Secure Mobile Access 100 10.2 Deployment Planning Guide

Additional Configuration > Adding a New SMA Custom Zone
Table of Contents

Adding a New SMA Custom Zone

Adding a new SMA custom zone on your gateway appliance is a necessary step in deploying your SMA appliance using Scenarios A and C. For more information, see the following sections:

To add a new SMA custom zone on the gateway appliance

  1. Using SonicOS, log into your gateway appliance as an administrator and navigate to the NETWORK | System > Interfaces page.
  2. Click the edit icon for the interface connected to your SMA, such as X2.

  3. Select Create new zone in the Zone field.

The Add Zone window opens.

  1. Enter SMA in the Name field.
  2. Select Public from the Security Type drop-down menu.
  3. Clear the Allow Interface Trust toggle.

  4. Select the following check boxes:

    • Enable Gateway Anti-Virus Service

    • Enable IPS

    • Enable Anti-Spyware Service

  5. Click Save.
  6. In the Edit Interface window again, enter the IP address for this interface in the IP Address field.

For example:

Scenario A Use an IP address in the default SMA X0 subnet (default 192.168.200.x)
Scenario C Use an IP address in the gateway LAN subnet (default 192.168.168.x)
  1. Enter your Subnet Mask.
  2. Optionally enter the Default Gateway, which is the WAN address of the gateway appliance.
  3. If you want to allow management of the gateway appliance over this interface, select the desired management options.
  4. If you want to allow users to log in to the gateway appliance using this interface, select the desired user login options.
  5. Click OK to apply changes.