SonicWall TZ370 Security Appliance User Manual

1. Introduzzjoni

The SonicWall TZ370 is a high-performance next-generation firewall designed for small to medium-sized businesses, retail locations, and branch offices. It operates on the advanced SonicOS 7.0 operating system, providing robust threat prevention, seamless connectivity, and adaptability to evolving security needs. This appliance is engineered to deliver industry-leading security technologies, protecting networks from ransomware, malware, and zero-day threats.

This manual provides essential information for the setup, operation, maintenance, and troubleshooting of your SonicWall TZ370 security appliance.

Figure 1.1: SonicWall TZ370 Security Appliance

Din l-immaġni turi l-parti ta’ quddiem view of the SonicWall TZ370 security appliance, showcasing its compact design and front-facing ports and indicator lights.

Karatteristiċi ewlenin:

• TradeUp Program Eligibility: Allows for upgrading to the latest SonicWall appliances with potential savings.
• Gen 7 TZ Series Performance: Delivers industry-validated security effectiveness with best-in-class price-performance for small, mid-sized organizations and distributed enterprises.
• Cloud Secure Edge: A cloud-native Security Service Edge (SSE) solution offering zero-trust network access (ZTNA) and advanced threat protection for secure connectivity across distributed environments.
• Secure Private Access (SPA): A zero-trust solution protecting access to cloud, on-premises, and hybrid resources with granular policy enforcement.
• Secure Internet Access (SIA): A cloud-delivered security solution providing real-time threat prevention, encrypted traffic inspection, and secure browsing.
• Advanced Protection Suite: Includes comprehensive security services such as intrusion prevention, content filtering, application control, and real-time threat intelligence updates.

2. Setup u Installazzjoni

This section outlines the basic steps for setting up your SonicWall TZ370 appliance. For detailed configuration, refer to the SonicWall documentation portal.

2.1. Verifika tal-Kontenut tal-Pakkett

Before proceeding, ensure all components are present in the package:

• SonicWall TZ370 Appliance
• Adapter tal-Enerġija
• Cable Ethernet
• Gwida ta' Bidu Mgħaġġel (jekk inkluża)

2.2. Installazzjoni Fiżika

1. Agħżel Post: Select a cool, dry, and well-ventilated area, away from direct sunlight and heat sources. Ensure adequate space for cable management.
2. Qabbad Kejbils tan-Netwerk:
   • Connect your Internet Service Provider's (ISP) modem/router to the WAN port (e.g., X1) on the TZ370.
   • Connect your internal network switch or a computer directly to a LAN port (e.g., X0) on the TZ370.
3. Qabbad l-Enerġija: Plug the power adapter into the appliance's power input and then into a power outlet. The Power LED should illuminate.

Figure 2.1: TZ370W Front Panel Diagram

This diagram illustrates the front panel of the SonicWall TZ370W, highlighting USB 3.0 ports, RJ45 port LEDs, Power LED, Test LED, Security LED, Storage LED, Wireless WO WLAN LED, WAN X1 and X2 Port LEDs, and LAN/MGMT X0 Port LED.

Figure 2.2: TZ370W Rear Panel Diagram

This diagram shows the rear panel of the SonicWall TZ370W, indicating the X2 WAN RJ45 Port, X0 LAN RJ45 Port, Power Input, Grounding Screw, SafeMode Button, X1 WAN RJ45 Port, X3 RJ45 Port, and RJ45 Console Port.

2.3. Konfigurazzjoni Inizjali

Access the appliance's web management interface by connecting a computer to the LAN port (X0) and navigating to the default IP address (typically 192.168.168.168). Follow the on-screen wizard for initial setup, including setting up administrator credentials and basic network settings. Ensure you register your product with SonicWall to activate your included services.

3. Operazzjoni

The SonicWall TZ370 operates on SonicOS 7.0, providing a comprehensive suite of security features. This section covers key operational aspects.

3.1. SonicOS 7.0 Management Interface

Il- web-based management interface allows for full control and monitoring of the appliance. Key areas include:

• Dashboard: Jipprovdi overview tal-attività tan-netwerk, it-theddid, u l-istatus tas-sistema.
• Netwerk: Configure interfaces, routing, and VPN settings.
• Servizzi tas-Sigurtà: Manage threat prevention, content filtering, and application control.
• Utenti: Configure user authentication and access policies.
• Reġistri u Rappurtar: View system logs and generate reports on network activity and security events.

3.2. Security Services Overview

Your TZ370 comes with a 3-year Essential Protection Security Suite and 1-year Cloud Secure Edge, providing advanced security capabilities:

• Threat Prevention: Utilizes deep packet inspection (DPI), intrusion prevention system (IPS), and anti-malware to block known and unknown threats.
• Iffiltrar tal-Kontenut: Controls access to inappropriate or unproductive web kontenut.
• Kontroll tal-Applikazzjoni: Manages and prioritizes application usage on the network.
• Cloud Secure Edge: Integrates cloud-native security for remote access and distributed environments.
• Secure Private Access (SPA): Enables secure, zero-trust access to internal resources for remote users.
• Secure Internet Access (SIA): Provides cloud-delivered security for internet browsing, protecting against web-based threats.

Figure 3.1: Protection Service Suite Comparison

This table compares features across Threat Protection Service Suite, Essential Protection Service Suite, and Advanced Protection Service Suite, including 24x7 Support, IPS, Application Control, Content Filtering Service, Gateway Anti-Virus, DNS Security, DNS Filtering, Network Access Control (NAC) Integration, Wi-Fi 6 integration, Deep Packet Inspection for SSL, GeoIP Updates, Botnet Service, Comprehensive Anti-Spam Service, Capture ATP - Sandboxing, NSM (Cloud) Management, NSM (Cloud) Reporting, and Embedded Warranty.

Figure 3.2: Cloud Secure Edge Overview

This diagram illustrates the components of SonicWall Cloud Secure Edge, showing how users connect to Internet Websites (SWG), SaaS Applications (CASB), Cloud Servers (ZTNA), and On-Premises Networks (VPNaaS) through a unified cloud-delivered solution.

Figure 3.3: Secure Private Access and Secure Internet Access Features

This table details the features available for Secure Private Access (Basic and Advanced) and Secure Internet Access (Basic and Advanced), covering Secure Network Access, Secure Access to Private Resources, Internet Threat Protection, SaaS Application Security, Web Content Filtering Service, and Users and Devices management.

4. Manutenzjoni

Regular maintenance ensures optimal performance and security of your SonicWall TZ370 appliance.

4.1. Aġġornamenti tal-Firmware

Periodically check for and apply the latest firmware updates from the SonicWall support portal. Firmware updates often include security patches, bug fixes, and new features.

4.2. Backup tal-Konfigurazzjoni

Regularly back up your appliance's configuration settings. This allows for quick restoration in case of a system failure or misconfiguration.

4.3. Monitoraġġ tas-Sistema

Monitor system logs and dashboard alerts for any unusual activity or performance issues. Proactive monitoring can help identify and address potential problems before they escalate.

5 Issolvi l-problemi

This section provides general troubleshooting tips for common issues. For complex problems, consult SonicWall support.

5.1. Ebda Aċċess għall-Internet

• Verify physical cable connections to WAN and LAN ports.
• Check the status of the WAN interface in the management interface.
• Ensure your ISP modem/router is functioning correctly.
• Confirm DNS settings are correctly configured.

5.2. Slow Network Performance

• Check the appliance's CPU and memory utilization from the dashboard.
• Review security service logs for high threat activity or excessive blocked connections.
• While the TZ370 is designed for high throughput, enabling certain deep packet inspection and security features can impact performance. Evaluate if all enabled security features are essential for your current network needs.
• Ensure your network infrastructure (switches, cables) is not a bottleneck.

5.3. Ma nistax naċċessa l-Interfaċċja tal-Ġestjoni

• Verify your computer is connected to a LAN port and has an IP address within the same subnet as the appliance.
• Try accessing the interface from a different browser or device.
• If necessary, perform a soft reset (refer to the SafeMode button on the rear panel diagram) to restore default network settings without losing configuration.

6. Speċifikazzjonijiet

The following table provides detailed technical specifications for the SonicWall TZ370 appliance.

Figure 6.1: SonicWall TZ Series Gen 7 Specifications

This comprehensive table provides detailed specifications for the SonicWall TZ Series Gen 7, including Firewall General, Interfaces, Wireless support, Power over Ethernet, Storage expansion, Management, Single Sign-On (SSO) Users, VLAN interfaces, Access points supported, Firewall/VPN Performance, VPN, Global VPN client platforms supported, NetExtender, Mobile Connect, Security Services, IP addressing, Routing protocols, and Authentication.

7. Garanzija u Appoġġ

Your SonicWall TZ370 appliance includes a 3-year Essential Protection Security Suite and 1-year Cloud Secure Edge. This suite typically includes 24x7 support, IPS, Application Control, Content Filtering Service, and Gateway Anti-Virus, among other features as detailed in the service suite comparison.

For technical assistance, warranty claims, or to access the latest documentation and software, please visit the official SonicWall support website or contact their customer service. Ensure you have your product registration details readily available.

An embedded warranty of $100,000 is typically included with the protection suites, as indicated in the service suite comparison table. This applies to firewalls sold and registered after November 1, 2024.

Għal aktar informazzjoni, żur il- Sonicwall Store on Amazon.