Manual d'usuari del tallafocs SonicWall TZ670 Gen7

1. Introducció

The SonicWall TZ670 Gen7 Firewall is a high-performance desktop security appliance designed for distributed enterprises and midsize organizations. It provides robust scalability and multi-gigabit performance for cloud and collaboration traffic, ensuring comprehensive protection against modern cyber threats.

Les característiques clau inclouen:

• High throughput: 5 Gbps firewall throughput and 2.5 Gbps threat prevention.
• Advanced Protection Service Suite (APSS): Combines Gateway AV, IPS, Application Control, Content Filtering, 24x7 Support, Capture ATP sandboxing, and RTDMI.
• Threat prevention: Protects against ransomware, zero-day exploits, and encrypted attacks with multi-layered security.
• Secure Upgrade Plus program: Allows replacement of qualifying firewalls with a current Gen 7 model and a service subscription.

2. Producte acabatview

2.1 Tauler frontal

Figure 2.1: SonicWall TZ670 Front Panel. This image displays the front of the TZ670 firewall, highlighting the USB 3.0 SuperSpeed ports, various LED indicators (Power, Test, Security, M.2 SSD, WWAN, LAN/MGMT, WAN, RJ45, SFP/SFP+), and port labels (X0-X9).

The front panel of the SonicWall TZ670 features several indicators and ports:

• LED d'alimentació: Indiqueu l'estat d'alimentació del dispositiu.
• LED de prova: For diagnostic purposes.
• LED de seguretat: Indicates security status or alerts.
• M.2 SSD LED: Indicates activity of the M.2 SSD storage.
• USB 3.0 SuperSpeed ports: Dos ports per connectar dispositius externs.
• LED del port LAN/MGMT X0: Status indicator for the LAN/Management port.
• LEDs dels ports WAN X1 i X2: Status indicators for the WAN ports.
• X0-X7 RJ45 Port LEDs: Status indicators for the Ethernet ports.
• X8 / X9 SFP/SFP+ Port LEDs: Status indicators for the fiber ports.
• WWAN LEDs for USB 5G/LTE: Indicate status for wireless WAN connectivity.

2.2 Panell posterior

Figure 2.2: SonicWall TZ670 Rear Panel. This image shows the rear of the TZ670 firewall, detailing the RJ45 Console Port, Micro-USB Console Port, X8/X9 SFP/SFP+ Ports, various RJ45 ports (X0 LAN, X1 WAN, X2 WAN, X3, X4/X5/X6/X7), SafeMode Button, Grounding Screw, Primary Power Input, and Redundant Power Input.

The rear panel provides connectivity and control options:

• Port de la consola RJ45: For direct console access.
• Micro-USB Console Port: Alternative console access.
• X8 / X9 SFP/SFP+ Ports: High-speed fiber connectivity.
• X0 LAN RJ45: Primary LAN port.
• Port X1 WAN RJ45: Primary WAN port.
• Port X2 WAN RJ45: Secondary WAN port.
• Port X3 RJ45: Additional Ethernet port.
• X4 / X5 / X6 / X7 RJ45 Ports: Ports Ethernet addicionals.
• Botó de mode segur: For system recovery or factory reset.
• Cargol de presa de terra: For proper electrical grounding.
• Primary Power Input: Main power connection.
• Entrada d'alimentació redundant: For power redundancy.

3. Configuració

This section outlines the general steps for setting up your SonicWall TZ670 firewall. For detailed configuration, refer to the SonicWall documentation portal.

3.1 Desembalatge i inspecció inicial

1. Carefully unpack the SonicWall TZ670 unit and all accessories from the packaging.
2. Verifiqueu que hi hagi tots els components que figuren a l'albarà d'embalatge.
3. Inspect the unit for any physical damage. If damage is found, contact your vendor immediately.

3.2 Instal·lació física

1. Col·locació: Position the firewall on a stable, flat surface in a well-ventilated area. Ensure adequate space around the unit for airflow.
2. Posada a terra: Connect a grounding wire to the grounding screw on the rear panel and to a suitable earth ground.
3. Connexió d'alimentació: Connect the primary power adapter to the 'Primary Power Input' port and then to an electrical outlet. For redundancy, connect a second power adapter to the 'Redundant Power Input' if available.

3.3 Connexions de xarxa

1. Connexió WAN: Connect your internet service provider's modem or router to the 'X1 WAN RJ45 Port' using an Ethernet cable.
2. Connexió LAN: Connect your internal network switch or a computer to the 'X0 LAN RJ45' port.
3. Console Access (Optional): For initial configuration or troubleshooting, connect a computer to the 'RJ45 Console Port' or 'Micro-USB Console Port' using the appropriate cable.

3.4 Configuració inicial

1. Power on the device. The Power LED should illuminate.
2. Access the management interface via a web browser by navigating to the default IP address (typically 192.168.168.168).
3. Follow the on-screen setup wizard to configure basic network settings, administrator credentials, and register your device.
4. Ensure the device has internet connectivity to download the latest firmware and security updates.

4. Instruccions de funcionament

Once the SonicWall TZ670 is set up, it operates as a central point for network security. Management is primarily performed through its webinterfície gràfica d'usuari (GUI) basada en.

4.1 Accés a la interfície de gestió

1. Obre a web browser on a computer connected to the LAN side of the firewall.
2. Enter the IP address of the firewall (e.g., https://192.168.168.168 or the IP address configured during setup) in the address bar.
3. Log in using your administrator username and password.

4.2 Operacions bàsiques

• Tauler de control: Proporciona un finalview of system status, network activity, and security threats.
• Configuració de la xarxa: Manage interfaces, routing, DHCP, and DNS settings.
• Serveis de seguretat: Configure Gateway Anti-Virus, Intrusion Prevention, Anti-Spyware, Content Filtering, and Application Control.
• VPN: Set up Virtual Private Network connections for secure remote access or site-to-site connectivity.
• Users and Zones: Manage user accounts, authentication methods, and security zones.
• Logs and Reporting: Monitor system events, security alerts, and generate reports.

Regularment review the SonicWall documentation for best practices and advanced configuration guides.

5. Manteniment

Proper maintenance ensures the optimal performance and security of your SonicWall TZ670 firewall.

5.1 actualitzacions de microprogramari

• Regularly check for and apply the latest firmware updates. Firmware updates often include security patches, bug fixes, and new features.
• Before updating, back up your current configuration.

5.2 Configuration Backups

• Perform regular backups of your firewall configuration. This allows for quick restoration in case of a system failure or misconfiguration.
• Store backups in a secure, off-device location.

5.3 Seguiment i registre

• Periòdicament review system logs and security reports for unusual activity or potential threats.
• Ensure that logging is configured to capture relevant security events.

5.4 Medi físic

• Ensure the device remains in a cool, dry, and well-ventilated environment to prevent overheating.
• Keep the area around the firewall free from dust and obstructions.

6. Solució De Problemes

This section provides basic troubleshooting steps for common issues. For more complex problems, consult the SonicWall support resources.

6.1 Problemes d'energia

• Sense energia: Check power cable connections, power outlet, and ensure the power adapter is functioning. Verify the Power LED is illuminated.

6.2 Problemes de connectivitat de xarxa

• Sense accés a Internet: Verify WAN cable connection, check ISP status, and ensure WAN interface is configured correctly in the firewall GUI. Check WAN port LEDs for activity.
• Internal Network Issues: Check LAN cable connections, verify LAN interface configuration, and ensure DHCP server (if enabled on firewall) is functioning. Check LAN port LEDs for activity.

6.3 Management Interface Access

• Cannot Access GUI: Ensure your computer is on the correct network segment, verify the firewall's IP address, and try clearing your browser's cache. If necessary, use the console port for direct access.
• Has oblidat la contrasenya: Use the password recovery procedure outlined in the SonicWall documentation, or perform a factory reset via the SafeMode button (note: this will erase all configurations).

6.4 Indicadors d'estat del sistema

• LED de seguretat: If this LED indicates an alert, check the system logs in the GUI for details on detected threats or security events.
• LED del port: Flashing or solid green/amber LEDs indicate link status and activity. No light may indicate a cable issue or disabled port.

7. Especificacions

The SonicWall TZ670 offers robust hardware and performance capabilities suitable for demanding network environments.

Figure 7.1: SonicWall Gen 7 TZ Series System Specifications (Part 1). This table details general specifications for the TZ270, TZ370, TZ470, TZ570, and TZ670 series, including operating system, interfaces, wireless support, PoE support, storage expansion, management, redundant power, SSO users, VLAN interfaces, and access points supported.

Figure 7.2: SonicWall Gen 7 TZ Series System Specifications (Part 2). This table continues the specifications, focusing on firewall and VPN performance, security services, and networking features for the TZ270, TZ370, TZ470, TZ570, and TZ670 series.

7.1 Especificacions generals

• Dimensions del producte: 19.69 x 19.69 x 11.02 polzades
• Pes de l'article: 2.13 lliures (0.97 quilograms)
• Número de model de l'article: TZ670
• Fabricant: SonicWall
• Sistema operatiu: SonicOS 7.0
• Interfícies: 8x1GbE, 2x10GbE, 2 USB 3.0, 1 Console
• Storage Expansion Slot: Optional up to 256GB, 32GB included
• Font d'alimentació redundant: Sí
• Single Sign-On (SSO) Users: 2,500
• VLAN Interfaces: 256
• Access Points Supported (maximum): 32

7.2 Rendiment

• Firewall Inspection Throughput: 5 Gbps
• Threat Prevention Throughput: 2.5 Gbps
• Application Inspection Throughput: 3 Gbps
• IPS Throughput: 2.5 Gbps
• Anti-Malware Throughput: 2.1 Gbps
• TLS/SSL Inspection and Decryption Throughput (DPI SSL): 800 Mbps
• IPSec VPN Throughput: 2.1 Gbps
• Maximum Connections (SPI): 1,500,000
• Maximum Connections (DPI): 75,000
• Site-to-Site VPN Tunnels: 200
• IPSec VPN Clients (maximum): 200 (500)
• SSL VPN Licenses (maximum): 2 (250)

8. Garantia i Suport

8.1 Informació de la garantia

The SonicWall TZ670, when purchased with the Advanced Protection Service Suite (APSS), includes a 3-year service period. This service suite typically covers hardware warranty during its active period, providing peace of mind and ensuring your device is protected against defects.

For specific warranty terms and conditions, please refer to the official SonicWall warranty documentation provided with your purchase or available on the SonicWall weblloc.

8.2 Suport tècnic

The Advanced Protection Service Suite (APSS) includes 24x7 support. For technical assistance, troubleshooting, or any inquiries regarding your SonicWall TZ670, please contact SonicWall Technical Support.

You can typically find support contact information and resources on the official SonicWall weblloc:

• Portal d'assistència en línia: Access knowledge bases, FAQs, and support tickets.
• Suport telefònic: Contact numbers for regional support centers.
• Documentació: Comprehensive guides and manuals for advanced configurations.