SonicWall TZ370 Security Appliance User Manual

1. Uvod

The SonicWall TZ370 is a high-performance next-generation firewall designed for small to medium-sized businesses, retail locations, and branch offices. It operates on the advanced SonicOS 7.0 operating system, providing robust threat prevention, seamless connectivity, and adaptability to evolving security needs. This appliance is engineered to deliver industry-leading security technologies, protecting networks from ransomware, malware, and zero-day threats.

This manual provides essential information for the setup, operation, maintenance, and troubleshooting of your SonicWall TZ370 security appliance.

Figure 1.1: SonicWall TZ370 Security Appliance

Ova slika prikazuje prednju stranu view of the SonicWall TZ370 security appliance, showcasing its compact design and front-facing ports and indicator lights.

Ključne karakteristike:

• TradeUp Program Eligibility: Allows for upgrading to the latest SonicWall appliances with potential savings.
• Gen 7 TZ Series Performance: Delivers industry-validated security effectiveness with best-in-class price-performance for small, mid-sized organizations and distributed enterprises.
• Cloud Secure Edge: A cloud-native Security Service Edge (SSE) solution offering zero-trust network access (ZTNA) and advanced threat protection for secure connectivity across distributed environments.
• Secure Private Access (SPA): A zero-trust solution protecting access to cloud, on-premises, and hybrid resources with granular policy enforcement.
• Secure Internet Access (SIA): A cloud-delivered security solution providing real-time threat prevention, encrypted traffic inspection, and secure browsing.
• Advanced Protection Suite: Includes comprehensive security services such as intrusion prevention, content filtering, application control, and real-time threat intelligence updates.

2. Postavljanje i instalacija

This section outlines the basic steps for setting up your SonicWall TZ370 appliance. For detailed configuration, refer to the SonicWall documentation portal.

2.1. Verifikacija sadržaja paketa

Prije nego što nastavite, provjerite da li su sve komponente prisutne u paketu:

• SonicWall TZ370 Appliance
• Adapter za napajanje
• Ethernet kabl
• Vodič za brzi početak (ako je uključen)

2.2. Fizička instalacija

1. Odaberite lokaciju: Select a cool, dry, and well-ventilated area, away from direct sunlight and heat sources. Ensure adequate space for cable management.
2. Povežite mrežne kablove:
   • Connect your Internet Service Provider's (ISP) modem/router to the WAN port (e.g., X1) on the TZ370.
   • Connect your internal network switch or a computer directly to a LAN port (e.g., X0) on the TZ370.
3. Priključite napajanje: Plug the power adapter into the appliance's power input and then into a power outlet. The Power LED should illuminate.

Figure 2.1: TZ370W Front Panel Diagram

This diagram illustrates the front panel of the SonicWall TZ370W, highlighting USB 3.0 ports, RJ45 port LEDs, Power LED, Test LED, Security LED, Storage LED, Wireless WO WLAN LED, WAN X1 and X2 Port LEDs, and LAN/MGMT X0 Port LED.

Figure 2.2: TZ370W Rear Panel Diagram

This diagram shows the rear panel of the SonicWall TZ370W, indicating the X2 WAN RJ45 Port, X0 LAN RJ45 Port, Power Input, Grounding Screw, SafeMode Button, X1 WAN RJ45 Port, X3 RJ45 Port, and RJ45 Console Port.

2.3. Početna konfiguracija

Access the appliance's web management interface by connecting a computer to the LAN port (X0) and navigating to the default IP address (typically 192.168.168.168). Follow the on-screen wizard for initial setup, including setting up administrator credentials and basic network settings. Ensure you register your product with SonicWall to activate your included services.

3. Operacija

The SonicWall TZ370 operates on SonicOS 7.0, providing a comprehensive suite of security features. This section covers key operational aspects.

3.1. SonicOS 7.0 Management Interface

The web-based management interface allows for full control and monitoring of the appliance. Key areas include:

• Kontrolna tabla: Omogućuje prekoview of network activity, threats, and system status.
• mreža: Configure interfaces, routing, and VPN settings.
• Sigurnosne usluge: Manage threat prevention, content filtering, and application control.
• Korisnici: Configure user authentication and access policies.
• Logs & Reporting: View system logs and generate reports on network activity and security events.

3.2. Security Services Overview

Your TZ370 comes with a 3-year Essential Protection Security Suite and 1-year Cloud Secure Edge, providing advanced security capabilities:

• Threat Prevention: Utilizes deep packet inspection (DPI), intrusion prevention system (IPS), and anti-malware to block known and unknown threats.
• Filtriranje sadržaja: Kontrolira pristup neprikladnim ili neproduktivnim web sadržaj.
• Kontrola aplikacija: Manages and prioritizes application usage on the network.
• Cloud Secure Edge: Integrates cloud-native security for remote access and distributed environments.
• Secure Private Access (SPA): Enables secure, zero-trust access to internal resources for remote users.
• Secure Internet Access (SIA): Provides cloud-delivered security for internet browsing, protecting against web-based threats.

Figure 3.1: Protection Service Suite Comparison

This table compares features across Threat Protection Service Suite, Essential Protection Service Suite, and Advanced Protection Service Suite, including 24x7 Support, IPS, Application Control, Content Filtering Service, Gateway Anti-Virus, DNS Security, DNS Filtering, Network Access Control (NAC) Integration, Wi-Fi 6 integration, Deep Packet Inspection for SSL, GeoIP Updates, Botnet Service, Comprehensive Anti-Spam Service, Capture ATP - Sandboxing, NSM (Cloud) Management, NSM (Cloud) Reporting, and Embedded Warranty.

Figure 3.2: Cloud Secure Edge Overview

This diagram illustrates the components of SonicWall Cloud Secure Edge, showing how users connect to Internet Websites (SWG), SaaS Applications (CASB), Cloud Servers (ZTNA), and On-Premises Networks (VPNaaS) through a unified cloud-delivered solution.

Figure 3.3: Secure Private Access and Secure Internet Access Features

This table details the features available for Secure Private Access (Basic and Advanced) and Secure Internet Access (Basic and Advanced), covering Secure Network Access, Secure Access to Private Resources, Internet Threat Protection, SaaS Application Security, Web Content Filtering Service, and Users and Devices management.

4. Održavanje

Redovno održavanje osigurava optimalne performanse i sigurnost vašeg SonicWall TZ370 uređaja.

4.1. Ažuriranja firmvera

Periodically check for and apply the latest firmware updates from the SonicWall support portal. Firmware updates often include security patches, bug fixes, and new features.

4.2. Sigurnosna kopija konfiguracije

Redovno pravite sigurnosnu kopiju postavki konfiguracije vašeg uređaja. To omogućava brzo vraćanje u prvobitno stanje u slučaju kvara sistema ili pogrešne konfiguracije.

4.3. Monitoring sistema

Monitor system logs and dashboard alerts for any unusual activity or performance issues. Proactive monitoring can help identify and address potential problems before they escalate.

5. Otkrivanje problema

This section provides general troubleshooting tips for common issues. For complex problems, consult SonicWall support.

5.1. Nema pristupa internetu

• Verify physical cable connections to WAN and LAN ports.
• Check the status of the WAN interface in the management interface.
• Ensure your ISP modem/router is functioning correctly.
• Confirm DNS settings are correctly configured.

5.2. Slow Network Performance

• Check the appliance's CPU and memory utilization from the dashboard.
• Review security service logs for high threat activity or excessive blocked connections.
• While the TZ370 is designed for high throughput, enabling certain deep packet inspection and security features can impact performance. Evaluate if all enabled security features are essential for your current network needs.
• Ensure your network infrastructure (switches, cables) is not a bottleneck.

5.3. Ne mogu pristupiti interfejsu za upravljanje

• Verify your computer is connected to a LAN port and has an IP address within the same subnet as the appliance.
• Try accessing the interface from a different browser or device.
• If necessary, perform a soft reset (refer to the SafeMode button on the rear panel diagram) to restore default network settings without losing configuration.

6. Specifikacije

The following table provides detailed technical specifications for the SonicWall TZ370 appliance.

Figure 6.1: SonicWall TZ Series Gen 7 Specifications

This comprehensive table provides detailed specifications for the SonicWall TZ Series Gen 7, including Firewall General, Interfaces, Wireless support, Power over Ethernet, Storage expansion, Management, Single Sign-On (SSO) Users, VLAN interfaces, Access points supported, Firewall/VPN Performance, VPN, Global VPN client platforms supported, NetExtender, Mobile Connect, Security Services, IP addressing, Routing protocols, and Authentication.

7. Garancija i podrška

Your SonicWall TZ370 appliance includes a 3-year Essential Protection Security Suite and 1-year Cloud Secure Edge. This suite typically includes 24x7 support, IPS, Application Control, Content Filtering Service, and Gateway Anti-Virus, among other features as detailed in the service suite comparison.

For technical assistance, warranty claims, or to access the latest documentation and software, please visit the official SonicWall support website or contact their customer service. Ensure you have your product registration details readily available.

An embedded warranty of $100,000 is typically included with the protection suites, as indicated in the service suite comparison table. This applies to firewalls sold and registered after November 1, 2024.

Za više informacija posjetite Sonicwall trgovina na Amazonu.