Regardless of your deployment method (single- or dual-homed), the appliance should be placed between the X0/LAN interface of the SSL VPN appliance and the connection to your internal network. This allows the device to connect out to SonicWall’s licensing and signature update servers, and to scan the decrypted traffic from external clients requesting access to internal network resources.
If your SSL VPN appliance is in two-port mode behind a third-party firewall, it is dual-homed.
To connect a dual-homed SSL VPN appliance
If your SSL VPN appliance is in one-port mode in the DMZ of a third-party firewall, it is single-homed.
To connect a single-homed SSL VPN appliance