SonicWALL SonicOSX 7 Bedienungsanleitung

SonicOSX 7

Getting Started Guide

for the NSsp Series

Contents

Product Overview 4

Enterprise Class High-performance Firewall 4

Feature Summary 4

Simplified Management and Reporting 5

Advanced Threat Protection 5

Capture Cloud Platform 5

Deep Packet Inspection of SSL/TLS (DPI-SSL) 5

Content Filtering Service 5

Intrusion Prevention Service 5

Application Control 6

Unified Policy Configuration and Management 6

Multiple Instances / High Availability 6

System Architecture 6

Hardware Overview 7

Front Panel 7

Rear Panel 8

LEDs 9

Specifications 9

System Setup 11

Default Settings 11

System Startup 12

HTTPS Management via X0 12

HTTPS Management via MGMT Port 12

SonicOS/X Basic Configuration 13

Connecting LAN and WAN Interfaces 14

Network Configuration 14

Registration and Licensing 15

Instance Licenses 15

Latest Firmware 15

Configuring Multiple Instances 16

Enabling Multi-Instances 17

Configuring Multi-Instances 19

Adding an Instance 19

Editing an Instance 21

Uploading Instance Firmware 22

Licenses for Multiple Instances 23

Surveying Multiple Instances 23

SonicOSX 7 Getting Started Guide for the NSsp Series

Contents

Instance Registration 24

Instance License Update 24

Deactivating an Instance 24

Instance HA Pair on a Standalone NSsp Node 24

Configuring High Availability 29

High Availability Overview 29

Setting Up Unit-to-Unit HA 29

Prerequisites 29

Configuring Advanced Settings 31

Checking High Availability Status 32

High Availability Status 32

High Availability Configuration 33

High Availability Licenses 33

Monitoring High Availability 33

Configuring Multi-Appliance Instance-Level HA 35

CLI Bring-up 37

Access the Console Port 37

At the ChassisOS Prompt 38

To Change to the Console Port of Another Physical Blade 39

Check Network Address Settings 40

Commands at ChassisOS Prompt 40

Show Commands at ChassisOSPrompt 41

Configure IP Addresses from the CLI 44

Restart SonicOSX from the CLI 44

To Access SonicOSX Console 44

Using the SafeMode GUI 46

Accessing SafeMode 46

Rebooting the System 47

Upgrading Firmware 47

Diagnostics 48

System Information 48

Hardware Sensors 48

Switch Port Counters 48

Switch Port SFP Information 49

SonicWall Support 50

About This Document 51

SonicOSX 7 Getting Started Guide for the NSsp Series

Contents

Product Overview

This section introduces key features of the NSsp 15700.

Topics:

lEnterprise Class High-Performance Firewall

lFeature Summary

lSystem Architecture

lHardware Overview

Enterprise Class High-performance Firewall

Firewalls must evolve and adapt to support dynamic ITenvironments. Firewall limitations can present major

IT operations bottlenecks.

The SonicWall Network Security services platform NSsp 15700 is a next-generation firewall with high port

density and Multi-Gigabit interfaces, that can process several million connections while checking for zero-

day and advanced threats. Designed for large enterprise, higher education, government agencies and

MSSPs, the NSsp eliminates attacks in real time without slowing performance. It is designed to be highly

reliable and deliver uninterrupted services.

Feature Summary

Topics:

lSimplified Management and Reporting

lAdvanced Threat Protection

lCapture Cloud Platform

lDeep Packet Inspection of SSL/TLS (DPI-SSL)

lContent Filtering Service

lIntrusion Prevention Service

lApplication Control

lUnified Policy Configuration and Management

lMultiple Instances / High Availability

SonicOSX 7 Getting Started Guide for the NSsp Series

Product Overview

Simplified Management and Reporting

Ongoing management, monitoring and reporting of network activity are handled through the SonicWall on-

premises Network Security Manager (NSM) or cloud-based Capture Security Center (CSC).

Advanced Threat Protection

Every business day, SonicWall encounters and catalogs over 140,000 new and updated forms of malware.

These variants are updated frequently to bypass static filters in a variety of devices and services.

Furthermore, many attackers build or outsource components, such as evasion tactics or runners in order to

make their malware more powerful and difficult to detect.

SonicWall Capture Advanced Threat Protection™ (Capture ATP) is used by over 150,000 customers across

the world through a variety of solutions and it helps to discover and stop over 1,200 new forms of malware

each business day. Furthermore, for compliance and performance-sensitive customers, the NSsp 15700

integrates with Capture Security Appliance (CSa), a local device based on the memory-based file analysis

technology, and Real-Time Deep Memory Inspection™ (RTDMI).

Capture Cloud Platform

SonicWall's Capture Cloud Platform delivers cloud-based threat prevention and network management plus

reporting and analytics for organizations of any size. The platform consolidates threat intelligence gathered

from multiple sources including our award-winning multi-engine network sandboxing service, Capture

Advanced Threat Protection, as well as more than 1.1 million SonicWall sensors located around the globe.

Deep Packet Inspection of SSL/TLS (DPI-SSL)

lThe NSsp 15700 provides inspection for over millions of simultaneous TLS/SSL and SSH encrypted

connections regardless of port or protocol.

lSupport for TLS 1.3

Content Filtering Service

Allows security administrators to create and apply policies that allow or deny access to sites based on

individual or group identity, or by time of day, for over 50 pre-defined categories.

Intrusion Prevention Service

The extensible signature language provides proactive defense against newly discovered application and

protocol vulnerabilities.

SonicOSX 7 Getting Started Guide for the NSsp Series

Product Overview

Application Control

The NSsp 15700 catalogs thousands of applications through App Control and monitors their traffic for

anomalous behavior through the on-board Application Firewall.

Unified Policy Configuration and Management

The NSsp 15700 enables organizations to intuitively configure and enforce policies by combining network,

application and web filtering security in one place.

Multiple Instances / High Availability

NSsp 15700 architecture allows multiple independent firewalls to share hardware resources to support

MSSPs, or provide flexible resources for evolving organizations. These independent firewalls may also be

configured as high-availability (HA) pairs, either within one NSsp, or across multiple NSsp. Unlike other high

performance firewall systems, the NSsp operates through containers rather than shared hardware

resources. Software containers along with NUMAarchitecture assure identical operation for all instances on

the NSsp 15700.

The NSsp 15700 supports three kinds of High Availability:

lStandalone HA — Instances on one NSsp from high availability pairs. See Instance HA Pair on a

Standalone NSsp Node.

lMulti-appliance instance-level HA — Instances on different NSsp 15700 appliances form HA pairs.

See Configuring Multi-Appliance Instance-Level HA.

lAppliance-level HA — Two NSsp appliances ,are paired as Primary Active and Secondary Standby.

See Setting Up Unit-to-Unit HA.

System Architecture

The NSsp 15700 centers on four Intel Xeon processors on two cards, or physical blades, linked by a 3.2

Terabits per second switch fabric. This enables the support of multiple independent firewalls with direct

access to the NSsp's high-performance hardware. Non-Unified Memory Access architecture combined with

software containers maximizes security and performance.

There are two logical blades, or CPUs, per physical blade. These logical blades are allocated to a Root

Instance firewall, or to tenant instances. Each logical blade offers the nine cores available on each Xeon

minus one devoted to system software. At the time of this writing, the Root Instance requires a minimum

two logical blades, and a maximum of two logical blades are available to support virtual firewalls.

Virtual firewall instances are confined to software containers, consequently providing the highest security

and predictable performance.

Virtual firewalls require an allocation of at least two CPU cores: one Control Plane (CP) and one Data Plane

(DP). Up to two CP cores and seven DPcores can support a virtual firewall. Cores supporting a virtual

firewall must reside on one logical blade.

SonicOSX 7 Getting Started Guide for the NSsp Series

Product Overview

Hardware Overview

The NSsp is a rack-mounted 2U enterprise firewall capable of supporting multiple virtual firewalls on a single

high-performance, high-reliability platform. It can support multiple firewall instances for MSSPs or redundant

virtual firewalls for high-availability applications.

Topics:

lFront Panel

lRear Panel

lLEDs

lSpecifications

Front Panel

X0 - X15 10Gb SFP+ Ports (16)

These ports support small form-factor pluggable (SFP) modules and 10Gb Base-T

copper modules.

X16 - X19 40Gb QSFP+ Ports (4)

These 40Gb ports also support 10Gb interface connectivity.

X20 - X25 100Gb QSFP28 Ports (6)

Serial Console Port

MGMT Port – 1GbE

LED Indicators

LEDs from top: Power, Alarm, System Status, MGMT Port

SonicOSX 7 Getting Started Guide for the NSsp Series

Product Overview

SSD Drives – 480GB (4)

LCD Screen

Rear Panel

AUX MGMT Ports (2) – 1GbE

Provides management access for SonicWall Technical Support

Power Switches and Status LEDs (2)

Press and release to power on

LED status:

lOff – Power is off for the compute blade

lBlinking Blue – Compute blade is in powering-up stage

lSolid Blue – Power is on and compute blade is up and ready

Power Alarm Cutoff Button

Press to stop alarm after power supply failure

Power Supplies (2) - 1200W each

Fully redundant, field replaceable

Ground

Fans (10)

Key Compartment

Contains keys to unlock SSD handles for removal/replacement

SonicOSX 7 Getting Started Guide for the NSsp Series

Product Overview

LEDs

LED Name LED Color Description

10Gb SFP+ Link LEDs,

X0-X15

Off

Solid Green

No link

Link is up

40Gb QSFP+ Link LEDs,

X16-X19

Off

Solid Green

No link

Link is up

100Gb QSFP28 Link LEDs,

X20-X25

Off

Solid Green

No link

Link is up

MGMT Port Link LED Off

Solid Green

Solid Amber

No link

100Mbps

1Gbps

All Activity LEDs,

X0-X25, MGMT

Off

Blinking Green

No traffic

Traffic present

Power Off

Green

Power is off for the compute blade

Power is on for the compute blade

Alarm Off

Green

Red

No alarm activity

Minor system alarm

Major/critical system alarm (thermal, fan, etc.)

System Status Off

Amber

Green

No compute blade or no power

Compute blade is not ready

Compute blade is ready

MGMT Port Off

Blinking Amber

No activity

Traffic present

Specifications

NOTE: For a list of qualified SFP+/QSFP transceivers, contact SonicWall Technical Support.

Feature Detail

Number of Compute Blades 2

Number of CPUs 4

100G QSFP28 6

40G QSFP+ 4

NSSP 15700 SPECIFICATIONS

SonicOSX 7 Getting Started Guide for the NSsp Series

Product Overview

Feature Detail

10G SFP+ 16

SSD in Compute Blade (1 per Blade) 240GB

Front SSDs for Blade #1 (Top) 480GB

RAID Configuration RAID 1

Front SSDs for Blade #2 (Bottom) 480GB

RAID Configuration RAID 1

Compact Flash 32GB 2

USB USB 2.0 Type A

Console RS232 RJ45

Management Port 1GbE RJ45

4056 Fan 10

Redundant Power Supplies 2

Power 1200 Watts

SonicOSX 7 Getting Started Guide for the NSsp Series

Product Overview

Inhaltsverzeichnis

Andere SonicWALL Netzwerk-Hardware Handbücher

SonicWALL

SonicWALL TZ 205 Series Bedienungsanleitung

SonicWALL

SonicWALL SSL-R Bedienungsanleitung

SonicWALL

SonicWALL NSa 4650 Bedienungsanleitung

SonicWALL

SonicWALL SRA 1200 Bedienungsanleitung

SonicWALL

SonicWALL TELE3 SP Service-Handbuch

SonicWALL

SonicWALL UMA EM5000 Bedienungsanleitung

SonicWALL

SonicWALL SonicPoint-N Dual-Band Bedienungsanleitung

SonicWALL

SonicWALL SuperMassive 9200 Bedienungsanleitung

SonicWALL

SonicWALL NSA 5600 Betriebsanleitung

SonicWALL

SonicWALL TELE3 TZ Bedienungsanleitung

SonicWALL

SonicWALL Zero-Touch Kurzanleitung

SonicWALL

SonicWALL NSa 4700 Betriebsanleitung

SonicWALL

SonicWALL NSA 2400MX Bedienungsanleitung

SonicWALL

SonicWALL NSa 3700 Bedienungsanleitung

SonicWALL

SonicWALL PRO 4100 Bedienungsanleitung

SonicWALL

SonicWALL ESA 5000 Bedienungsanleitung

SonicWALL

SonicWALL NSA 3600 Betriebsanleitung

SonicWALL

SonicWALL Content Security Manager 2200 Bedienungsanleitung

SonicWALL

SonicWALL ECLASS NSA E5500 Bedienungsanleitung

SonicWALL

SonicWALL NSA 6600 Betriebsanleitung

SonicWALL

SonicWALL 1RK52-110 Betriebsanleitung

SonicWALL

SonicWALL Email Security 200 Bedienungsanleitung

SonicWALL

SonicWALL SonicPoint-Ne Bedienungsanleitung

SonicWALL

SonicWALL Internet Security Appliances Service-Handbuch

Beliebte Netzwerk-Hardware Handbücher anderer Marken

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Bedienungsanleitung

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Bedienungsanleitung

Yudor

Yudor YDS-16 Bedienungsanleitung

D-Link

D-Link ShareCenter DNS-320L Bedienungsanleitung

Samsung

Samsung ES1642dc Gebrauchsanweisung

Honeywell Home

Honeywell Home LTEM-PV Montageanleitung

evertz

evertz 7700 Series Bedienungsanleitung

D-Link

D-Link ShareCenter DNS-343 Bedienungsanleitung

Asante

Asante AsanteBridge 1012 Bedienungsanleitung

FireBrick

FireBrick FB2700 Bedienungsanleitung

Audiovox Electronics

Audiovox Electronics ARWH2T Bedienungsanleitung

ADC

ADC DSX-1 Handbuch

NetComm

NetComm NF2 Bedienungsanleitung

Alcatel-Lucent

Alcatel-Lucent 5620 Bedienungsanleitung

Dell EMC

Dell EMC XC6420 Series Bedienungsanleitung

Lanner

Lanner NCA-1020A Bedienungsanleitung

Allied Telesis

Allied Telesis AT-TN121-A Bedienungsanleitung

Lanner

Lanner NCA-1525 Bedienungsanleitung