SonicWALL Upgrade
Learning the SonicOS Enhanced for our (then) new Pro 3060 was like learning a new language! It was a completely new approach to mapping ports, services, and security. Now that it's time to upgrade to a new SonicWALL, I will be re-familiarizing myself with the ins and outs of the object oriented configuration.
Initially I had planned on simply importing the configuration of the 3060 into the new SonicWALL, but starting over from scratch and simply using the old config as a guide brings a number of benefits. First, I get a refresher course on SonicOS enhanced. Two, I can clean up any old configurations that are no longer relevant. Three, I will be documenting the configuration in detail here for future reference!
Device Comparison
VS
| 3060 | 4500 | |
| Performance | 300+Mbps | Firewall throughput : 1.6 Gbps VPN throughput (3DES/AES) : 1 Gbps Intrusion prevention throughput : 410 Mbps Gateway anti-virus throughput : 500 Mbps Firewall throughput (IMIX) : 680 Mbps Connection rate : 7500 connections per second |
| Wired Speed | 10/100 Mbps | 1 Gbps |
| Security | ICSA Cert, Stateful PI, Unlimited Users |
|
| VPN | 500 licenses | |
Hardware Setup
First things first, right? Get the device set up in the rack. The 4500 comes with some nice brackets that match the brushed aluminum chassis.
After connecting the unit to the local network via the X0 port, I changed my workstation IP to 192.168.168.20 and browsed to the IP address 192.168.168.168. The wizard starts right up, then asks for login information.
Using the default "admin" & "password," I get in and am greeted with a list of red-letter items I need to do;
- Change the password
- Configure the Network
- Specify a DNS server
- Specify an outbound SMTP server
There is also a red notification that the unit is not registered. So, off we go to configure the unit!
Configuration
First thing I notice is that the menu has an updated feel, so it must be a newer OS. The Firmware Version is listed as "SonicOS Enhanced 5.0.0.10-57o," so yes, a much newer version than the older "SonicOS Enhanced 3.1.0.11-30e".
The 4500 is very, very responsive; no waiting for a page to appear, it's instant when you click on a button or link!
Entering the Network menu item and clicking on the configure icon to the far right of the X0 interface allows me to configure the static IP address for the LAN. After assigning a local (available) IP I reconfigure my PC and continue the configuration by changing the admin password, then the DNS Settings.
Next I connect an open WAN link and assign an IP to that interface (X1.)
To register the sonicwall, simply click the "Register" link. If the automated register link doesn't work go to the web site and retrieve the code. Enter it in the provided dialog and click "Update."
The last red-letter item is the mail server address. Browse to Log > Automation, and enter the Mail Server (name or IP), from email address, and also where the logs should be sent. Accept and move to Network!
At this point I want to bring up the old SonicWALL and use the configuration to guide me.
System
Under the system menu there's a new item called "Security Dashboard." It looks like a reporting tool that tracks viruses, intrusions, spyware, and multimedia blockage.