Network Security Management Administration Guide

• Network Security Manager 2.5.0
• Network Security Manager Overview
  • About Network Security Manager
  • Related Documents
  • API Support
  • Legal Information
  • Conventions
    • Guide Conventions
    • UI Conventions
• Dashboard
  • Summary
  • Network
  • Threat
• Firewalls
  • Device Inventory
    • Device Status
      • Management Status
      • System Details
      • License Details
      • Zero Touch Status
      • Template and Firmware Versions
    • Managing Devices
      • Editing Device Settings
      • Multi-device Firmware Upgrade
      • Upgrading Firmware
      • Synchronizing Firewall Configuration with NSM
      • Creating Backup of Device Configuration
      • Manual Firewall Acquisition
    • Firewall View
  • Device Groups
    • Working with Device Groups
      • Creating Device Groups
      • Editing Device Groups
      • Creating Backup of Device-Group Configuration
      • Deleting Device Groups
  • Device Backups
    • Scheduling Backups
    • Archiving TSR
    • Archiving EXP
• Templates and Variables
  • Templates
    • Templates Inventory
    • Creating Templates
    • Editing Templates
    • Viewing Template Configuration
    • Creating Duplicate Template
    • Modifying Template Attributes
    • Applying Templates
    • View Template Status
    • Deleting Templates
    • Storage
  • Golden Template
  • Variable Data
    • Template Variables Overview
    • Add Variable
    • Edit Variable
    • Resolve Variable
    • Delete Variable
    • Using Template Variables
    • Creating Variables within Templates
• SonicWall Switch Configuration in Template
  • Add Switch
  • Edit Port
  • Switches
    • Network
    • Users
    • Static routes
    • 802.1x
    • Radius server
    • ARP
• Certificates
  • Navigating Certificates
  • New Signing Request
  • Commit and Deploy Certificate(s)
  • Configuring SCEP
  • Importing Certificates
  • Deleting Certificates
• Configuration Management
  • Approval Groups
    • Approval Workflow Settings
  • Approval Group Management
    • Searching the Approval Groups
    • Adding a New Approval Group
    • Editing an Approval Group
    • Deleting an Approval Group
    • Setting the Default Approval Group
  • Configuration Management Workflow
    • Committing and Deploying the Updates
      • Committing and Deploying Updates in the Firewall View
      • Committing and Deploying Updates to Device(s) in the Manager View
    • Viewing Pending Configuration Updates
    • Discarding Pending Configurations
    • Monitoring Commits
    • Managing Commits
      • Editing Commits
      • Redeploying Commits
      • Rescheduling Commits
      • Deleting Commits
    • Auditing Configuration Changes
• Tenants
• VPN Topology
  • IPsec VPN Topology
    • Topologies
      • Hub and Spoke Topology
      • Full Mesh Topology
      • Point to Point Topology
    • Security Associations
  • IPsec Monitor
  • Global Settings
• SD-WAN Topology
  • Configuring SD-WAN
  • Basic Information
  • Rules and Devices
    • Service Rule
    • Application Rule
    • Device Selection
• CSC Users
  • CSC User Status
  • Users
    • Sorting and Filtering
    • Editing CSC Users
  • Support Portal Users
  • Roles and Permissions
  • Authentication Servers
• Scheduled Reports
  • Managing the Schedules
    • Creating Scheduled Reports
    • Editing Schedule
    • Running Reports Manually
    • Setting the Report Date Range
  • Archived Reports
    • Downloading Archived Reports
• System Events
  • Configuring Log Settings
  • Alerts and Notifications
  • Configuring Twilio Setting for SMS
  • Viewing System Events
• SonicWall Support
  • About This Document

Service Rule

SERVICE SELECTION

Services - From the drop down list, you can use the predefined service objects. You can also create a new Service Object by choosing Create new Service object. Services and Applications Rules are to be set in the same configuration, but could be independently deployed.

• Name - Enter a name to identify the Service Object.
• Protocol - From the drop down list, you can use the predefined protocol. If you want to use a custom protocol, choose Custom from the drop down list. Enter the custom protocol in the text box.
• Port Range - For some of the predefined protocols, the port range is selected by default.
• Sub Type - Choose a Sub Type from the drop down list. This field is available only for selected protocols.

SLA Criteria

Choose the SLA from the following options by clicking the radio button.

• Lowest Latency
• Lowest Jitter
• Lowest Packet Loss
• Select Custom SLA - To create custom SLA, select Custom SLA.

SOURCE AND DESTINATION

Choose the source and destination using the drop down list.

• Traffic Source / Network - From the drop down list, choose a source.
• Destination - From the drop down list, choose a destination.

PATH SELECTION

These are the settings that help determine the network path that fulfills a specific network performance criteria, from a pool of available network paths.

There should be minimum 2 interfaces selected in the path selection.

WAN Interface - From the drop down list, choose WAN Interface. You can also add Physical and Virtual Interface. You can select multiple WAN Interfaces, which will be used for load-balancing as well as dynamic path selection based on the SLA criteria.

Physical Interface - Following are the fields for physical interface

• By Name - Use "By Name" to add a specific physical interface with a label. Examples: X20, U15, W18.
• By Range - Use "By Range" to add a range of physical interfaces with a common label. Examples: X20-X30, U15-U20, W18-W19.

After choosing the option, click Add to add the physical interface. elect Virtual Interface to view additional settings

Virtual Interface - Following are the fields for Virtual interface

INTERFACE SETTINGS - GENERAL

• Zone - Input a zone name.
• VLAN Tag - VLAN tag 0 or 1
• Parent Interface - Choose an interface from the drop down list.
• Mode / IP Assignment - From the drop down list, choose the mode as Static IP, Tap, Wire, DHCP.
• IP Address - Enter a valid IPV4 address.
• Subnet Mask - Enter a subnet mask address.
• Default Gateway (Optional) - Enter Default Gateway address. This field is optional.
• Comment - You can enter a comment and this field is optional.
• Add rule to enable redirect from HTTP to HTTPS - Toggle to enable or disable the rule.
• MANAGEMENT - Toggle the button to enable or disable the options from HTTPS, Ping, SNMP, SSH.
• USER LOGIN - Toggle the button to enable or disable the user login options from HTTP and HTTPS.

INTERFACE SETTINGS - ADVANCED

• Link Speed - Enter the link speed. You can choose the default MAC address which is 00:00:00:00:00:00 or override the default address by typing in the box below.
• Enable Auto-Discovery of SonicWall Switches - Toggle this to enable or disable auto discovery of SonicWall Switches.
• Enable flow reporting - Toggle this to enable or disable flow reporting on flows created for this interface
• Enable Multicast Support - Toggle this to enable or disable multicast Reception on the Interface
• Exclude from Route Advertisement (NSM, OSPF, BGP, RIP) - Toggle this to enable or disable. Enabling this option will exclude the interface from Route Advertisement.
• Enable Default 802.1p CoS - Toggle this to enable or disable 802.1p. After it is enabled, choose an option from the drop down list.
• Enable Asymmetric Route Support - Toggle this to enable or disable asymmetric Route Support on the Interface.

Backup WAN Interface - From the drop down list, choose backup WAN Interface.

WAN INTERFACE HEALTH CHECK PROBES

• Probe Target - Choose the Probe Target from the drop down list.
• Probe Type - Choose the type as Ping or TCP and enter the value in the text box.