secure Digital High-Capacity (SDHC) port  
for future use  
Bypass Status  
Turns on when  
fail-to-wire bypass  
mode is active  
Console Port  
Access the SonicOS Command Line Interface  
MGMT Port (1 GE)  
1 Gigabit Ethernet  
(CLI) via the enclosed serial CLI cable  
Management Interface  
10GE  
1GE  
1GE  
X14  
X15  
X12  
X13  
X10  
X11  
X8  
X9  
X6  
X7  
X4  
X5  
X2  
X3  
X0  
X1  
X18  
X19  
X16  
X17  
SDHC  
M0  
BYPASS  
STATUS  
ALARM  
TEST  
PWR  
SonicWALL NSA 6600  
CONSOLE  
MGMT  
USB Ports (2)  
For 3G/4G/Analog modem adaptor support  
X0-X7 (1 GE)  
Reset Button  
Press and hold for several seconds to set the  
appliance into Safe Mode.  
High-speed copper  
Gigabit Ethernet ports  
X8-X15 (1 GE SFP)  
1 Gigabit Ethernet hot-pluggable SFP  
interfaces for high-speed fiber or  
copper Ethernet communication  
LED Indicators  
Power: Blue: Indicates power supplies are operating correctly  
Yellow: Indicates a disconnected power supply  
Test: Quick Blinking Yellow: Initializing  
Slow Blinking Yellow: SafeMode  
Solid Yellow: Test mode  
Alarm: Indicates alarm activity in Red LED  
M0: Indicates Expansion Module 0 activity in Red LED  
X16-X19 (10 GE SFP+)  
10 Gigabit Ethernet hot-pluggable ports  
*X16, X18, and X19 are designated with a ‘dotto  
signify ports with a direct uplink to the appliance  
CPU for maximum throughput ; X17 shares the  
CPU uplink with X0-X15.  
The Front Panel  
|
7
   
The Back Panel  
Fans (2)  
Dual auto-throttling fans for system  
temperature control  
I
o
Power Supply  
Provides power to the Dell SonicWALL appliance  
by plugging in the AC adaptor and switching the  
appliance on  
Expansion Bay  
For Dell SonicWALL-approved  
expansion modules  
Warning: Potential Hazard from Fan  
This manual contains specific warning and caution statements where they apply. Please read the Safety Instructions before  
8
|
The Back Panel  
   
Using this Getting Started Guide  
The following flow chart illustrates the necessary steps in the process of getting started with your new Dell SonicWALL NSA 6600  
appliance.  
Configuration Process  
Verify  
Pre-Configuration  
Requirements  
Start Up  
Management  
Computer  
Perform Initial  
Setup  
Registration, Licensing, and Deployment Process  
Create a  
MySonicWALL  
Account  
Register  
Appliance in  
SonicOS  
Complete  
Deployment  
Configuration  
Using this Getting Started Guide  
|
9
   
10  
|
Using this Getting Started Guide  
2
Configuring the Appliance  
In this Section:  
This section provides an overview of available WAN types, a section to record configuration information, and initial setup information and  
procedures.  
11  
 
Determining the WAN Type  
Note: For more information regarding other supported WAN  
types such as Wire Mode or Tap Mode, refer to the  
SonicOS Administrator’s Guide.  
Before configuring your Dell SonicWALL NSA 6600 appliance,  
you will need to determine the type of WAN connection your  
setup will use. Dell SonicWALL supports the following types:  
Static—Configures the appliance for a network that uses  
static IP addresses.  
System Requirements  
DHCP—Configures the appliance to request IP settings from  
a DHCP server on the Internet.  
Before beginning the setup process, verify that you have:  
• An Internet connection  
PPPoE—Point-to-Point Protocol over Ethernet (PPPoE) is  
typically used with a DSL modem. If your ISP requires  
desktop software, a username, and password, select NAT  
with PPPoE mode.  
• A Web browser supporting Java Script and HTTP uploads.  
Accepted Browser  
Browser Version Number  
PPTP—Point-to-Point Tunneling Protocol (PPTP) is used to  
connect to a remote server. PPTP typically supports older  
Microsoft Windows implementations requiring tunneling  
connectivity.  
Internet Explorer  
8.0 and higher  
Chrome  
Firefox  
Safari  
18.0 and higher  
16.0 and higher  
5.0 and higher  
L2TP—Layer 2 Tunneling Protocol (L2TP) uses IPsec to  
connect to a L2TP server and encrypts all data transmitted  
from the client to the server. It does not encrypt network traffic  
to other destinations. If L2TP is not available in the Setup  
Wizard, you can configure it later in the SonicOS  
management interface.  
12  
|
Determining the WAN Type  
       
Ethernet WAN IP Address:  
Select a static IP address for your  
Ethernet WAN. This setting only  
applies if you are already using an  
ISP that assigns a static IP address.  
Recording Configuration Information  
_____._____._____._____  
Use this section to record your configuration information. Be  
sure to keep for future reference.  
Administrator Information  
The default MGMT interface IP address is 192.168.1.254.  
Admin Name:  
Select an administrator account name.  
(default is admin)  
Registration Information  
Serial Number:  
Record the serial number found on  
the bottom panel of your  
Admin Password:  
Select an administrator password.  
(default is password)  
Dell SonicWALL appliance.  
Authentication Code:  
Record the authentication code found  
on the bottom panel of your  
Dell SonicWALL appliance.  
Internet Service Provider (ISP) Information  
Record the following information about your current Internet  
service:  
Networking Information  
If you are  
No information is usually required. However,  
connecting with  
DHCP  
some providers may require a Host Name:  
LAN IP Address:  
Select a static IP address for your  
Dell SonicWALL appliance that is  
within the range of your local network.  
(default is 192.168.168.168)  
_________________________________  
_____._____._____._____  
Subnet Mask:  
If you are  
connecting with  
Static IP  
IP Address: _____._____._____._____  
Subnet Mask:_____._____._____._____  
Default Gateway: _____._____._____._____  
Primary DNS: _____._____._____._____  
DNS 2 (optional): _____._____._____._____  
DNS 3 (optional): _____._____._____._____  
Record the subnet mask for the local  
network. Client devices connecting  
through the appliance are assigned IP  
addresses in this network.  
_____._____._____._____  
(default is 192.168.168.0)  
Recording Configuration Information  
|
13  
   
Initial Setup  
The diagram below illustrates how to connect your management computer to the Dell SonicWALL NSA 6600 appliance for initial setup.  
Dell SonicWALL Appliance  
10GE  
1GE  
1GE  
X16  
X14  
X12  
X10  
X8  
X6  
X4  
X5  
X2  
X3  
X0  
X1  
X18  
SDHC  
M0  
BYPASS  
STATUS  
ALARM  
120V AC  
(U.S.)  
TEST  
PWR  
SonicWALL NSA 6600  
CONSOLE  
MGMT  
X19  
X17  
X15  
X13  
X11  
X9  
X7  
MGMT  
Management Computer  
Ethernet  
14  
|
Initial Setup  
   
The following sections provide initial configuration information  
and instructions for connecting your Dell SonicWALL NSA 6600  
appliance for initial setup.  
NSA 6600 LED Activity  
The Power LEDs on the front panel illuminate blue when the  
appliance is powered on.  
The Test LED or Alarm LED may illuminate and blink while the  
appliance performs a series of diagnostic tests. When these  
LEDs are no longer illuminated and the Power LEDs remain  
steadily lit, the Dell SonicWALL NSA 6600 appliance is ready  
for configuration. This typically occurs within a few minutes of  
turning on the power.  
Connecting the MGMT Port  
1. Using the provided Ethernet cable, connect one end of the  
cable to the computer you are using to manage the  
Dell SonicWALL NSA appliance.  
If the Test or Alarm LEDs remain lit after the NSA 6600 has  
completed powering on, restart the appliance by disconnecting  
the power, waiting 1 minute, then connecting the power again.  
2. Connect the other end of the Ethernet cable to the MGMT  
port on your Dell SonicWALL NSA appliance.  
For a connected MGMT or X0 - X7 port, the Link LED for the  
port illuminates green or amber depending on the link  
throughput speed, indicating an active connection:  
Applying Power to the NSA 6600  
Connect the AC power cord from the Dell SonicWALL NSA  
appliance into an appropriate power outlet.  
• Amber indicates 1 Gbps  
• Green indicates 100 Mbps  
For further information regarding power requirements, refer to  
document.  
• A unlit left LED with the right LED lit indicates 10 Mbps  
Initial Setup  
|
15  
     
2. Launch the Dell SonicWALL Setup Wizard by clicking the  
first Here link. This wizard helps you quickly configure the  
Dell SonicWALL appliance to secure your Internet  
connection.  
3. Follow the on-screen prompts to complete the  
Dell SonicWALL Setup Wizard.  
Using the Setup Wizard  
When you are ready to begin initial setup, configure your  
management computer with a static IP address on the  
192.168.1.0/24 subnet, such as 192.168.1.20. This allows your  
computer to connect to SonicOS via the MGMT interface.  
4. A Setup Wizard Summary page displays at the end of the  
wizard. Verify the information you’ve entered is correct,  
then click Apply.  
Note: Be sure to disable pop-up blocking software, or set your  
Web browser to allow pop-ups and cookies.  
5. Once completed, a Setup Wizard Completion notice  
displays.  
To access the SonicOS management interface, follow the steps  
listed:  
6. Click Close.  
7. Continue to Connecting to the Internet, page 17 to connect  
the appliance for Internet access and then refer to  
the registration process.  
16  
|
Initial Setup  
 
Testing Your Internet Connection  
Connecting to the Internet  
Use the following steps to test your Internet connection:  
1. After you exit the Setup Wizard, connect your computer to  
the X0 (LAN) port.  
2. Point your browser to the X0 IP address configured during  
initial setup, or to the default <http://192.168.168.168>.  
3. When the log in page appears, log into the SonicOS  
management interface as admin, using the configured  
password or the default, password.  
After initial setup is complete, connect the LAN and WAN  
interfaces for access to external networks or the Internet. You  
cannot reach the Internet or other WAN destinations while  
connected to the MGMT interface. For Internet access, connect  
to X0 or another configured LAN interface.  
4. Open a command prompt window on your computer and  
Note: Internet connectivity is needed for the recommended  
enter the command: ping sonicwall.com  
5. Open another Web browser and navigate to:  
product registration process.  
Connecting the LAN Port  
1. Connect one end of an Ethernet cable to your computer or  
to your local network switch or other networking device.  
If you can view the Dell SonicWALL home page, you have  
configured your Dell SonicWALL NSA 6600 correctly.  
If you cannot view the Dell SonicWALL home page, try one of  
these solutions:  
2. Connect the other end of the Ethernet cable to the X0  
(LAN) port on your Dell SonicWALL NSA appliance.  
• Renew your management station DHCP address or restart  
your management station to accept new network settings from  
the DHCP server in the Dell SonicWALL appliance.  
Connecting the WAN Port  
1. Connect one end of an Ethernet cable to your Internet  
connection.  
• Restart your Internet router to communicate with the DHCP  
client in the Dell SonicWALL appliance.  
If you have a router, DSL modem, or cable modem,  
connect the Ethernet cable to a LAN port on the router or  
modem.  
Note: WAN connectivity issues are unrelated to completion of  
2. Connect the other end of the Ethernet cable to the X1  
the MySonicWALL registration process.  
(WAN) port on your Dell SonicWALL NSA appliance.  
Connecting to the Internet  
|
17  
 
Internet Access  
The diagram below illustrates how to connect your computer to the Dell SonicWALL NSA 6600 appliance for Internet access.  
Dell SonicWALL Appliance  
10GE  
1GE  
1GE  
X14  
X12  
X10  
X8  
X6  
X4  
X5  
X2  
X3  
X0  
X1  
X18  
X16  
SDHC  
M0  
BYPASS  
STATUS  
ALARM  
120V AC  
(U.S.)  
TEST  
PWR  
SonicWALL NSA 6600  
CONSOLE  
MGMT  
X19  
X17  
X15  
X13  
X11  
X9  
X7  
X0  
X1  
X0 (LAN)  
X1 (WAN)  
Ethernet  
Internet  
18  
|
Connecting to the Internet  
Troubleshooting Your LAN Connection  
Troubleshooting Your Connections  
If you do not see the SonicOS log in prompt when you point  
your browser to the X0 (LAN) IP address, consider the  
following:  
Use the suggestions in this section to troubleshoot your MGMT  
and LAN connections.  
• Did you correctly enter the IP address for the Dell SonicWALL  
NSA 6600 X0 interface into your Web browser, beginning with  
Troubleshooting Your MGMT Connection  
• Did you try restarting your management station while it is  
connected to the Dell SonicWALL appliance?  
If you cannot connect to the Dell SonicWALL NSA 6600 or the  
Setup Wizard does not display, consider the following:  
• Are the Local Area Connection settings on your computer set  
to one of the following?:  
• Did you correctly enter the Dell SonicWALL NSA 6600  
in your Web browser?  
• Obtain an IP address automatically using DHCP  
• A static IP address on the default LAN subnet  
(192.168.168.0/24)  
• Did you try restarting your management station while it is  
connected to the Dell SonicWALL appliance?  
• A static IP address on the configured LAN subnet if you  
changed it during initial setup  
• Are the Local Area Connection settings on your computer set  
to a static IP address on the 192.168.1.0/24 subnet?  
• Do you have the Ethernet cable connected to your computer  
and to the X0 (LAN) port on your appliance?  
• Is the Ethernet cable connected to your computer and to the  
MGMT port on your appliance?  
• Is the connector clip on your network cable properly seated in  
the port of the security appliance?  
• Is the connector clip on your network cable properly seated in  
the port of the security appliance?  
Troubleshooting Your Connections  
|
19  
   
20  
|
Troubleshooting Your Connections  
3
Registering, Licensing, and Upgrading  
In this Section:  
This section provides instructions for registering, licensing, and upgrading firmware on your Dell SonicWALL NSA 6600 appliance.  
Note: Registration is an important part of the setup process and is necessary in order to receive the benefits of Dell SonicWALL  
security services, firmware updates, and technical support.  
21  
 
Using MySonicWALL  
Creating a MySonicWALL Account  
Dell SonicWALL requires a MySonicWALL account prior to  
configuring your appliance. If you already have a  
MySonicWALL account, you can continue to Registration  
A MySonicWALL account is required in order to register the Dell  
SonicWALL NSA 6600 appliance. Create a new MySonicWALL  
account from any computer by navigating to:  
<http://www.mysonicwall.com>.  
MySonicWALL is used during registration of your  
Dell SonicWALL appliance and to activate or purchase licenses  
for security services, support, or software specific to your  
Dell SonicWALL device.  
To create a MySonicWALL account:  
1. In your Web browser, navigate to  
<http://www.mysonicwall.com>.  
2. In the Login screen, click the Register Now link.  
For a High Availability configuration, MySonicWALL provides a  
way to associate a secondary unit that can share security  
service licenses with your primary appliance.  
Note: MySonicWALL registration information is not sold or  
shared with any other company.  
3. Complete the Registration form, and then click Register.  
4. Verify that the information is correct, and then click  
Submit.  
5. To confirm your account was created, click Continue.  
22  
|
Using MySonicWALL  
       
Registration Overview  
Registering in SonicOS  
Although there are several ways to register your new  
Dell SonicWALL appliance, Dell SonicWALL recommends  
registering your appliance through the SonicOS management  
interface.  
After you have completed the Setup Wizard and can  
successfully connect to your Dell SonicWALL NSA 6600  
appliance, you are ready to register the security appliance.  
<http://192.168.168.168> and admin / password, or if you  
changed these fields during the initial setup process, use  
the new IP address and credentials. Then, click Login.  
2. Navigate to the System > Status page.  
A message displays at the top of the screen that your  
Dell SonicWALL appliance is not registered. Click the  
Register link.  
This section describes how to register and license your  
appliance through SonicOS, as well as the alternate options  
available on MySonicWALL.  
Note: If you haven’t created a MySonicWALL account, see  
3. Enter your MySonicWALL username and password in the  
appropriate fields. Then, click Submit.  
If you haven’t created a MySonicWALL account, see  
4. In the Licenses > License Management page, specify a  
Friendly Name for the Dell SonicWALL appliance.  
5. Complete the Product Survey. Then, click Submit.  
Acknowledge the registration completion notification by  
clicking Continue. The Licenses > License Management  
page now lists all the Security Services associated to your  
appliance.  
Registration Overview  
|
23  
       
Synchronizing Licenses Manually  
Alternative Registration Options  
To manually synchronize licenses with MySonicWALL from the  
SonicOS interface:  
If you have registered your Dell SonicWALL appliance through  
the SonicOS interface, you can continue to Security Services  
1. Log in to your appliance and navigate to the System >  
Licenses page.  
2. Scroll to the Manage Security Services Online section.  
3. Click the Synchronize button to synchronize licenses with  
Although Dell SonicWALL strongly recommends registering  
your appliance using the SonicOS interface, you can optionally  
use MySonicWALL to register your appliance.  
MySonicWALL.  
Using the License Keyset  
Registering on MySonicWALL  
<http://www.mysonicwall.com>.  
2. Type the Dell SonicWALL appliance serial number in the  
Register a Product field. Then, click Next.  
3. Type a Friendly Name for the appliance.  
4. Select the Product Group from the dropdown list, if  
MySonicWALL provides an encrypted license keyset for each  
registered appliance. You can use the license keyset to  
manually apply all active licenses to your Dell SonicWALL  
appliance.  
1. Log in to your MySonicWALL account and click the link for  
your appliance.  
2. On the Services Management page, click the View  
License Keyset link.  
3. Click the encrypted text, then click Ctrl+A to select the  
entire keyset, then copy it to your clipboard.  
available.  
5. Enter the Authentication Code, and then click Submit.  
The Authentication Code is located on the bottom panel of  
your appliance.  
4. Log in to your appliance and navigate to the System >  
Licenses page.  
5. Scroll down to the Manual Upgrade section and enter the  
keyset in the appropriate field.  
6. Enter the requested information on the Product Survey  
page, then click Submit.  
6. When finished entering the keyset, click Submit.  
24  
|
Alternative Registration Options  
     
The following products and services are available for the Dell  
SonicWALL NSA 6600:  
Security Services and Software  
• Service Bundles:  
• Comprehensive Gateway Security Suite  
• McAfee: Client/Server Anti-Virus Suite  
The My Products > Product Management page in  
MySonicWALL lists security services, support options, and  
software that you can purchase or try with a free trial. For  
details, click the Name of the product. The Service  
Management page displays with the most recent details.  
• Gateway Services:  
• AppControl & Visualization  
• Gateway AV / Anti-Spyware / Intrusion Prevention  
Service  
Licensing Security Services  
• Content Filtering: Premium Edition  
• Stateful High Availability  
• Comprehensive Anti-Spam Service (CASS)  
• Deep Packet Inspection for SSL (DPI-SSL)  
To license a security service, complete one of the following from  
the MySonicWALL Service Management page:  
Free Trial of Service—Click the Try icon in the Action column  
for the security service you wish to try for a 30-day free trial.  
The free trial immediately activates and notifies you of the trial  
expiration date. The Service Management page displays  
updated information about the free trial service.  
• Desktop & Server Software:  
• McAfee Enforced Client Anti-Virus and Anti-Spyware  
• Client Content Filtering  
• Global VPN Client Enterprise  
• WAN Acceleration Software  
• WAN Acceleration Client  
• Virtual Assist  
Purchase a Service—Click the Cart icon to purchase a  
security service. In the Buy Service page, specify the quantity  
of licenses wanted, then click Add to Cart. Once the item(s)  
have been added, click the Checkout button. Follow the  
instructions to complete your purchase.  
• Analyzer  
• SSL VPN Client License  
• Scrutinizer  
The Applicable Services section lists the services available for  
your product. The Status of a service indicates whether the  
service is Licensed, Not Licensed, or Expired. The Action  
column lets you purchase or activate additional services.  
• Support Services:  
• Dynamic Support 24x7  
• Software and Firmware Updates  
• Hardware Warranty  
Security Services and Software  
|
25  
   
To activate your service licenses, log in to your MySonicWALL  
account and perform the following tasks:  
Activating & Managing Licenses Using  
MySonicWALL  
1. In the MySonicWALL My Products page, click the  
appliance Name. The Applicable Services table displays  
a list of services that are already licensed on your  
Dell SonicWALL appliance.  
If you registered your appliance through SonicOS, all licensed  
services are already activated. You can continue to Upgrading  
Note that your initial purchase may have included security  
services or other software bundled with the appliance.  
These licenses are enabled on MySonicWALL when the  
appliance is delivered to you.  
If you purchased a service subscription or upgrade from a sales  
representative separately, you will have an Activation Key for  
the service. This key is emailed to you after online purchases,  
or is on the front of the certificate that was included with your  
purchase.  
2. Locate the service in the Applicable Services section and  
click the key icon to activate the service.  
3. Type or paste your key into the Activation Key field, and  
then click Submit.  
After activating the service, you will see a Status and  
Expiration date in the respective columns when you return  
to the Service Management page.  
26  
|
Activating & Managing Licenses Using MySonicWALL  
   
Saving a Backup Copy of Your Preferences  
Upgrading Firmware  
Before beginning the update process, make a system backup  
on your Dell SonicWALL appliance. The backup feature saves a  
copy of the current system state, firmware, and configuration  
settings on your Dell SonicWALL security appliance, protecting  
all your existing settings in the event that it becomes necessary  
to return to a previous configuration state.  
Dell SonicWALL recommends that you run the latest available  
firmware on your security appliance. You will need to upgrade  
the factory-installed firmware to the latest version available on  
MySonicWALL.  
The following procedures are for upgrading an existing  
SonicOS firmware image to a newer version:  
In addition to creating a system backup, you can export the  
configuration preferences file to your local management station.  
This file serves as an external backup of the configuration  
preferences, and can be imported back into the  
Dell SonicWALL security appliance if it is necessary to reboot  
the firmware with factory default settings.  
Perform the following procedures to save a system backup on  
your appliance and export configuration settings to a file on your  
local management station:  
1. On the System > Settings page, click Create Backup.  
SonicOS takes a “snapshot” of your current system state,  
firmware, and configuration preference, and makes it the  
new System Backup firmware image. Clicking Create  
Backup overwrites the existing System Backup image, if  
any. The System Backup entry displays in the Firmware  
Management table.  
2. To export your settings to a local file, click Export Settings.  
A popup window displays the name of the saved file.  
Upgrading Firmware  
|
27  
     
Obtaining the Latest Firmware  
Upgrading the Firmware  
To obtain a new SonicOS firmware image file for your  
Dell SonicWALL security appliance, perform the following  
steps:  
Perform the following steps to upload new firmware to your  
Dell SonicWALL appliance and use your current configuration  
settings upon startup.  
1. In a browser on your management computer, log into your  
MySonicWALL account at <http://www.mysonicwall.com>.  
Tip: The appliance must be properly registered before it can  
for more information.  
2. In MySonicWALL, click Downloads in the left navigation  
pane to display the Download Center screen.  
3. Select NSA 6600 Firmware in the Software Type  
dropdown list to display available firmware versions.  
4. Locate the firmware version you want, and click the link to  
download it to a convenient location on your computer. You  
can download the Release Notes and other associated  
files in the same way.  
1. Download the SonicOS firmware image file from  
MySonicWALL and save it to a convenient location on your  
local computer.  
2. On the System > Settings page in SonicOS, click Upload  
New Firmware.  
3. Browse to the location where you saved the SonicOS  
firmware image file, select the file and click the Upload  
button.  
After the firmware finishes uploading, it will display in the  
Firmware Management table.  
4. Click the Boot icon in the row for Uploaded Firmware -  
New! to restart the appliance with the new firmware using  
your existing configuration settings.  
5. In the confirmation dialog box, click OK. The appliance  
restarts and then displays the log in page.  
6. Enter your user name and password. Your new SonicOS  
image version information is listed on the System > Status  
page.  
28  
|
Upgrading Firmware  
   
5. Select the boot icon in the row for one of the following:  
Uploaded Firmware - New!  
Using SafeMode to Upgrade Firmware  
If you are unable to connect to the SonicOS management  
interface, you can restart the security appliance in SafeMode.  
The SafeMode feature allows you to recover quickly from  
uncertain configuration states with a simplified management  
interface that includes the same settings available on the  
System > Settings page.  
Use this option to restart the appliance with your current  
configuration settings.  
Uploaded Firmware with Factory Default Settings-  
New!  
Use this option to restart the appliance with default  
configuration settings.  
6. In the confirmation dialog box, click OK to proceed.  
Perform the following steps to use SafeMode to upgrade  
firmware on the Dell SonicWALL security appliance:  
7. To connect to SonicOS through the LAN or WAN interface  
of the appliance, disconnect your computer from the  
MGMT port, and reconfigure it to automatically obtain an IP  
address and DNS server address, or reset it to its normal  
static values.  
1. Connect your computer to the MGMT port on the appliance  
and configure your IP address with an address on the  
192.168.1.0/24 subnet, such as 192.168.1.20.  
2. To force the appliance into SafeMode, use a narrow,  
straight object, like a straightened paper clip or a toothpick,  
to press and hold the Reset button on the front of the  
Dell SonicWALL appliance for at least twenty seconds, until  
the Test light begins blinking. See The Front Panel, page 7  
to locate the Reset button.  
8. Connect your computer to the local network and point your  
browser to the LAN or WAN IP address of the  
Dell SonicWALL appliance.  
9. After successfully booting the firmware, the log in screen  
displays. If you restarted with factory default settings, enter  
the default user name and password (admin / password) to  
access the SonicOS management interface.  
The Test light begins to blink when the Dell SonicWALL  
security appliance has rebooted into SafeMode.  
3. Enter 192.168.1.254 into your computer’s Web browser to  
access the SafeMode management interface.  
4. Click Upload New Firmware, and then browse to the  
location where you saved the SonicOS firmware image,  
select the file and click the Upload button.  
Upgrading Firmware  
|
29  
 
30  
|
Upgrading Firmware  
4
Deployment Scenarios  
In this Section:  
This section provides configuration overviews, as well as deployment scenarios for your Dell SonicWALL NSA 6600.  
31  
 
Advanced Deployment Scenarios  
Select a deployment scenario that best fits your network scheme. Reference the table below and the diagrams on the following pages for  
help in choosing a scenario.  
Current Gateway Configuration  
No gateway appliance  
New Gateway Configuration  
Use Scenario  
Single NSA appliance as a primary gateway.  
Pair of NSA appliances for high availability.  
Existing Internet gateway appliance  
NSA as replacement for an existing gateway  
appliance.  
NSA in addition to an existing gateway  
appliance.  
Existing SonicWALL gateway appliance NSA appliance in addition to an existing  
Dell SonicWALL gateway appliance.  
A
B
C
Internet or  
LAN Segment  
10GE  
1GE  
1GE  
X18  
X19  
X16  
X17  
X14  
X15  
X12  
X13  
X10  
X11  
X8  
X9  
X6  
X7  
X4  
X5  
X2  
X3  
X0  
X1  
10GE  
1GE  
1GE  
2
SDHC  
X18  
X19  
X16  
X17  
X14  
X15  
X12  
X13  
X10  
X11  
X8  
X9  
X6  
X7  
X4  
X5  
X2  
X3  
X0  
X1  
SDHC  
M0  
M0  
BYPASS  
ST TUS  
ALARM  
BYPASS  
ST TUS  
ALARM  
A
A
TEST  
PWR  
TEST  
PWR  
SonicWALL NSA 6600  
MGMT  
CONSOLE  
SonicWALL NSA 6600  
CONSOLE  
MGMT  
ISP  
1
Internet  
10GE  
1GE  
1GE  
X18  
X19  
X16  
X17  
X14  
X15  
X12  
X13  
X10  
X11  
X8  
X9  
X6  
X7  
X4  
X5  
X2  
X3  
X0  
X1  
SDHC  
M0  
BYPASS  
ST TUS  
ALARM  
A
TEST  
PWR  
SonicWALL NSA 6600  
MGMT  
CONSOLE  
SonicPoint  
10GE  
1GE  
1GE  
X18  
X19  
X16  
X17  
X14  
X15  
X12  
X13  
X10  
X11  
X8  
X9  
X6  
X7  
X4  
X5  
X2  
X3  
X0  
SDHC  
M0  
BYPASS  
STATUS  
ALARM  
TEST  
PWR  
Internet  
SonicWALL NSA 6600  
MGMT  
CONSOLE  
X1  
SonicPoint  
LAN Zone  
WLAN Zone  
DMZ Zone  
LAN Zone  
WLAN Zone  
Local Network  
32  
|
Advanced Deployment Scenarios  
   
Scenario A: NAT Mode Gateway  
For new network installations or installations where the  
NSA 6600 is replacing the existing network gateway.  
Dell SonicWALL NSA Appliance  
A
10GE  
1GE  
1GE  
X18  
X16  
X14  
X12  
X10  
X8  
X6  
X4  
X2  
X3  
X0  
X1  
SDHC  
In this scenario, the NSA 6600 is configured in NAT mode to  
operate as a single network gateway. Two Internet connections  
may be routed through the Dell SonicWALL appliance for load  
balancing and failover purposes. Because only a single  
Dell SonicWALL appliance is deployed, the added benefits of  
high availability with a stateful synchronized pair are not  
available.  
M0  
BYPASS  
STATUS  
ALARM  
TEST  
PWR  
SonicWALL NSA 6600  
CONSOLE  
MGMT  
X19  
X17  
X15  
X13  
X11  
X9  
X7  
X5  
ISP 1  
Internet  
SonicPoint  
LAN Zone  
WLAN Zone  
DMZ Zone  
To set up this scenario, follow the steps covered in:  
Advanced Deployment Scenarios  
|
33  
 
Scenario B: Stateful HA Pair  
For network installations with two Dell SonicWALL NSA 6600  
appliances configured as a stateful synchronized pair for  
redundant High Availability (HA) networking.  
Dell SonicWALL NSA Appliance 2  
B
Dell SonicWALL  
HA/Failover Pair  
10GE  
1GE  
1GE  
X18  
X16  
X14  
X12  
X10  
X8  
X6  
X4  
X2  
X0  
X1  
SDHC  
M0  
BYPASS  
ST TUS  
ALARM  
A
TEST  
PWR  
SonicWALL NSA 6600  
CONSOLE  
MGMT  
X19  
X17  
X15  
X13  
X11  
X9  
X7  
X5  
X3  
In this scenario, one NSA 6600 operates as the Primary  
gateway device and the other NSA 6600 is in Idle mode. All  
network connection information is synchronized between the  
two devices so that the Secondary appliance can seamlessly  
switch to Active mode without dropping connections if the  
Primary device loses connectivity.  
HA Control Link  
HA Data Link  
10GE  
1GE  
1GE  
X18  
X16  
X14  
X15  
X12  
X13  
X10  
X11  
X8  
X9  
X6  
X7  
X4  
X5  
X2  
X3  
X0  
SDHC  
M0  
BYPASS  
STATUS  
ALARM  
TEST  
PWR  
Internet  
SonicWALL NSA 6600  
CONSOLE  
MGMT  
X19  
X17  
X1  
Dell SonicWALL NSA Appliance 1  
To set up this scenario, follow the steps covered in:  
Local Network  
34  
|
Advanced Deployment Scenarios  
 
Scenario C: L2 Bridge Mode  
For network installations where the Dell SonicWALL NSA 6600  
is running in tandem with an existing network gateway.  
Third Party Gateway  
C
Internet or  
LAN Segment 2  
L2 Bridge Link  
Dell SonicWALL NSA Appliance  
In this scenario, the original gateway is maintained. The Dell  
SonicWALL NSA 6600 is integrated seamlessly into the existing  
network, providing the benefits of deep packet inspection and  
comprehensive security services on all network traffic.  
10GE  
1GE  
1GE  
X18  
X16  
X14  
X12  
X10  
X8  
X6  
X7  
X4  
X5  
X2  
X3  
X0  
X1  
SDHC  
M0  
BYPASS  
ST TUS  
ALARM  
A
TEST  
PWR  
SonicWALL NSA 6600  
CONSOLE  
MGMT  
X19  
X17  
X15  
X13  
X11  
X9  
SonicPoint  
L2 Bridge Mode employs a secure learning bridge architecture,  
enabling it to pass and inspect traffic types that cannot be  
handled by many other methods of transparent security  
appliance integration. Using L2 Bridge Mode, a Dell SonicWALL  
security appliance can be non-disruptively added to any  
Ethernet network to provide in-line deep-packet inspection for  
network traffic.  
LAN Zone  
WLAN Zone  
To set up this scenario, follow the steps covered in:  
Advanced Deployment Scenarios  
|
35  
 
Dell SonicWALL NSA Appliance  
Configuring NAT Mode Gateway  
10GE  
1GE  
1GE  
X18  
X16  
X14  
X12  
X10  
X8  
X6  
X4  
X2  
X3  
X0  
X1  
SDHC  
M0  
BYPASS  
ST TUS  
ALARM  
A
TEST  
PWR  
SonicWALL NSA 6600  
CONSOLE  
MGMT  
X19  
X17  
X15  
X13  
X11  
X9  
X7  
X5  
This section provides an overview of a Dell SonicWALL NSA  
6600 appliance operating as a single network gateway in NAT  
mode, which is the default mode for a newly configured  
NSA 6600. This section is relevant to administrators following  
deployment Scenario A.  
Internet  
X1  
X16  
X0  
X8  
SonicPoint  
Note: No additional configuration is necessary to deploy your  
appliance as a single network gateway in Many-to-One  
NAT mode.  
LAN Zone  
DMZ Zone  
WLAN Zone  
The Dell SonicWALL NSA 6600 ships with the internal DHCP  
server active on the LAN port. However, if a DHCP server is  
already active on your LAN, the Dell SonicWALL appliance will  
disable its own DHCP server to prevent conflicts.  
Overview of NAT Mode  
Network Address Translation (NAT) allows private IP addresses  
on internal networks to be mapped to at least one public IP  
address on the WAN interface of the Dell SonicWALL security  
appliance. Outbound traffic from the internal network uses  
many-to-one NAT address mappings for their LANs, WLANs,  
and other internal networks.  
As shown in the illustration, ports X1 and X0 are preconfigured  
as WAN and LAN, respectively. The remaining ports (X2-X17)  
can be configured to meet the needs of your network. In the  
example diagram, certain interfaces are configured for specific  
zones:  
All traffic in SonicOS must go through both an access rule and a  
NAT policy, a fundamental part of the NAT Mode architecture.  
The NAT policy is even used for traffic that needs no IP address  
translation, such as traffic traveling between two different LAN  
interfaces, traffic on the simplest types of VPNs, or through  
Layer 2 Bridge Mode / Transparent Mode configurations.  
• X1—WAN  
• X0—LAN  
• X12—Wireless LAN  
• X16—DMZ  
36  
|
Configuring NAT Mode Gateway  
   
NAT policies allow the flexibility to control Network Address  
Translation based on matching combinations of Source IP  
address, Destination IP address, and Destination Services.  
Policy-based NAT allows you to deploy different types of NAT  
simultaneously.  
Configuring a Stateful HA Pair  
This section provides instructions for configuring a pair of Dell  
SonicWALL NSA 6600 appliances for Stateful High Availability  
(HA). This section is relevant to administrators following  
deployment Scenario B.  
For configuration procedures and information regarding the  
different types of NAT policies, such as Many-to-One, One-to-  
One, or One-to-Many Load Balancing, refer to the SonicOS  
Administrator’s Guide.  
A Stateful HA pair operates in NAT mode by default, similar to  
Scenario A, with the added benefit of high availability.  
See the following sections:  
Configuring a Stateful HA Pair  
|
37  
   
• Ensure the Primary and Secondary security appliances’ LAN,  
WAN, and other interfaces are properly connected for failover.  
Dell SonicWALL NSA Appliance 2  
Dell SonicWALL  
HA/Failover Pair  
10GE  
1GE  
1GE  
X18  
X16  
X14  
X12  
X10  
X8  
X6  
X4  
X2  
X3  
X0  
X1  
SDHC  
• Connect the HA Control and Data Links on the Primary and  
Secondary appliances with appropriate cables.  
M0  
BYPASS  
ST TUS  
ALARM  
A
TEST  
PWR  
SonicWALL NSA 6600  
CONSOLE  
MGMT  
X19  
X17  
X15  
X13  
X11  
X9  
X7  
X5  
HA Control Link  
HA Data Link  
• Turn on the Primary Dell SonicWALL security appliance first.  
Then, turn on the Secondary Dell SonicWALL security  
appliance.  
Dell SonicWALL NSA Appliance 1  
10GE  
1GE  
1GE  
X18  
X16  
X14  
X12  
X10  
X8  
X6  
X4  
X2  
X3  
X0  
X1  
SDHC  
M0  
BYPASS  
ST TUS  
ALARM  
A
Internet  
TEST  
PWR  
SonicWALL NSA 6600  
CONSOLE  
MGMT  
X19  
X17  
X15  
X13  
X11  
X9  
X7  
X5  
Configuring High Availability Settings  
The first task in setting up HA after completing Initial Setup,  
page 14 is configuring the High Availability > Settings page  
on the Primary Dell SonicWALL security appliance. Once you  
configure HA on the Primary appliance, it communicates the  
settings to the Secondary appliance.  
Local Network  
Initial High Availability Setup  
To configure HA on the Primary Dell SonicWALL, log in to your  
Primary appliance and perform the following steps:  
Before you begin the configuration of HA on the Primary  
Dell SonicWALL security appliance, perform the following  
tasks:  
1. Navigate to the High Availability > Settings page.  
2. On the General tab, select Active / Idle from the Mode  
dropdown menu.  
3. Select the Enable Stateful Synchronization checkbox.  
• Determine which interfaces should be used as the HA Control  
Link and the HA Data Link. Remember, they must be the  
same ports on each appliance.  
4. Next, navigate to the HA Devices tab and type in the serial  
number for the Secondary appliance.  
5. Navigate to the HA Interfaces tab and specify an HA  
• On the bottom panel of the appliance that will run as the  
Secondary device, locate the serial number and write the  
number down. You need to enter this number in the High  
Availability > Settings > HA Devices page.  
Control Interface and an HA Data Interface.  
6. Click Apply to save these settings. All settings will be  
synchronized to the Secondary appliance, and the  
Secondary appliance will reboot.  
• Verify that the Primary and Secondary appliances are  
registered on MySonicWALL, running the same SonicOS  
versions.  
38  
|
Configuring a Stateful HA Pair  
   
2. In the Primary IP Address field, enter the unique LAN or  
Configuring HA Monitoring Settings  
WAN management IP address of the Primary appliance.  
After configuring the HA settings, you need to configure the  
Monitoring settings for the LAN or WAN.This includes  
configuring unique IP addresses for each appliance in the  
Stateful HA pair. You will need to log into the appliances using  
these IP addresses in order to complete the registration process  
from within SonicOS, which will allow license sharing and  
synchronization.  
3. In the Secondary IP Address field, enter the unique LAN  
or WAN management IP address of the Secondary  
appliance.  
4. Select the Allow Management on Primary/Secondary IP  
Address checkbox.  
5. Optionally Enable Physical / Link Monitoring by selecting  
the checkbox.  
6. Optionally enable Logical / Probe IP Address by selecting  
the checkbox and providing the IP Address of the target  
host.  
Navigate to the High Availability > Monitoring page to  
configure the Monitoring settings.  
1. Click the Configure icon of the Interface for which you  
want to edit settings. The Edit HA Monitoring dialog box  
displays.  
7. Click OK.  
You can repeat these steps to configure Monitoring on other  
interfaces.  
For more information regarding the optional settings, see the  
SonicOS Administrator’s Guide.  
Configuring a Stateful HA Pair  
|
39  
 
3. Set the Probe Interval for the interval in seconds between  
communication with upstream or downstream systems.  
Dell SonicWALL recommends that you set the interval for  
at least 5 seconds. You can set the Probe IP Address(es)  
on the High Availability > Monitoring screen.  
4. Set the Probe Count, which is the number of consecutive  
probes before the appliance considers the network path  
unreachable or broken. The default count is 3.  
Configuring Optional HA Settings  
The following settings are optional. You can configure these  
settings from the High Availability > Settings page.  
1. To backup the firmware and settings when you upgrade  
the firmware version, select the Generate/Overwrite  
Backup Firmware and Settings When Upgrading  
Firmware checkbox.  
5. The Election Delay Time is the number of seconds  
allowed for internal processing between the two units in the  
HA pair before one of them takes the primary role.  
Dell SonicWALL recommends leaving this field at its  
default setting. This field can be tuned later as necessary  
for your specific network environment.  
6. Enable the Active / Idle Failover only when ALL  
aggregate links are down checkbox to treat the  
aggregated link as down (causing a failover) only if all  
member links are down.  
2. Select the Enable Virtual MAC checkbox to allow the  
Primary and Secondary appliances to share a single MAC  
address. This greatly simplifies the process of updating  
network ARP tables and caches when a failover occurs.  
Only the WAN switch that the two appliances are  
connected to needs to be notified. All outside devices will  
continue to route to the single shared MAC address.  
3. Click Apply to save any of the settings on this page.  
Configuring HA Advanced Settings  
7. Select the Include Certificates/Keys checkbox to have  
the appliances synchronize all certificates and keys.  
8. Click Synchronize Settings to synchronize the settings  
The following settings are optional. You can configure the  
following settings from the High Availability > Advanced  
page.  
between the Primary and Secondary appliances.  
9. Click Synchronize Firmware if you previously uploaded  
new firmware to your Primary appliance while the  
Secondary appliance was offline, and it is now online and  
ready to upgrade to the new firmware.  
1. Adjust the Heartbeat Interval to control how often the two  
units communicate. The default and recommended  
minimum is 1000 milliseconds.  
2. The Failover Trigger Level sets the number of heartbeats  
that can be missed before failing over. Dell SonicWALL  
recommends leaving this field at its default setting. This  
field can be tuned later as necessary for your specific  
network environment.  
Synchronize Firmware is typically used after taking your  
Secondary appliance offline while you test a new firmware  
version on the Primary appliance before upgrading both  
appliances to it.  
40  
|
Configuring a Stateful HA Pair  
   
10. Click Force Active / Idle Failover to force a failover  
Completing HA Pair Association  
between your Primary and Secondary appliances.  
You will need to associate the two appliances on  
11. Click Accept to retain the settings on this screen.  
MySonicWALL. The second appliance will automatically share  
the Security Services licenses of the primary appliance.  
HA License Configuration Overview  
If the second appliance has not yet been registered, follow the  
register it.This is necessary to make it available for HA  
association with the Primary.  
You can configure HA license synchronization by associating  
two Dell SonicWALL security appliances as HA Primary and HA  
Secondary on MySonicWALL.  
You must purchase a single set of security service licenses for  
the HA Primary appliance. To use Stateful HA, you must first  
activate the Stateful High Availability Upgrade license for the  
primary unit in SonicOS. This is automatic if your appliance is  
connected to the Internet. See Registering, Licensing, and  
Once both appliances are registered, you can then follow the  
steps below to associate the two Dell SonicWALL appliances.  
1. Log in to your MySonicWALL account.  
2. Click My Products from the left navigation bar.  
3. On the My Products page, scroll down to find the appliance  
that you want to use as the parent, or Primary, appliance.  
Click the product Name or Serial Number.  
4. On the Service Management page, scroll down to the  
Associated Products section.  
License synchronization is used during HA so that the  
Secondary appliance can maintain the same level of network  
protection provided before the failover.  
5. Under Associated Products, click HA Secondary.  
6. On the My Product page, in the text boxes under Associate  
New Products, type the Serial Number and the Friendly  
Name of the appliance that you want to associate as the  
child, or Secondary, appliance.  
7. Select the group from the Product Group dropdown list.  
The product group setting specifies the MySonicWALL  
users who can upgrade or modify the appliance.  
8. Click Associate.  
Configuring a Stateful HA Pair  
|
41  
   
9. Log in to the SonicOS management interface of the  
Primary appliance using the unique IP address assigned  
on the High Availability > Monitoring page.  
10. Navigate to the System > Status page and click the  
registration link. This allows the unit to synchronize with the  
Dell SonicWALL license server and share licenses with the  
associated appliance.  
From your management workstation, test connectivity through  
the Secondary appliance by accessing a site on the public  
Internet – note that the Secondary appliance, when active,  
assumes the complete identity of the Primary, including its IP  
addresses and Ethernet MAC addresses.  
Log into the Secondary Dell SonicWALL appliance’s unique  
LAN/WAN IP address. The management interface should now  
display Logged Into: Secondary Dell SonicWALL Status:  
Active in the upper right-hand corner.  
11. Then, log in to the SonicOS management interface of the  
Secondary appliance using its unique IP address.  
12. Navigate to the System > Licenses page and click the  
Synchronize Licenses button. This ensures that both the  
Primary and Secondary appliances successfully  
synchronize with the Dell SonicWALL license server and  
share licenses.  
Now, turn the Primary appliance back on, wait a few minutes,  
then log back into the management interface. If stateful  
synchronization is enabled (automatically disabling preempt  
mode), the management GUI should still display Logged Into:  
Backup Dell SonicWALL Status: Active in the upper-right-  
hand corner.  
This completes the HA association on MySonicWALL and  
ensures that both appliances can share licenses.  
If you are using the Physical/Logical Monitoring feature,  
experiment with disconnecting each monitored link to ensure  
correct configuration.  
Verifying High Availability Setup  
Once you have configured the HA settings on the Primary  
Dell SonicWALL appliance, log in to the Primary appliance’s  
unique LAN/WAN IP address. Note that the management  
interface displays Logged Into: Primary Dell SonicWALL  
Status: Active in the upper right-hand corner.  
To verify that the Primary and Secondary Dell SonicWALL  
security appliances are functioning correctly, wait a few  
minutes, then turn off the Primary device. The Secondary  
security appliance should quickly take over.  
42  
|
Configuring a Stateful HA Pair  
 
Connection Overview  
Configuring L2 Bridge Mode  
Connect the X1 port on your Dell SonicWALL NSA 6600 to the  
LAN port on your existing Internet gateway device. Then  
connect the X0 port on your Dell SonicWALL to your LAN  
resources.  
This section provides instructions to configure the Dell  
SonicWALL NSA 6600 appliance in tandem with an existing  
Internet gateway device. This section is relevant to users  
following deployment Scenario C.  
Network Gateway  
See the following sections:  
LAN  
Dell SonicWAL L NSA Appliance  
Internet or  
LAN Segment 2  
10GE  
1GE  
1GE  
X18  
X16  
X14  
X12  
X10  
X8  
X6  
X4  
X2  
X3  
X0  
X1  
SDHC  
M0  
BYPASS  
STATUS  
ALARM  
TEST  
PWR  
L2 Bridge Link  
SonicWALL NSA 6600  
CONSOLE  
MGMT  
X19  
X17  
X15  
X13  
X11  
X9  
X7  
X5  
X0  
X1  
Network Resources  
Configuring the Primary Bridge Interface  
The primary bridge interface is connected to your existing  
Internet gateway device. The only step involved in setting up  
your primary bridge interface is to ensure that the WAN  
interface is configured for a static IP address. You will need this  
static IP address when configuring the secondary bridge.  
Note that the primary bridge interface must have a static IP  
assignment.  
Configuring L2 Bridge Mode  
|
43  
       
5. Configure management options (HTTP, HTTPS, Ping,  
SNMP, SSH, User log ins, or HTTP redirects).  
Configuring the Secondary Bridge Interface  
1. Navigate to the Network > Interfaces page from the  
navigation panel.  
Note: Do not enable Never route traffic on this bridge-pair  
unless your network topology requires that all packets  
entering the L2 Bridge remain on the L2 Bridge  
segments. You may optionally enable the Block all  
non-IPv4 traffic setting to prevent the L2 bridge from  
passing non-IPv4 traffic.  
2. Click the Configure icon in the right column of the X0 (LAN)  
interface.  
3. In the IP Assignment drop-down, select Layer 2 Bridged  
Mode.  
4. In the Bridged to drop-down, select the X1 interface.  
44  
|
Configuring L2 Bridge Mode  
 
5
Support and Training Options  
In this Section:  
This section provides overviews of customer support and training options for the Dell SonicWALL NSA 6600.  
45  
 
Customer Support  
Knowledge Portal  
Designed for customers with Dell SonicWALL NSA solutions,  
Dell SonicWALL 24x7 Support is an around-the-clock support  
service that includes phone, email and Web-based technical  
support, software and firmware updates and upgrades and  
Advance Exchange hardware replacement. Please Note:  
Continuous support is recommended on all NSA products.  
The Knowledge Portal is a resource which allows users to  
search for Dell SonicWALL documents based on the following  
types of search tools:  
• Browse  
• Search for keywords  
• Full-text search  
For further information, visit:  
For further information, visit:  
<http://www.sonicwall.com/us/support/kb.asp>  
46  
|
Customer Support  
   
User Forums  
Training  
The Dell SonicWALL User Forums is a resource that provides  
users the ability to communicate and discuss a variety of  
security and appliance subject matters. In this forum, the  
following categories are available for users:  
Dell SonicWALL offers an extensive sales and technical training  
curriculum for Network Administrators, Security Experts and  
Dell SonicWALL Medallion Partners who need to enhance their  
knowledge and maximize their investment in Dell SonicWALL  
Products and Security Applications. Dell SonicWALL Training  
provides the following resources for its customers:  
• Firewall  
• Networking  
• E-Training  
• Instructor-Led Training  
• Custom Training  
Technical Certification  
• Authorized Training Partners  
• Installation / Upgrading  
• VPN and VPN Client  
• SonicPoint and Wireless  
• 3G/4G WAN  
• Security Services  
• GMS and Analyzer  
• Secure Remote Access (E-Class / SMB)  
• Mobile Connect  
For further information, visit:  
<http://training.sonicwall.com/>  
• Email Security  
• Continuous Data Protection  
• Scrutinizer  
• WAN Acceleration (WXA)  
For further information, visit:  
<https://forum.sonicwall.com/>  
User Forums  
|
47  
   
Related Documentation  
Additionally Supported Languages  
See the following related documents for more information:  
• Dell SonicWALL SonicOS Administrator’s Guide  
• Dell SonicWALL SonicOS Release Notes  
• Dell SonicWALL Feature Modules  
• Application Intelligence and Control  
• Application Bandwidth Management  
• IPFIX/Netflow Reporting  
Dell SonicWALL Getting Started Guides, Quick Start Guides,  
User Guides, appliance firmware, and various end-user clients  
are now available in multiple languages.  
After registering your product, you can check for applicable  
firmware or end-user client software on MySonicWALL. New  
releases are posted as they become available, so please check  
periodically for additional firmware, software, and documents.  
• Deep Packet Inspection for SSL  
• Multiple Administrators  
• NAT Load Balancing  
• Packet Capture  
本地化固件和文档通知  
Dell SonicWALL 《入门指南快速入门指南用户指  
备固件和多种终端用户客户端现已支持多种语言从  
文文档。  
• RF Management  
• Single Sign On  
• SSL Control  
• Virtual Access Points  
请按入门指南》快速入门指南》中的说明,在  
MySonicWALL 网站 http://www.mysonicwall.com 注册您的设  
备。注册完成后,您可以在 MySonicWALL 网站查看相应的固件  
和终端用户客户端软件。我们会在第一时间发布可用的新版本,  
请定期检查以获取最新的固件、软件和文档。  
• Dell SonicWALL Global VPN Client Administrator’s Guide  
• Dell SonicWALL GAV Administrator’s Guide  
• Dell SonicWALL IPS Administrator’s Guide  
• Dell SonicWALL Anti-Spyware Administrator’s Guide  
For further information, visit:  
<http://www.sonicwall.com/us/support.html>  
48  
|
Related Documentation  
   
ローカ ライ版フ ァームウおよびドキュ メ  
ン ト について  
펌웨어 및 문서 한글화 안내  
Dell SonicWALL Getting Started 가이드 , Quick Start 가이드 ,  
사용자 가이드 , 어플라이언스 펌웨어 및 다양한 엔드유져 클라  
이언트가 다국어를 지원합니다 . 다음에서 사용 가능한 한국어  
문서를 찾아 보세요 . http://www.sonicwall.com/apac/en/ko/  
documents.html.  
Dell SonicWALL 導入イ ド、 ク イ ッ ク スター ト ガイ ド、 ー  
イ ド、 フ ァームウェア、 および多彩なエン ドユー  
ザ ク アン ト複数の言語で利用きるよ うになりまし。  
利用可能な日本ドキュ メ ン トは、 http://www.sonicwall.com/  
japan/documents/support_document.html ご覧下さい。  
따라 http://www.mysonicwall.com 에서 제품 등록을 하세요 .  
제품 등록 후 , MySonicWALL 에서 적용 가능한 한국어 펌웨어  
또는 사용자 클라이언트 소프트웨어를 확인할 수 있습니다 .  
새로운 버젼은 사용 가능할 때 등록됩니다 . 그러므로 , 추가되  
는 한국어 펌웨어 , 소프트웨어와 문서가 있는지 주기적으로 체  
크하세요 .  
導入イ ド またはク イ ッ ク スター ト ガイ ド手順に沿、  
MySonicWALL (http://www.mysonicwall.com) で製品を登録ま  
す。 製品の登録後に、 利用可能フ ァェアまはエン ド  
ユーザ ク アン ト を MySonicWALL 上で確認きまし  
いリ リース利用可能にる とされるので、 フ ァームウェ  
ア、 ソ フ ト 、 およびドキュ メ ン ト を期的に確して く  
ださ。  
Additionally Supported Languages  
|
49  
Notificação de Firmware e Documentação  
Localizada  
As Guias de noções básicas, Guias de início rápido, Guias de  
Usuário, firmware de aplicações, e varios clientes de usuário  
final de Dell SonicWALL estão agora disponíveis em varias  
línguas. Pode encontrar a documentação disponível em  
Siga as instruções da Guia de noções básicas ou Guia de início  
rápido para registrar seu produto em MySonicWALL no  
http://www.mysonicwall.com. Depois de registrar o produto,  
você pode procurar firmaware ou clientes de usuário final  
aplicáveis em MySonicWALL. Novos lançamentos são  
publicados tão pronto estejam disponíveis, assim que por favor  
visite periodicamente esta página para ver firmware, software e  
documentos adicionais.  
50  
|
Additionally Supported Languages  
6
Rack Mounting Instructions  
In this Section:  
This section provides illustrated rack mounting instructions for the Dell SonicWALL NSA 6600. For more information on rack mounting  
|
51  
 
Rack Mounting Instructions  
Assemble the Slide Rail  
Fasten 4 screws to the rail.  
A
B
B
A
WASHERS*8  
M4 SCREW*8  
52  
|
Rack Mounting Instructions  
Assemble the Slide Rail  
Fasten two-sided screws to the rail.  
C
C
M5 SCREW*8  
M5 Nut*8  
Rack Mounting Instructions  
|
53  
Assemble Inner Rail to Chassis  
Fasten 6 screws to attach the inner channel onto the chassis.  
D
D
M4 SCREW*6  
54  
|
Rack Mounting Instructions  
Insert Chassis to Frame  
Slide inner channel into rails.  
Push hook down to separate.  
Rack Mounting Instructions  
|
55  
56  
|
Rack Mounting Instructions  
7
Product Safety and Regulatory Information  
In this Section:  
This section provides regulatory along with trademark and copyright information.  
57  
 
Reliable grounding of rack-mounted equipment must be maintained. Particular  
attention must be given to power supply connections other than direct  
connections to the branch circuits, such as power strips.  
The included power cord is approved for use only in specific countries or  
regions. Before using a power cord, verify that it is rated and approved for use in  
your location.  
Safety and Regulatory Information  
Regulatory Model/Type  
1RK27-0A5  
Product Name  
NSA 6600  
Thumbscrews should be tightened with a tool after both installation and  
subsequent access to the rear of the product.  
Warning of Potential Hazard from Fan  
Safety Instructions  
The following conditions are required for proper installation:  
The Dell SonicWALL appliance is designed to be mounted in a standard 19-inch  
rack mount cabinet.  
Before replacing the fan unit, carefully read and follow the instructions provided  
with the unit.  
Use the mounting hardware recommended by the rack manufacturer and ensure  
that the rack is adequate for the application.  
Ensure that no water or excessive moisture can enter the unit.  
Allow unrestricted airflow around the unit and through the vents on the side of  
the unit. A minimum of 1 inch (25.44mm) clearance is recommended.  
Route cables away from power lines, fluorescent lighting fixtures, and sources  
of noise such as radios, transmitters, and broadband amplifiers.  
This product is not intended to be installed and used in a home or public area  
accessible to the general population. When installed in schools, this equipment  
must be installed in a secure location accessible only by trained personnel.  
Mount in a location away from direct sunlight and sources of heat. A maximum  
ambient temperature of 104º F (40º C) is recommended.  
If installed in a closed or multi-rack assembly, the operating ambient temperature  
of the rack environment may be greater than the room ambient. Therefore,  
consideration should be given to installing the equipment in an environment  
compatible with the maximum recommended ambient temperature.  
Mount the Dell SonicWALL appliances evenly in the rack in order to prevent a  
hazardous condition caused by uneven mechanical loading.  
Lithium Battery Warning  
The Lithium Battery used in the Dell SonicWALL Internet security appliance may  
not be replaced by the user. The appliance must be returned to a Dell SonicWALL  
authorized service center for replacement with the same or equivalent type  
recommended by the manufacturer. If, for any reason, the battery or  
Dell SonicWALL Internet security appliance must be disposed of, do so following  
the battery manufacturer's instructions.  
Cable Connections  
All Ethernet and RS232 (Console) cables are designed for intra-building  
connection to other equipment. Do not connect these ports directly to  
communication wiring or other wiring that exits the building where the  
Dell SonicWALL is located.  
Four mounting screws, compatible with the rack design, must be used and hand-  
tightened to ensure secure installation. Choose a mounting location where all  
four mounting holes line up with those of the mounting bars of the 19-inch rack  
mount cabinet.  
A suitably rated and approved branch circuit breaker shall be provided as part of  
the building installation. Follow local code when purchasing materials or  
components.  
Consideration must be given to the connection of the equipment to the supply  
circuit. Appropriate consideration of equipment nameplate ratings must be used  
when addressing this concern. Do not overload the circuit.  
58  
|
Safety and Regulatory Information  
 
für die Verwendung in Ihrem Land oder Ihrer Region zugelassen ist und den  
geforderten Normen entspricht.  
Sicherheitsanweisungen  
Für eine ordnungsgemäße Montage sollten die folgenden Hinweise beachtet  
Vergewissern Sie sich, dass die Schrauben nach dem Austausch mit  
entsprechendem Werkzeug fest angezogen werden.  
werden:  
Das Dell SonicWALL Modell ist für eine Montage in einem standardmäßigen 19-  
Zoll-Rack konzipiert.  
Vergewissern Sie sich, dass das Rack für dieses Gerät geeignet ist und  
verwenden Sie das vom Rack-Hersteller empfohlene Montagezubehör.  
Stellen Sie sicher, dass das Gerät vor Wasser und hoher Luftfeuchtigkeit  
geschützt ist.  
Stellen Sie sicher, dass die Luft um das Gerät herum zirkulieren kann und die  
Lüftungsschlitze an der Seite des Gehäuses frei sind. Hier ist ein  
Belüftungsabstand von mindestens 26 mm einzuhalten.  
Achtung—Lüfter Potentielle Gefahrenquelle  
Lesen Sie vor dem Austausch der Lüftereinheit die Anleitung, die mit dem Gerät  
geliefert wurde und befolgen Sie die Anweisungen.  
Achten Sie darauf, das sich die Netzwerkkabel nicht in der unmittelbaren Nähe  
von Stromleitungen, Leuchtstoffröhren und Störquellen wie Funksendern oder  
Breitbandverstärkern befinden  
Dieses Produkt ist nicht dafür entwickelt, um in Bereichen mit öffentlichem  
Zugang betrieben zu werden. Wenn es in Schulen betrieben wird, stellen Sie  
sicher, dass das Gerät in einem abgeschlossenen Raum installiert wird, der nur  
von speziell ausgebildetem Personal betreten werden kann.  
Wählen Sie für die Montage einen Ort, der keinem direkten Sonnenlicht  
ausgesetzt ist und sich nicht in der Nähe von Wärmequellen befindet. Die  
Umgebungstemperatur darf nicht mehr als 40 °C betragen.  
Wenn das Gerät in einem geschlossenen 19"-Gehäuse oder mit mehreren  
anderen Geräten eingesetzt ist, wird die Temperatur in der Gehäuse höher sein  
als die Umgebungstemperatur. Achten Sie darauf, daß die  
Umgebungstemperatur nicht mehr als 40° C beträgt.  
Bringen Sie die Dell SonicWALL waagerecht im Rack an, um mögliche Gefahren  
durch ungleiche mechanische Belastung zu vermeiden.  
Verwenden Sie für eine sichere Montage vier passende Befestigungsschrauben,  
und ziehen Sie diese mit der Hand an. Wählen Sie einen Ort im 19-Zoll-Rack, wo  
alle vier Befestigungen der Montageschien verwendet werden.  
Ein angemessen dimensionierter und geprüfte Sicherung, sollte Bestandteil der  
Haus-Installation sein. Bitte folgen die den lokalen Richtlinien beim Einkauf von  
Material oder Komponenten.  
Prüfen Sie den Anschluss des Geräts an die Stromversorgung, damit der  
Überstromschutz sowie die elektrische Leitung nicht von einer eventuellen  
Überlastung der Stromversorgung beeinflusst werden. Prüfen Sie dabei  
sorgfältig die Angaben auf dem Aufkleber des Geräts. Überlasten Sie nicht den  
Stromkreis.  
Hinweis zur Lithiumbatterie  
Die in der Internet Security Appliance von Dell SonicWALL verwendete  
Lithiumbatterie darf nicht vom Benutzer ausgetauscht werden. Zum Austauschen  
der Batterie muss die Dell SonicWALL in ein von Dell SonicWALL autorisiertes  
Service-Center gebracht werden. Dort wird die Batterie durch denselben oder  
entsprechenden, vom Hersteller empfohlenen Batterietyp ersetzt. Beachten Sie  
bei einer Entsorgung der Batterie oder der Dell SonicWALL Internet Security  
Appliance die diesbezüglichen Anweisungen des Herstellers.  
Kabelverbindungen  
Alle Ethernet- und RS232-C-Kabel eignen sich für die Verbindung von Geräten in  
Innenräumen. Schließen Sie an die Anschlüsse der Dell SonicWALL keine Kabel  
an, die aus dem Gebäude in dem sich das Gerät befindet herausgeführt werden.  
Eine sichere Erdung der Geräte im Rack muss gewährleistet sein. Insbesondere  
muss auf nicht direkte Anschlüsse an Stromquellen geachtet werden wie z. B.  
bei Verwendung von Mehrfachsteckdosen.  
Das im Lieferumfang enthaltene bzw. die im Lieferumfang enthaltenen  
Netzkabel sind nur für die Verwendung in bestimmten Ländern und Regionen  
zugelassen. Überprüfen Sie bitte vor der Verwendung eines Netzkabels, ob es  
Safety and Regulatory Information  
|
59  
安全說明  
需要滿足以下條件以進行正確安裝:  
•戴爾 SonicWALL 設備被設計成安裝在一個標準的 19 吋機架安  
裝櫃。需要滿足以下條件以進行正確安裝:  
•使用機架製造商推薦的裝載硬體,確認機架足夠裝置所需  
•請確認裝置內不會滲入水分或過多的濕氣。  
•裝置週邊請保持通風,特別是裝置通風口側。建議裝置與牆  
壁間至少要有 1 英吋 (25.44 公釐 ) 的淨空。  
•纜線的路徑應遠離電源線、日光燈,以及會產生雜訊的來源,  
如無線電、發送器與寬頻放大器。  
•必須留心裝置與電源電路的連接問題,電路過載對過電流保  
護與電路電線的影響需降至最低。解決這個問題時,需正確考  
慮裝置銘牌額定值。不要過載電路。  
•必須維護可靠的機架裝載設備接地。必須特別留意電源供應  
器連線,而不是直接連接到電源板之類的分支電路。  
•隨附的電源線僅限於特定的國家或地區使用。使用前,請確  
認電源線的額定值且已被認可在你的地區上使用。  
•當安裝及後續接觸產品背面之後,必須用工具將指旋螺釘鎖  
緊。  
•本產品的設計目的不是安裝並使用於住家或一般大眾可接觸  
到的公共區域。如果是安裝在學校,本設備只能安裝在受訓人  
員能接觸到的安全位置。  
風扇潛在危險警告  
•架設位置需遠離陽光直射與熱源。建議周圍溫度最高溫不 要  
超過 104°F (40°C)。  
•更換風扇部件前,請仔細閱讀,並遵循所提供的指示。  
鋰電池警告  
•如果是安裝於封閉式或多組機架配件,機架環境的周圍操作  
溫度可能會高過室內周遭。因此,在與上述建議之最高周圍溫  
度相容的環境中安裝設備時,應將此列入考量。  
•將 戴爾 SonicWALL 裝置平坦地裝設在機架中,如此才能避免  
因不均勻的機械負荷造成危險狀況。  
•必須使用四顆與機架設計相容的安裝螺釘,並用手鎖緊螺釘,  
確定安裝牢固。選擇一個安裝位置,將四個裝載洞孔對齊 19  
吋架設機櫃的安裝桿。  
使用者不得自行更換 戴爾 SonicWALL 網際網路安全性裝置中使  
用的鋰電池。必須將 戴爾 SonicWALL 送回 戴爾 SonicWALL 授權  
的服務中心,以更換相同的鋰電池或製造商推薦的同類型鋰電  
池。若因任何原因必須丟棄電池或 戴爾 SonicWALL 網際網路安  
全性裝置,請嚴格遵守電池製造商的指示。  
纜線連結  
•應當提供一個合適額定值並且已被認可的分支電路斷路器作  
為安裝該裝置的一部分。在購買材料或部件時,應遵循當地安  
全代碼。  
所有乙太網路與 RS232 ( 主控台 ) 線路都是為與其他裝置進行內  
建連接所設計的。請不要將這些連接埠直接連接至通訊線路,  
或其他連出 戴爾 SonicWALL 所在建築的線路。  
60  
|
Safety and Regulatory Information  
FCC Part 15 Class A Notice  
VCCI Statement  
NOTE: This equipment was tested and found to comply with the limits for a Class A  
digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to  
provide reasonable protection against harmful interference when the equipment is  
operated in a commercial environment. This equipment generates, uses, and can  
radiate radio frequency energy. And if not installed and used in accordance with the  
instruction manual, the device may cause harmful interference to radio  
communications. Operation of this equipment in a residential area is likely to cause  
harmful interference in which case the user is required to correct the interference at  
his own expense.  
この装置は、クラスA情報技術装置です。この装置を家庭環境  
で使用すると電波妨害を引き起こすことがあります。この場合  
には使用者が適切な対策を講ずるよう要求  
されることがあります。        
VCCI - A  
Canadian Radio Frequency Emissions Statement  
This Class A digital apparatus complies with Canadian ICES-003.  
Cet appareil numérique de la classe A est conforme à toutes la norme NMB-003 du  
Canada.  
Caution: Modifying this equipment or using this equipment for purposes not shown  
in this manual without the written consent of Dell, Inc. could void the user’s  
authority to operate this equipment.  
Declaration of Conformity  
India RoHS Statement  
A “Declaration of Conformity” in accordance with the directives and standards has  
been made and is on file at Dell Inc. Products Europe BV, Limerick, Ireland.  
This product complies with Restriction of Hazardous Substances (RoHS)  
requirements as prescribed by E-Waste (Management & Handling) Rules, by the  
Ministry of Environment & Forests, Government of India.  
For further information, please see:  
CISPR 22 (EN 55022) Class A  
This product complies with CISPR 22 and EN 55022 Class A standards.  
Warning: This is a class A product. In a domestic environment, this product may  
cause radio interference in which case the user may be required to take adequate  
measures.  
BMSI Statement  
警告使用者:  
此為甲類資訊技術設備,於居住環境中使用時,可能會造成射  
頻擾動,在此種情況下,使用者會被要求採取某些適當的對策。  
Safety and Regulatory Information  
|
61  
Regulatory Information for Korea  
Warranty Information  
Ministry of Information and Telecommunication  
Certification Number MSIP-REM-SWL-0A5  
All Dell SonicWALL appliances come with a 1-year Limited Hardware Warranty  
which provides delivery of critical replacement parts for defective parts under  
warranty. Visit the Warranty Information page details on your product’s warranty:  
All products with country code “A” and “J” are made in the U.S.A.  
All products with country code “C” or “D” are made in Taiwan R.O.C.  
All certificates held by Secuwide, Corps.  
A 급 기기 ( 업무용 정보통신기기 )  
Copyright Notice  
이 기기는 업무용으로 전자파적합등록을 한 기기이오니 판매자  
또는 사용자는 이 점을 주의하시기 바라며, 만약 잘못 판매 또는  
구입하였을 때에는 가정용으로 교환하시기 바랍니다 .  
© 2014 Dell Inc.  
All rights reserved.  
ANATEL Certification for Brazil  
Under the copyright laws, this manual or the software described within, cannot be  
copied, in whole or part, without the written consent of the manufacturer, except in  
the normal use of the software to make a backup copy. The same proprietary and  
copyright notices must be affixed to any permitted copies as were affixed to the  
original. This exception does not allow copies to be made for others, whether or not  
sold, but all of the material purchased (with all backup copies) can be sold, given,  
or loaned to another person. Under the law, copying includes translating into  
another language or format.  
Specifications and descriptions subject to change without notice.  
Este produto está homologado pela Anatel, de acordo com os procedimentos  
regulamentados pela Resolução nº 242/2000 e atende aos requisitos técnicos  
aplicados.  
Para maiores informações, consulte o site da ANATEL -  
62  
|
Warranty Information  
   

T Tech 12 Volt Power Supply Jump Starter Jncxfe User Manual
Trane Air Conditioner 4ttx5060a1 User Manual
Toshiba Ras 18lkh A User Manual
Sharp Cpd 3830 User Manual
Sanyo Seb 014 User Manual
Samsung Svmi 2e User Manual
Samsung Sh07zs8x User Manual
LG GH20 User Manual
LG 22MP400 User Manual
HAMILTON BEACH C33567 User Manual