SonicWall TZ370 Security Appliance User Manual

1. บทนำ

The SonicWall TZ370 is a high-performance next-generation firewall designed for small to medium-sized businesses, retail locations, and branch offices. It operates on the advanced SonicOS 7.0 operating system, providing robust threat prevention, seamless connectivity, and adaptability to evolving security needs. This appliance is engineered to deliver industry-leading security technologies, protecting networks from ransomware, malware, and zero-day threats.

This manual provides essential information for the setup, operation, maintenance, and troubleshooting of your SonicWall TZ370 security appliance.

Figure 1.1: SonicWall TZ370 Security Appliance

ภาพนี้แสดงด้านหน้า view of the SonicWall TZ370 security appliance, showcasing its compact design and front-facing ports and indicator lights.

คุณสมบัติหลัก:

• TradeUp Program Eligibility: Allows for upgrading to the latest SonicWall appliances with potential savings.
• Gen 7 TZ Series Performance: Delivers industry-validated security effectiveness with best-in-class price-performance for small, mid-sized organizations and distributed enterprises.
• Cloud Secure Edge: A cloud-native Security Service Edge (SSE) solution offering zero-trust network access (ZTNA) and advanced threat protection for secure connectivity across distributed environments.
• Secure Private Access (SPA): A zero-trust solution protecting access to cloud, on-premises, and hybrid resources with granular policy enforcement.
• Secure Internet Access (SIA): A cloud-delivered security solution providing real-time threat prevention, encrypted traffic inspection, and secure browsing.
• Advanced Protection Suite: Includes comprehensive security services such as intrusion prevention, content filtering, application control, and real-time threat intelligence updates.

2. การตั้งค่าและการติดตั้ง

This section outlines the basic steps for setting up your SonicWall TZ370 appliance. For detailed configuration, refer to the SonicWall documentation portal.

2.1. การตรวจสอบเนื้อหาแพ็คเกจ

ก่อนดำเนินการต่อ โปรดตรวจสอบให้แน่ใจว่าส่วนประกอบทั้งหมดอยู่ในบรรจุภัณฑ์ครบถ้วน:

• SonicWall TZ370 Appliance
• อะแดปเตอร์แปลงไฟ
• สายเคเบิลอีเทอร์เน็ต
• คู่มือเริ่มต้นใช้งานฉบับย่อ (ถ้ามี)

2.2. การติดตั้งทางกายภาพ

1. เลือกตำแหน่ง: Select a cool, dry, and well-ventilated area, away from direct sunlight and heat sources. Ensure adequate space for cable management.
2. เชื่อมต่อสายเคเบิลเครือข่าย:
   • Connect your Internet Service Provider's (ISP) modem/router to the WAN port (e.g., X1) on the TZ370.
   • Connect your internal network switch or a computer directly to a LAN port (e.g., X0) on the TZ370.
3. เชื่อมต่อพลังงาน: Plug the power adapter into the appliance's power input and then into a power outlet. The Power LED should illuminate.

Figure 2.1: TZ370W Front Panel Diagram

This diagram illustrates the front panel of the SonicWall TZ370W, highlighting USB 3.0 ports, RJ45 port LEDs, Power LED, Test LED, Security LED, Storage LED, Wireless WO WLAN LED, WAN X1 and X2 Port LEDs, and LAN/MGMT X0 Port LED.

Figure 2.2: TZ370W Rear Panel Diagram

This diagram shows the rear panel of the SonicWall TZ370W, indicating the X2 WAN RJ45 Port, X0 LAN RJ45 Port, Power Input, Grounding Screw, SafeMode Button, X1 WAN RJ45 Port, X3 RJ45 Port, and RJ45 Console Port.

2.3. การกำหนดค่าเริ่มต้น

Access the appliance's web management interface by connecting a computer to the LAN port (X0) and navigating to the default IP address (typically 192.168.168.168). Follow the on-screen wizard for initial setup, including setting up administrator credentials and basic network settings. Ensure you register your product with SonicWall to activate your included services.

3. การดำเนินการ

The SonicWall TZ370 operates on SonicOS 7.0, providing a comprehensive suite of security features. This section covers key operational aspects.

3.1. SonicOS 7.0 Management Interface

การ web-based management interface allows for full control and monitoring of the appliance. Key areas include:

• แดชบอร์ด: ให้มากกว่าview of network activity, threats, and system status.
• เครือข่าย: Configure interfaces, routing, and VPN settings.
• บริการรักษาความปลอดภัย: Manage threat prevention, content filtering, and application control.
• ผู้ใช้งาน: Configure user authentication and access policies.
• Logs & Reporting: View system logs and generate reports on network activity and security events.

3.2. Security Services Overview

Your TZ370 comes with a 3-year Essential Protection Security Suite and 1-year Cloud Secure Edge, providing advanced security capabilities:

• Threat Prevention: Utilizes deep packet inspection (DPI), intrusion prevention system (IPS), and anti-malware to block known and unknown threats.
• การกรองเนื้อหา: Controls access to inappropriate or unproductive web เนื้อหา.
• การควบคุมแอปพลิเคชัน: Manages and prioritizes application usage on the network.
• Cloud Secure Edge: Integrates cloud-native security for remote access and distributed environments.
• Secure Private Access (SPA): Enables secure, zero-trust access to internal resources for remote users.
• Secure Internet Access (SIA): Provides cloud-delivered security for internet browsing, protecting against web-based threats.

Figure 3.1: Protection Service Suite Comparison

This table compares features across Threat Protection Service Suite, Essential Protection Service Suite, and Advanced Protection Service Suite, including 24x7 Support, IPS, Application Control, Content Filtering Service, Gateway Anti-Virus, DNS Security, DNS Filtering, Network Access Control (NAC) Integration, Wi-Fi 6 integration, Deep Packet Inspection for SSL, GeoIP Updates, Botnet Service, Comprehensive Anti-Spam Service, Capture ATP - Sandboxing, NSM (Cloud) Management, NSM (Cloud) Reporting, and Embedded Warranty.

Figure 3.2: Cloud Secure Edge Overview

This diagram illustrates the components of SonicWall Cloud Secure Edge, showing how users connect to Internet Websites (SWG), SaaS Applications (CASB), Cloud Servers (ZTNA), and On-Premises Networks (VPNaaS) through a unified cloud-delivered solution.

Figure 3.3: Secure Private Access and Secure Internet Access Features

This table details the features available for Secure Private Access (Basic and Advanced) and Secure Internet Access (Basic and Advanced), covering Secure Network Access, Secure Access to Private Resources, Internet Threat Protection, SaaS Application Security, Web Content Filtering Service, and Users and Devices management.

4. การบำรุงรักษา

Regular maintenance ensures optimal performance and security of your SonicWall TZ370 appliance.

4.1. การอัปเดตเฟิร์มแวร์

Periodically check for and apply the latest firmware updates from the SonicWall support portal. Firmware updates often include security patches, bug fixes, and new features.

4.2. Configuration Backup

Regularly back up your appliance's configuration settings. This allows for quick restoration in case of a system failure or misconfiguration.

4.3. การตรวจสอบระบบ

Monitor system logs and dashboard alerts for any unusual activity or performance issues. Proactive monitoring can help identify and address potential problems before they escalate.

5 การแก้ไขปัญหา

This section provides general troubleshooting tips for common issues. For complex problems, consult SonicWall support.

5.1. ไม่มีการเข้าถึงอินเทอร์เน็ต

• Verify physical cable connections to WAN and LAN ports.
• Check the status of the WAN interface in the management interface.
• Ensure your ISP modem/router is functioning correctly.
• Confirm DNS settings are correctly configured.

5.2. Slow Network Performance

• Check the appliance's CPU and memory utilization from the dashboard.
• Review security service logs for high threat activity or excessive blocked connections.
• While the TZ370 is designed for high throughput, enabling certain deep packet inspection and security features can impact performance. Evaluate if all enabled security features are essential for your current network needs.
• Ensure your network infrastructure (switches, cables) is not a bottleneck.

5.3. ไม่สามารถเข้าถึงอินเทอร์เฟซการจัดการได้

• Verify your computer is connected to a LAN port and has an IP address within the same subnet as the appliance.
• Try accessing the interface from a different browser or device.
• If necessary, perform a soft reset (refer to the SafeMode button on the rear panel diagram) to restore default network settings without losing configuration.

6. ข้อมูลจำเพาะ

The following table provides detailed technical specifications for the SonicWall TZ370 appliance.

Figure 6.1: SonicWall TZ Series Gen 7 Specifications

This comprehensive table provides detailed specifications for the SonicWall TZ Series Gen 7, including Firewall General, Interfaces, Wireless support, Power over Ethernet, Storage expansion, Management, Single Sign-On (SSO) Users, VLAN interfaces, Access points supported, Firewall/VPN Performance, VPN, Global VPN client platforms supported, NetExtender, Mobile Connect, Security Services, IP addressing, Routing protocols, and Authentication.

7. การรับประกันและการสนับสนุน

Your SonicWall TZ370 appliance includes a 3-year Essential Protection Security Suite and 1-year Cloud Secure Edge. This suite typically includes 24x7 support, IPS, Application Control, Content Filtering Service, and Gateway Anti-Virus, among other features as detailed in the service suite comparison.

For technical assistance, warranty claims, or to access the latest documentation and software, please visit the official SonicWall support website or contact their customer service. Ensure you have your product registration details readily available.

An embedded warranty of $100,000 is typically included with the protection suites, as indicated in the service suite comparison table. This applies to firewalls sold and registered after November 1, 2024.

หากต้องการข้อมูลเพิ่มเติม โปรดเยี่ยมชม Sonicwall Store on Amazon.