SonicWALL TZ 150 Wireless Security Appliance Getting Started Guide The SonicWALL® TZ 150 Wireless is a total security platform for both your wired and wireless network, delivering true layered security by integrating gateway anti-virus, intrusion prevention and content filtering capabilities for small networks in an easy-to-use, low cost platform. This Getting Started Guide provides instructions for basic installation and configuration of the SonicWALL TZ 150 Wireless.
SonicWALL TZ 150 Wireless Configuration This Getting Started Guide covers the following procedures. Procedures 1 through 6 are required for initial configuration of your SonicWALL TZ 150 Wireless security appliance.
1 Collect Required Information Internet Service Provider (ISP) Information Collect the following information about your Internet service: If you connect via You probably use Please record Cable modem, DSL with a router DHCP You do not need to provide any Internet connection information. Home DSL PPPoE User Name: Password: Note: Your ISP may require your user name in the format: name@ISP.
Other Information SonicWALL Management Interface To access the SonicWALL TZ 150 Wireless Web-based management interface. These are the default settings, which you can change: User Name: admin Password: password Applying Power to the SonicWALL TZ 150 Wireless 2 1. Plug the power supply into back of the security appliance into an appropriate power outlet. and The Power LED on the front panel lights up green when you plug in the SonicWALL TZ 150 Wireless.
3 Connecting the SonicWALL TZ 150 Wireless Connecting the Ethernet Cables Connect the WAN Cable Internet WAN Modem or Router 1. Connect one end of an Ethernet cable to your Internet connection, such as a DSL modem or cable modem. This cable may already be connected between your computer and your modem. If so, disconnect it from your computer, and leave it connected to the Internet. 2. Connect the other end of the cable to the WAN port on the back of your SonicWALL TZ 150 Wireless.
Connect the LAN Cable Management Station port 1 1. Connect one end of another Ethernet cable to the computer you are going to use to manage the SonicWALL TZ 150 Wireless. 2. Connect the other end of the cable to port # 1 on the back of your SonicWALL TZ 150 Wireless. The port # 1 LEDs on the front panel light up indicating an active connection.
4 Accessing the Management Interface To access the Web-based management interface of the SonicWALL TZ 150 Wireless: 1. On the computer you have connected to port # 1, Start your Web browser. Alert: Turn off pop-up blocking software before accessing the SonicWALL management interface. Your Web browser must support Java and HTTP uploads. Internet Explorer 5.0 or higher or Netscape Navigator 4.7 or higher are recommended. 2. Enter http://192.168.168.168 in the Location or Address field. 3.
If the SonicWALL Setup Wizard Does Not Appear If you cannot connect to the SonicWALL TZ 150 Wireless or the Setup Wizard does not display, verify the following configurations: • Did you correctly enter the SonicWALL TZ 150 Wireless management IP address in your Web browser? • Is your computer running pop-up blocking software? • Are the Local Area Connection settings on your computer set to obtain an IP address dynamically (DHCP)? see Procedure 7, “Connecting Computers to Your SonicWALL TZ 150 Wireless” on p
5 Using the SonicWALL Setup Wizard The SonicWALL Setup Wizard provides user-guided instructions for configuring your SonicWALL TZ 150 Wireless. Note: Make sure you have any required ISP information to complete the configuration before using the Setup Wizard. See the list of required information in Procedure 1, “Collect Required Information” on page 3. Tip: If you do not know what type of Internet connection you have, contact your ISP.
Select Office Gateway, which is a commonly used wireless deployment for LAN and WLAN to Internet connectivity. 2. Change Password - Change the administrative password. This is the password for the admin account. Old Password Should be populated with the default password, password. New Password Enter your new password. Confirm Re-enter your new password. ! Note: Keep your new password in a safe place.
3. Change Time Zone - Change the Time Zone setting to your local time zone. Time Zone Select the time zone for your location from the list. Automatically adjust clock for daylight saving time Check this if you live in an area that observes Daylight Savings Time. Click Next. ! Note: It is important that you set the time zone correctly before you register your SonicWALL TZ 150 Wireless. 4. WAN Network Mode - The Setup Wizard automatically detects most networking modes.
5. WAN Network Mode - The second WAN network mode page configures your WAN settings for the selection you made in the previous page. WAN Network Mode: NAT Enabled (Static IP) SonicWALL WAN IP Address Enter a single, static IP address. This must be in the correct address range for your ISP. WAN Subnet Mask Enter the subnet mask for your network, for example, 255.255.255.0. Gateway (Router) Address Enter the IP address of your internet gateway.
WAN Network Mode - NAT with PPPoE Client Obtain an IP Address Automatically Select this if your ISP assigns you a dynamic IP address. Use the following IP Address Select this if your ISP has assigned you a static IP address, and enter the address. PPPoE User Name Enter the user name for your Internet account. The username usually includes “@” and the domain name, for example, joe.user@ispgateway.net. PPPoE Password Enter the password for your internet account.
WAN Network Mode: NAT with PPTP Client PPTP Server IP Address Enter the address of the server you are connecting to. PPTP User Name Enter your network user name. PPTP Password Enter your network password. Obtain an IP Address Automatically Select this if the server assigns you a dynamic IP address. Use the following IP Address Check this if you have been given a static IP address, and fill in the following three fields. SonicWALL WAN IP Address Enter the static IP address for your connection.
6. LAN Settings - The LAN Settings page configures your LAN interface. These settings apply to all twenty-four LAN ports. SonicWALL LAN IP Address Accept the default IP address or enter a new IP address of the LAN interface. LAN Subnet Mask Accept the default, or enter a subnet mask for your LAN. Enable Windows Networking Support Leave this option checked if you plan to have more than one Windows computer, Windows Networking allows them to communicate with each other.
7. LAN DHCP Settings - The LAN DHCP Settings page allows you to select whether or not to use the DHCP Server in the SonicWALL TZ 150 Wireless to automatically distribute IP addressing information to computers and other network devices on your LAN. Enable DHCP Server on LAN Leave checkbox checked to use the DHCP server in the SonicWALL TZ 150 Wireless. Do not use select this option if you already have a DHCP server on your network, or if you want to require your network clients to have static IP addresses.
9. WiFiSec - WiFiSec is a security standard that uses an IPSec VPN to secure wireless network connections. The WiFiSec page allows you to create a first VPN user to connect securely to your wireless network. WiFiSec is disabled by default. User Name Enter a user name for the VPN user. Password Enter a unique password for the user. Confirm Password Re-enter the password. 10. Click Next.
11. Wireless Guest Services - Wireless Guest services allow guest users to connect through your wireless network to the internet without any access to your network. Enable Wireless Guest Services Check to enable Wireless Guest Services on your network. Account Name Enter the account name your guest users must use to log into Wireless Guest Services. Account Password Enter a password for the guest account.
12. SonicWALL Configuration Summary - Displays your network configuration information. Setup Wizard Complete - your SonicWALL TZ 150 Wireless is now successfully configured for LAN, Wireless, and Internet access. Click Restart to complete the configuration process. 13. Test your connection: After the SonicWALL TZ 150 Wireless reboots, open a Web browser, and go to If you can view the SonicWALL home page, you have configured everything correctly.
6 Registering Your SonicWALL TZ 150 Wireless Once you’ve established your Internet connection, it is recommended you register your SonicWALL security appliance at mySonicWALL.com. Registering your SonicWALL security appliance provides the following benefits: • Try a FREE 30-day trial of SonicWALL's Gateway Anti-Virus, Anti-Spware and Intrusion Prevention Service, Content Filtering Service, Enforced-Client Anti-Virus/ Anti-Spyware.
Creating a mySonicWALL.com Account Creating a mySonicWALL.com account is fast, simple, and FREE. Simply complete an online registration form in the SonicWALL TZ 150 Wireless management interface. If you already have a mysonicWALL.com account, go to “Registering Your SonicWALL TZ 150 Wireless” on page 23 to register your appliance. 1. If you are not logged into the SonicWALL TZ 150 Wireless management interface log in with the username admin and the administrative password you set in the Setup Wizard. 2.
4. In the mySonicWALL.com Login page, click the here link in “If you do not have a mySonicWALL account, please click here to create one.” The mySonicWALL.com account form is displayed. 5. In the MySonicWall Account page, enter in your information in the Account Information, Personal Information and Preferences fields. All fields marked with an asterisk (*) are required fields. Note: Remember your username and password to access your mySonicWALL.com account. 6.
Registering Your SonicWALL TZ 150 Wireless 1. If you are not logged into the SonicWALL TZ 150 Wireless management interface, log in with the username admin and the administrative password you set in the Setup Wizard. 2. If the System > Status page is not displaying in the management interface, click System in the left-navigation menu, and then click Status. 3. On the System > Status page, in the Security Services section, click the Register link. The mySonicWALL.com Login page is displayed. 4.
Note: SonicWALL Product Survey information is not sold or shared with any other company. 8. Click Submit. 9. When the mySonicWALL.com server has finished processing your registration, you will see a page informing you that your SonicWALL TZ 150 Wireless appliance is registered. Click Continue, and the System > Licenses page is displayed showing the available security services. You can activate the services from this page now or at any time in the future.
7 Activating SonicWALL Security Services When you register your SonicWALL TZ 150 Wireless, you are eligible for a Free Trial of the SonicWALL Security Services: • Gateway Anti-Virus/Anti-Spyware/Intrusion Prevention Service - Provides real-time protection for all hosts behind your SonicWALL from viruses, spyware, worms and application-layer attacks using deep packet inspection to detect and prevent malicious content before it can reach hosts on your network • Enforced Client Anti-Virus/Anti-Spyware - prot
6. In the SonicWALL Gateway Anti-Virus page, click Continue. Your Gateway Anti-Virus, Anti-Spyware, and Intrusion Prevention Service free trial is now activated. 7. In the Manage Services Online table, click Try in the Free Trial column for Enforced-Client Anti-Virus/Anti-Spyware and for CFS Premium Service to activate the Complete Anti-Virus and Content Filtering Service (CFS) free trials. Your SonicWALL Security Service free trials are now activated.
Enabling Enforced Anti-Virus/Anti-Spyware Service 1. Select the Security Services > Enforced Client Anti-Virus/ Anti-Spyware page in the SonicWALL management interface. 2. Select the Enable Anti-Virus checkbox. 3. Click in the top-right corner of the page. Users on your network will be prompted to download the SonicWALL Anti-Virus client. Enabling Intrusion Prevention Service 1. Select the Security Services > Intrusion Prevention page in the SonicWALL management interface. 2.
Enabling Anti-Spyware Service 1. Select the Security Services > Anti-Spyware page in the SonicWALL management interface. 2. In the Gateway Anti-Spyware Global Settings section, click the Enable Anti-Spyware checkbox. 3. Select which interfaces you want to apply Anti-Spyware service on, You can select any combination of WAN, LAN, and OPT. 4. For best protection from spyware, select the Prevent All checkbox for High, Medium, and Low danger levels. This will block all spyware that can be detected. 5.
8 Connecting Wireless Clients to the SonicWALL TZ 150 Wireless For wireless clients to connect to your WLAN zone, they need: • A wireless network card installed and configured for the SonicWALL TZ 150 Wireless’ SSID • SonicWALL GVC installed and configured for a secure wireless connection Connecting to the Wireless Network You connect to the wireless network according to the requirements of your client operating system.
Establishing Secure Wireless Connections For a wireless client to securely connect to the SonicWALL TZ 150 Wireless using WiFiSec, the SonicWALL Global VPN Client (GVC) must be installed and configured, and WiFiSec must be enabled.
Creating an Office Gateway Connection Profile Using the New Connection Wizard 1. In your Windows Start Menu, Choose Start > Programs > SonicWALL Global VPN Client. The first time you open SonicWALL GVC, the New Connection Wizard automatically launches. If the New Connection Wizard does not display, click the New Connection Wizard icon on the far left side of the toolbar to launch it. Click Next. 2. In the Choose Scenario page, select Office Gateway. Click Next. 3.
Establishing a WiFiSec VPN Connection Using the WLAN GroupVPN Policy 1. In the SonicWALL Global VPN Client window, double-click the Office Gateway profile. The Connection Warning dialog box is displayed, which informs you that all traffic that is not going to the secured VPN gateway will be blocked. 2. 3. Click Yes to continue.
9 Connecting Computers to Your SonicWALL TZ 150 Wireless You can attach up to ten computers to your SonicWALL TZ 150 Wireless.
Configuring DHCP IP Addressing Complete the following section based on your operating system in order to configure your management computer to obtain an IP address automatically (using DHCP addressing): Note: If you are not using DHCP, refer to the SonicOS Standard Administrator’s Guide available on the SonicWALL Resource CD and on the SonicWALL’s Documentation Web Site at: . Windows Vista 1. From the Start menu, right-click Network and select Properties. 2.
4. Highlight Internet Protocol (TCP/IP) and click Properties. 5. Select Obtain an IP address automatically and Obtain a DNS address automatically. 6. Click OK for the settings to take effect.
10 Wall Mounting the SonicWALL TZ 150 Wireless You can mount your SonicWALL TZ 150 Wireless on a wall or any vertical surface. Use the template on the next page as a guide for placing the mounting screws. 1. Using the template on the next page, attach two screws to the surface where you want to mount the security appliance. The mounting screws should have a head between 3/16” and 1/4” in diameter. The mounting screws should stick approximately 1/8” out from the surface. 2.
SonicWALL TZ 150 Wireless Mounting Template Align front corner here Attach mounting screw here Considerations for Mounting the SonicWALL TZ 150 Wireless • Mount in a location away from direct sunlight and sources of heat. A maximum ambient temperature of 104º F (40º C) is recommended. • Route cables away from power lines, fluorescent lighting fixtures, and sources of noise such as radios, transmitters, and broadband amplifiers • Ensure that no water or excessive moisture can enter the unit.
SonicWALL TZ 150 Wireless Security Appliance Regulatory Statement and Safety Instructions Regulatory Model/Type Product Name APL15-054 TZ 150 Wireless Note: Detailed regulatory information can be found in the electronic file, “SonicWALL_TZ_150_Wireless_Regulatory_Statement.pdf,” located on the SonicWALL Resource CD provided with the unit or on the SonicWALL Web site: .
Glossary of Networking Terms • • • • • • • • • Default Gateway - A device on an internetwork that forwards packets to another network. DHCP - Dynamic Host Configuration Protocol allocates IP addresses to computers on the network automatically without assigning a computer a static (fixed) IP address. DNS - A Domain Name System is a hierarchical naming system that resolves a domain name with its associated IP address. A DNS server looks up the name of a computer and finds the corresponding IP address.
• • • • • • • Public IP Address - An IP address for a resource in your network that is published outside your network to the WAN. Router - A device that routes data between networks through IP address information in the header of the IP packet. A router forwards packets to other routers until the packets reach their destination. The Internet is the largest example of a routed network. Subnet - A portion of a network.
Copyright Notice © 2007 SonicWALL, Inc. All rights reserved. Under the copyright laws, this manual or the software described within, cannot be copied, in whole or part, without the written consent of the manufacturer, except in the normal use of the software to make a backup copy. The same proprietary and copyright notices must be affixed to any permitted copies as were affixed to the original.
Notes FCC Statement This equipment has been tested and found to comply with the limits for a class digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, amy cause harmful interference to radio communications.
Notes Canada Statement Operation is subject to the following two conditions: 1) This device may not cause interference and 2) This device must accept any interference, including interference that may cause undesired operation of the device.
Europe – EU Declaration of Conformity This device complies with the essential requirements of the R&TTE Directive 1999/5/EC.
Česky [Czech] Netgear Inc. tímto prohlašuje, že tento Prosafe Wireless ADSL Modem VPN Firewall Router je ve shodě se základními požadavky a dalšími příslušnými ustanoveními směrnice 1999/5/ES. Dansk [Danish] Undertegnede Netgear Inc. erklærer herved, at følgende udstyr Prosafe Wireless ADSL Modem VPN Firewakk Router overholder de væsentlige krav og øvrige relevante krav i direktiv 1999/5/EF. Deutsch [German] Hiermit erklärt Netgear Inc.
Polski [Polish] Niniejszym Netgear Inc. oświadcza, że Prosafe Wireless ADSL Modem VPN Firewall Router jest zgodny z zasadniczymi wymogami oraz pozostałymi stosownymi postanowieniami Dyrektywy 1999/5/EC. Português [Portuguese] Netgear Inc. declara que este Prosafe Wireless ADSL Modem VPN Firewall Router está conforme com os requisitos essenciais e outras disposições da Directiva 1999/5/CE. Slovensko [Slovenian] Netgear Inc.
