SonicWALL Email Security Solutions EMAIL SECURITY SonicWALL Email Security SonicWALL Email Security 8000 Getting Started Guide
SonicWALL Email Security 8000 Getting Started Guide This Getting Started Guide contains installation procedures and configuration guidelines for deploying a SonicWALL Email Security appliance on your network. SonicWALL Email Security provides effective, high-performance and easy-to-use inbound and outbound email threat protection.
Contents This document contains the following sections: 1 Before You Begin • “Check Package Contents” on page 3 • “What You Need to Begin” on page 4 • “Record Configuration Information” on page 4 • “Overview of the SonicWALL Email Security Appliance” on page 6 2 Registering Your SonicWALL Email Security Appliance • “Before You Register” on page 7 • “Creating a mysonicwall.
1 Before You Begin Check Package Contents 1 One SonicWALL Email Security appliance 2 One Getting Started Guide document 3 One Release Note document Any Items Missing? 4 One Thank You card 5 One SonicWALL Resource CD 6 One crossover cable (red) 7 One Ethernet cable (gray) If any items are missing from your package, contact: SonicWALL Support Email: customer_service@sonicwall.
What You Need to Begin • • • A computer to use as a management station for initial configuration of SonicWALL Email Security software Internet Explorer 5.0 or higher An Internet connection Record Configuration Information Before continuing, record the following configuration information for your reference: Registration Information Page 4 Serial Number: (xxxxxx-xxxxxx) Record the serial number found on the top right access panel of your SonicWALL Email Security appliance.
Networking Information Email Security IP Address: Select a free static IP address for your SonicWALL Email Security appliance that is within the range of your local subnet. Email Security Subnet Mask: Enter the subnet mask for the local subnet where you are installing your SonicWALL Email Security appliance. Gateway IP Address: Record the IP address of your network’s gateway device (such as your perimeter firewall/router). DNS Server 1: Record your DNS Server information.
Overview of the SonicWALL Email Security Appliance SonicWALL Email Security Appliance SCSI Drive 1 SCSI Drive 2 LAN Port Power LED Power Button Serial Port Diagnostic Panel Release Alert LED* HDD LED Power Supply 2 Power Supply 1 * Alerts are explained in detail in light path diagnostic panel. To access, push the diagnostic panel release latch to the left and pull out the panel.
2 Registering Your SonicWALL Email Security Appliance Before you can use your SonicWALL Email Security appliance, you must first register your appliance and activate your licenses for the SonicWALL Email Protection Subscription and Dynamic Support. This section contains the following sub-sections: • “Before You Register” on page 7 • “Creating a mysonicwall.com Account” on page 8 • “Registering Your SonicWALL Email Security Appliance” on page 9 Before You Register You need a mysonicwall.
Creating a mysonicwall.com Account Creating a mysonicwall.com account is fast, simple, and FREE. Simply complete an online registration form. 1. In your Web browser, go to . 2. In the User Login section, click If you are not a registered user, Click here. 3. Enter the account information, personal information, and preferences and click Submit. Note: You must enter a valid email address. 4. Follow the prompts to finish creating your account.
Registering Your SonicWALL Email Security Appliance 1. Locate your SonicWALL Email Security Software serial number. It should be printed on the label on the top right access panel of your SonicWALL Email Security appliance. 2. If you are not already logged into mysonicwall.com, go to and log in. 3. Enter your serial number in the Quick Register field and click the small gray arrow. Follow the on-screen instructions. 4.
3 Initial Setup and Configuration This section contains the following sub-sections: • “Apply Power to the SonicWALL Email Security Appliance” on page 10 • “Connect Directly to the SonicWALL Email Security Appliance” on page 10 • “Login to the SonicWALL Email Security Appliance” on page 11 • “Initial System Configuration” on page 12 • “Activating the Email Security License Subscriptions” on page 15 Apply Power to the SonicWALL Email Security Appliance 1.
3. Using the supplied crossover cable and the computer you are using to administer the SonicWALL Email Security appliance, connect the LAN port on the computer to the LAN (1) port on the back of your SonicWALL Email Security appliance. Login to the SonicWALL Email Security Appliance 1. Open a Web browser on the computer you are using to administer the SonicWALL Email Security appliance. 2. Enter http://192.168.168.
Initial System Configuration 1. The first time you log in to the SonicWALL Email Security appliance, you are directed to the system configuration page. Configure your settings as follows: Monitoring Page 12 Email address of the administrator who receives emergency alerts: The email address of the mail server administrator. Enter the complete email address. For example, user@example.
Hostname and Networking Hostname: Enter a hostname you can use within your network to address the SonicWALL Email Security appliance. Enter a fully qualified domain name. For example, emailsecurity.example.com Get all network settings from DHCP: Select this if you want your SonicWALL Email Security appliance to get dynamic IP settings from the DHCP server on your network. Use the static settings below: Select this to assign your SonicWALL Email Security appliance a static IP address.
Date and Time System Date and Time: Select the current year, month, day, hour, and minute. Current Time Zone: Displays the currently configured time zone. Available Time Zones: Select the time zone for your area. Automatically Adjust for Daylight Savings Time: Select this if your area observes Daylight Saving Time. Note: To ensure optimal network performance of your SonicWALL Email Security appliance, it is important that you select the proper time zone. 2.
Activating the Email Security License Subscriptions SonicWALL Email Security provides dynamic licensing, which allows you to activate your licenses by simply logging into your mysonicwall.com account. The mysonicwall.com server automatically uses the serial number and authentication code that came with your Email Security appliance. Note: If you purchased Total Secure Email, licensing is automatic and you do not need to take any action at all to activate your licenses.
4. In the next License Management screen, click Continue. Licensing is now complete. The License Management screen displays the status, expiration date, and other information about your Email Security licenses.
4 Connecting and Configuring Network Settings This section contains the following sub-sections: • “Connecting the SonicWALL Email Security Appliance to Your Network” on page 17 • “The SonicWALL Email Security Interface” on page 18 • “Change the Default Administrator Password” on page 19 • “Using Quick Configuration to Set Up Email Management” on page 19 Connecting the SonicWALL Email Security Appliance to Your Network Your SonicWALL Email Security appliance is designed to operate in most network setups wi
The SonicWALL Email Security Interface This section describes how to navigate the SonicWALL Email Security Appliance user interface.
Change the Default Administrator Password 1. Login to the SonicWALL Email Security appliance using the IP address you entered in “Hostname and Networking” on page 13. 2. Enter a new management password into the Password field. 3. Navigate to the System > Administration page. 4. Enter it again in the Confirm Password field. 5. Click Apply Changes.
The inbound destination server is the email server that will accept good email after SonicWALL Email Security removes and quarantines junk email. For example, this could be the IP address of a Microsoft Exchange server. The default port is 25. 4. For Inbound SMTP setup, select one of the following: • Allow SMTP recipient addresses to all domains on inbound path or... This option does not restrict incoming email to any domain.
9. Enter a valid LDAP login name and password into the Login name and Password fields. Click What is this? for more information. 10. Click Test LDAP Login and Test LDAP Query to verify your settings. 11. Enter one or more NetBIOS domain name in the NetBIOS domain names field. Click What is this? for more information. 12.
5 Verification and Further Configuration This section contains the following subsections: • “Routing Mail to Your SonicWALL Email Security Appliance” on page 22 • “Verifying Mail from the Internet Through Your SonicWALL Email Security Appliance” on page 23 • “Configuring Outbound Mail Filtering” on page 24 Routing Mail to Your SonicWALL Email Security Appliance In order for your SonicWALL Email Security appliance to start filtering and monitoring mail, you must re-route mail traffic through your SonicWALL
Verifying Mail from the Internet Through Your SonicWALL Email Security Appliance 1. Go to an external mail account, for example Yahoo mail or GMail. 2. Create a new email message: To: An email address where you receive email that is on the mail server for which you have configured the SonicWALL Email Security appliance. Subject: SonicWALL Email Security Verification Message Body: SonicWALL Email Security Verification Message 3. Send the message. 4.
Configuring Outbound Mail Filtering You can have your SonicWALL Email Security appliance filter outbound mail from your mail server to the Internet. To configure outbound mail filtering, you configure both your mail server and your SonicWALL Email Security appliance for the outbound mail path. Configure the outbound mail destination of your mail server to point to the IP address or host name of your SonicWALL Email Security appliance. This is typically done by configuring a Smart Host on your mail server.
3. Browse to the Delivery tab, and click the Advanced button. 4. In the Smart Host field, enter the FQDN on your SonicWALL Email Security appliance (such as, esa.example.com). Note: The Exchange Server must be able to resolve this host name. 5. Click OK. On your SonicWALL Email Security appliance, in the Server Configuration > Network Architecture page, configure a separate, outbound path to handle the outbound email flow at the appliance (if not already configured).
Example Given this: 10.100.0.10: Exchange Server (exch1.example.com) 10.100.0.100: SonicWALL Email Security appliance (esa.example.com) You might have two paths that look like this: Inbound Outbound Source IP Any 10.100.0.10 Listen On Any:25 Any:25 Destination (proxy) exch1.example.com:25 MX In this scenario, any message that arrives at the SonicWALL Email Security appliance from 10.100.0.
Troubleshooting This section contains the following subsection: • Configuring a Static IP Address Configuring a Static IP Address Complete the following section based on your operating system in order to configure your management computer with a static IP address: Windows XP 1. From the Start menu, highlight Connect To and then select Show All Connections. 2. Open the Local Area Connection Properties window. 3.
Regulatory Statement and Safety Instructions Regulatory Model/Type Product Name 1RK10-04D Email Security 8000 This product hardware based on IBM xSeries 336 Type 8837, Model 15U. Refer to safety documentation in this manual and to the complete IBM Safety and EMC information on the SonicWALL Resource CD included with this product. Additional language safety and EMC information can be found on the SonicWALL Resource CD included with this product.
SonicWALL Email Security 8000 Getting Started Guide Page 29
Page 30
For additional safety and regulatory information, refer to the IBM documentation located on the SonicWALL Resource CD included with this product.
Rack Installation Instructions Review the documentation that comes with your rack cabinet for safety and cabling information. Before installing your server in a rack cabinet, review the following guidelines: v Make sure that the room air temperature is below 35°C (95°F). v Do not block any air vents; usually, 15 cm (6 in.) of air space in the rear and 5 cm (2 in.) in the front provides proper airflow. v Plan the device installation starting at the bottom of the rack cabinet.
1 2 Pins extended through: • Rack-mount flange • Rail-mount flange Pins not extended through: • Rack-mount flange • Rail-mount flange Slide the pins away from the rail-mount flange: Attach the rear rail-adjustment bracket to the rack: Press behind the slide-rail release latch 1 and hold it to prevent the rail from sliding back. Press the tab 2 away from the rail. Press the tab 3 back, and slide the rear rack-bracket pins away from the rail-mount flange 4 .
3 Pins extended through: • Rack-mount flange • Rail-mount flange 4 Server Pins not extended through: • Rack-mount flange • Rail-mount flange Side release latch Rail-lock pin Attach the front rail bracket to the rack: Insert the server into the rack cabinet: Press the tab 2 away from the rail. Slide the front rack-bracket pins 1 away from the rail-mount flange 3 until the front rail bracket stays open.
7 Extend the cable-management arm and fasten the cables: Attention: Make sure that you route Fibre Channel cables through the tab 1 , to ensure proper bend radius and prevent damage to these cables. Extend the cable-management arm by sliding the server toward the front of the rack. The rail-lock pins stop the server halfway along the rack. Secure the cables by using the straps that are attached to the cable-management arm.
Copyright Notice © 2007 SonicWALL, Inc. All rights reserved. Under the copyright laws, this manual or the software described within, cannot be copied, in whole or part, without the written consent of the manufacturer, except in the normal use of the software to make a backup copy. The same proprietary and copyright notices must be affixed to any permitted copies as were affixed to the original.
Trademarks SonicWALL is a registered trademark of SonicWALL, Inc. Microsoft Windows 98, Windows NT, Windows 2000, Windows XP, Windows Server 2003, Internet Explorer, and Active Directory are trademarks or registered trademarks of Microsoft Corporation. Adobe, Acrobat, and Acrobat Reader are either registered trademarks or trademarks of Adobe Systems Incorporated in the U.S. and/or other countries. Java is a trademark or registered trademark of Sun Microsystems, Inc. om the U.S. or other countries.
SonicWALL, Inc. 1143 Borregas Avenue T +1 408.745.9600 Sunnyvale CA 94089-1306 F +1 408.745.9300 www.sonicwall.com PN: 232-001160-00 ©2007 SonicWALL, Inc. is a registered trademark of SonicWALL, Inc. Other product names mentioned herein may be trademarks and/or registered trademarks of their respective companies. Specifications and descriptions subject to change without notice.