SonicWall TZ370 Security Appliance User Manual

1. Pengenalan

The SonicWall TZ370 is a high-performance next-generation firewall designed for small to medium-sized businesses, retail locations, and branch offices. It operates on the advanced SonicOS 7.0 operating system, providing robust threat prevention, seamless connectivity, and adaptability to evolving security needs. This appliance is engineered to deliver industry-leading security technologies, protecting networks from ransomware, malware, and zero-day threats.

This manual provides essential information for the setup, operation, maintenance, and troubleshooting of your SonicWall TZ370 security appliance.

Figure 1.1: SonicWall TZ370 Security Appliance

Imej ini memaparkan bahagian hadapan view of the SonicWall TZ370 security appliance, showcasing its compact design and front-facing ports and indicator lights.

Ciri-ciri Utama:

• TradeUp Program Eligibility: Allows for upgrading to the latest SonicWall appliances with potential savings.
• Gen 7 TZ Series Performance: Delivers industry-validated security effectiveness with best-in-class price-performance for small, mid-sized organizations and distributed enterprises.
• Cloud Secure Edge: A cloud-native Security Service Edge (SSE) solution offering zero-trust network access (ZTNA) and advanced threat protection for secure connectivity across distributed environments.
• Secure Private Access (SPA): A zero-trust solution protecting access to cloud, on-premises, and hybrid resources with granular policy enforcement.
• Secure Internet Access (SIA): A cloud-delivered security solution providing real-time threat prevention, encrypted traffic inspection, and secure browsing.
• Advanced Protection Suite: Includes comprehensive security services such as intrusion prevention, content filtering, application control, and real-time threat intelligence updates.

2. Persediaan dan Pemasangan

This section outlines the basic steps for setting up your SonicWall TZ370 appliance. For detailed configuration, refer to the SonicWall documentation portal.

2.1. Pengesahan Kandungan Pakej

Before proceeding, ensure all components are present in the package:

• SonicWall TZ370 Appliance
• Penyesuai Kuasa
• Kabel Ethernet
• Panduan Mula Pantas (jika disertakan)

2.2. Pemasangan Fizikal

1. Pilih Lokasi: Select a cool, dry, and well-ventilated area, away from direct sunlight and heat sources. Ensure adequate space for cable management.
2. Sambungkan Kabel Rangkaian:
   • Connect your Internet Service Provider's (ISP) modem/router to the WAN port (e.g., X1) on the TZ370.
   • Connect your internal network switch or a computer directly to a LAN port (e.g., X0) on the TZ370.
3. Sambungkan Kuasa: Plug the power adapter into the appliance's power input and then into a power outlet. The Power LED should illuminate.

Figure 2.1: TZ370W Front Panel Diagram

This diagram illustrates the front panel of the SonicWall TZ370W, highlighting USB 3.0 ports, RJ45 port LEDs, Power LED, Test LED, Security LED, Storage LED, Wireless WO WLAN LED, WAN X1 and X2 Port LEDs, and LAN/MGMT X0 Port LED.

Figure 2.2: TZ370W Rear Panel Diagram

This diagram shows the rear panel of the SonicWall TZ370W, indicating the X2 WAN RJ45 Port, X0 LAN RJ45 Port, Power Input, Grounding Screw, SafeMode Button, X1 WAN RJ45 Port, X3 RJ45 Port, and RJ45 Console Port.

2.3. Konfigurasi Awal

Access the appliance's web management interface by connecting a computer to the LAN port (X0) and navigating to the default IP address (typically 192.168.168.168). Follow the on-screen wizard for initial setup, including setting up administrator credentials and basic network settings. Ensure you register your product with SonicWall to activate your included services.

3. Operasi

The SonicWall TZ370 operates on SonicOS 7.0, providing a comprehensive suite of security features. This section covers key operational aspects.

3.1. SonicOS 7.0 Management Interface

The web-based management interface allows for full control and monitoring of the appliance. Key areas include:

• Papan pemuka: Menyediakan overview of network activity, threats, and system status.
• Rangkaian: Configure interfaces, routing, and VPN settings.
• Security Services: Manage threat prevention, content filtering, and application control.
• Pengguna: Configure user authentication and access policies.
• Logs & Reporting: View system logs and generate reports on network activity and security events.

3.2. Security Services Overview

Your TZ370 comes with a 3-year Essential Protection Security Suite and 1-year Cloud Secure Edge, providing advanced security capabilities:

• Threat Prevention: Utilizes deep packet inspection (DPI), intrusion prevention system (IPS), and anti-malware to block known and unknown threats.
• Penapisan Kandungan: Controls access to inappropriate or unproductive web kandungan.
• Kawalan Aplikasi: Manages and prioritizes application usage on the network.
• Cloud Secure Edge: Integrates cloud-native security for remote access and distributed environments.
• Secure Private Access (SPA): Enables secure, zero-trust access to internal resources for remote users.
• Secure Internet Access (SIA): Provides cloud-delivered security for internet browsing, protecting against web-based threats.

Figure 3.1: Protection Service Suite Comparison

This table compares features across Threat Protection Service Suite, Essential Protection Service Suite, and Advanced Protection Service Suite, including 24x7 Support, IPS, Application Control, Content Filtering Service, Gateway Anti-Virus, DNS Security, DNS Filtering, Network Access Control (NAC) Integration, Wi-Fi 6 integration, Deep Packet Inspection for SSL, GeoIP Updates, Botnet Service, Comprehensive Anti-Spam Service, Capture ATP - Sandboxing, NSM (Cloud) Management, NSM (Cloud) Reporting, and Embedded Warranty.

Figure 3.2: Cloud Secure Edge Overview

This diagram illustrates the components of SonicWall Cloud Secure Edge, showing how users connect to Internet Websites (SWG), SaaS Applications (CASB), Cloud Servers (ZTNA), and On-Premises Networks (VPNaaS) through a unified cloud-delivered solution.

Figure 3.3: Secure Private Access and Secure Internet Access Features

This table details the features available for Secure Private Access (Basic and Advanced) and Secure Internet Access (Basic and Advanced), covering Secure Network Access, Secure Access to Private Resources, Internet Threat Protection, SaaS Application Security, Web Content Filtering Service, and Users and Devices management.

4. Penyelenggaraan

Penyelenggaraan berkala memastikan prestasi dan keselamatan optimum perkakas SonicWall TZ370 anda.

4.1. Kemas Kini Perisian Tegar

Periodically check for and apply the latest firmware updates from the SonicWall support portal. Firmware updates often include security patches, bug fixes, and new features.

4.2. Sandaran Konfigurasi

Buat sandaran tetapan konfigurasi perkakas anda secara berkala. Ini membolehkan pemulihan cepat sekiranya berlaku kegagalan sistem atau salah konfigurasi.

4.3. Pemantauan Sistem

Monitor system logs and dashboard alerts for any unusual activity or performance issues. Proactive monitoring can help identify and address potential problems before they escalate.

5. Penyelesaian masalah

This section provides general troubleshooting tips for common issues. For complex problems, consult SonicWall support.

5.1. Tiada Akses Internet

• Verify physical cable connections to WAN and LAN ports.
• Check the status of the WAN interface in the management interface.
• Ensure your ISP modem/router is functioning correctly.
• Confirm DNS settings are correctly configured.

5.2. Prestasi Rangkaian Perlahan

• Check the appliance's CPU and memory utilization from the dashboard.
• Review security service logs for high threat activity or excessive blocked connections.
• While the TZ370 is designed for high throughput, enabling certain deep packet inspection and security features can impact performance. Evaluate if all enabled security features are essential for your current network needs.
• Ensure your network infrastructure (switches, cables) is not a bottleneck.

5.3. Cannot Access Management Interface

• Verify your computer is connected to a LAN port and has an IP address within the same subnet as the appliance.
• Try accessing the interface from a different browser or device.
• If necessary, perform a soft reset (refer to the SafeMode button on the rear panel diagram) to restore default network settings without losing configuration.

6. Spesifikasi

The following table provides detailed technical specifications for the SonicWall TZ370 appliance.

Figure 6.1: SonicWall TZ Series Gen 7 Specifications

This comprehensive table provides detailed specifications for the SonicWall TZ Series Gen 7, including Firewall General, Interfaces, Wireless support, Power over Ethernet, Storage expansion, Management, Single Sign-On (SSO) Users, VLAN interfaces, Access points supported, Firewall/VPN Performance, VPN, Global VPN client platforms supported, NetExtender, Mobile Connect, Security Services, IP addressing, Routing protocols, and Authentication.

7. Waranti dan Sokongan

Your SonicWall TZ370 appliance includes a 3-year Essential Protection Security Suite and 1-year Cloud Secure Edge. This suite typically includes 24x7 support, IPS, Application Control, Content Filtering Service, and Gateway Anti-Virus, among other features as detailed in the service suite comparison.

For technical assistance, warranty claims, or to access the latest documentation and software, please visit the official SonicWall support website or contact their customer service. Ensure you have your product registration details readily available.

An embedded warranty of $100,000 is typically included with the protection suites, as indicated in the service suite comparison table. This applies to firewalls sold and registered after November 1, 2024.

Untuk maklumat lanjut, lawati Sonicwall Store on Amazon.