SonicWall Secure Mobile Access 210/410 Quick Start Guide

1 Hardware Overview

SonicWall Secure Mobile Access 210/410 appliances provide a unified secure gateway to access all network and cloud resources.

SMA 210 Front Panel

Features:

• USB Ports (2): External USB ports.
• Ethernet Ports (X0-X1): Provide 1000 Mbps (1 Gb) Ethernet connectivity.
• Console Port: Access the Command Line Interface (CLI) using a compatible console cable.
• Power Button: Press to turn the appliance on or off.
• SafeMode Button: Press and hold for 45 seconds to set the appliance into SafeMode.
• Appliance LEDs:
• Alarm LED: Indicates a critical warning or error (⚠️).
• Test LED: Indicates appliance activity. Solid Yellow: Appliance is starting. Blinking Yellow: SafeMode. Off: Appliance is powered up and operational.
• Power LED: Indicates Power Supply status.

SMA 410 Front Panel

Features:

• USB Ports (2): External USB ports.
• Console Port: Access the Command Line Interface (CLI) using a compatible console cable.
• Ethernet Ports (X0-X3): Provide 1000 Mbps (1 Gb) Ethernet connectivity.
• Power Button: Press to turn the appliance on or off.
• SafeMode Button: Press and hold for 45 seconds to set the appliance into SafeMode.
• Appliance LEDs:
• Alarm LED: Indicates a critical warning or error (⚠️).
• Test LED: Indicates appliance activity. Solid Yellow: Appliance is starting. Blinking Yellow: SafeMode. Off: Appliance is powered up and operational.
• Power LED: Indicates Power Supply status.

SMA 210/410 Rear Panel

Features:

• Power Supply Plug: Use the supplied power cord to provide power to the appliance.
• Exhaust Fans: Provide optimal cooling for the SonicWall SMA appliance.

Regulatory Model Numbers / Products: 1RK33-0BC/SMA 210, 1RK33-0D9/SMA 410

2 Checking Package Contents

Before setup, verify your package contains:

• One SonicWall SMA 210 or SMA 410 Appliance
• One SonicWall Secure Mobile Access Quick Start Guide
• One SonicWall Safety, Environmental, and Regulatory Information (SERI) Guide
• One Ethernet cable
• One serial console cable (RJ45 to DB9)
• One rack-mount kit
• Two power cords (1 North America and 1 Japan)

NOTE: The included power cord is approved for use only in specific countries or regions. Verify it is rated and approved for your location. The power cord is for AC mains installation only.

NOTE: If any items are missing, contact SonicWall Support at https://www.sonicwall.com/support.

Power Input Rating

3 What You Need to Begin

Before installation, ensure you have:

• A Windows, Linux, or macOS computer with an RJ45 Ethernet port for management.
• Administrative access to the network gateway device.

Recording Configuration Information

Record the following for reference:

4 Powering On the SMA Appliance

1. Plug one end of the power cord into the SMA 210/410 and the other into an appropriate power outlet. The appliance turns on automatically.
2. The power LED on the front panel illuminates blue when the appliance is on.
3. The test LED illuminates yellow during boot and turns off when the appliance is ready for configuration.
4. Connect one end of an Ethernet cable to the X0 port of your SMA 210/410.
5. Connect the other end of the cable to the management computer.

5 Accessing the Management Interface

To access the web-based management interface:

1. Configure the LAN adapter on the management computer to use a static IP address in the 192.168.200.x/24 subnet (e.g., 192.168.200.20). Use a Subnet Mask of 255.255.255.0. A Default Gateway is not required. IMPORTANT: Do not use 192.168.200.1, as it conflicts with the appliance.
2. Open a browser and enter https://192.168.200.1 (the default X0 management IP address).
3. NOTE: Accept the security certificate to continue.
4. In the Login screen, enter the default credentials: Username - admin, Password - password, Domain - LocalDomain. Click Login.
5. A Software Transaction Agreement displays. Read it, select "I Accept the terms of this Software Transaction Agreement", and click Continue.

You are now connected to the SMA management interface.

CAUTION: Changing your password from the factory default is strongly recommended. Keep your password in a safe place. Losing it requires resetting the SMA appliance to factory default settings.

NOTE: SonicWall recommends creating a second administrator account to prevent lockout.

6 Setting the Time Zone

Setting the correct time is essential for SMA operations. Automatic synchronization with an NTP server is recommended for accuracy.

To set the time zone:

1. Navigate to the System > Time page.
2. Select the appropriate Time Zone from the drop-down menu.
3. Click ACCEPT to save changes.

7 Configuring DNS/WINS/Route

Configuring DNS / WINS Servers

1. Navigate to the Network > DNS page.
2. Enter a unique name for your appliance in the SMA Appliance Hostname field. NOTE: Use alphanumeric names with no spaces or special characters (underscores are accepted).
3. Enter your Primary DNS Server information.
4. (Optional) Enter a Secondary DNS Server.
5. (Optional) Enter domain suffixes in the DNS Search List: Type each suffix and click Add. Use the up/down arrow keys [⬆️][⬇️] to arrange priority. The first suffix is appended to the hostname to create an FQDN.
6. (Optional) Enter WINS servers in the Primary WINS Server and Secondary WINS Server fields.
7. Click ACCEPT.

NOTE: A system restart is not necessary until you configure the default route.

Configuring your Network Interface

When deploying the SMA on the LAN, reset the X0 interface IP address to be within your existing LAN subnet.

To configure the X0 IP address:

1. Navigate to the Network > Interfaces page.
2. In the Interfaces table, hover over the X0 interface row to display the Configure button and click it.
3. In the Edit Interface X0 screen, set the IP Address to an unused address on the same network as your default gateway.
4. For the Subnet Mask, enter the value matching your LAN subnet mask (e.g., 255.255.255.0).
5. Click OK. Confirm any warnings about changing the X0 IP Address. The appliance restarts automatically. Alternatively, press and hold the power button for 10 seconds to power down, then press again to restart.
6. Reset the management computer to have a static IP address in the range you just set for the X0 interface (e.g., if X0 is 10.1.1.10, set your computer to 10.1.1.20).
7. Log into the SMA management interface again using the new X0 IP address (e.g., https://10.1.1.10).

Configuring a Default Route

To configure a default route:

1. Navigate to the Network > Routes page.
2. Enter the LAN interface IPv4 address in the Default IPv4 Gateway field or the IPv6 address in the Default IPv6 Gateway field.
3. Select X0 as the interface and click ACCEPT.

8 Deploying Your Appliance

This guide covers LAN deployment. For DMZ deployment, see the SMA 210/410 Deployment Guide.

The primary interface (X0) connects to the gateway device. Encrypted user sessions pass through the gateway to the SMA, which decrypts them and determines the requested resource. Session traffic then traverses the gateway to internal network resources, where the gateway applies security services. The resource returns content to the SMA, where it is encrypted and sent to the client.

Before deploying, add a custom zone on your gateway appliance. This can be done when editing an interface in SonicOS/SonicOSX 7 or from the Network > Interfaces page in SonicOS 6.5. Refer to the SonicOS/X 7 System Administration Guide or the SonicOS 6.5 System Setup Administration Guide for details on creating custom zones.

Connecting the SMA to the Gateway

To connect the SMA using the LAN:

1. Connect one end of an Ethernet cable to an unused port on your LAN hub or switch.
2. Connect the other end to the X0 port on the front of your SMA 210/410. The X0 Port LED lights up, indicating an active connection.

9 Registering Your SMA Appliance

A MySonicWall account is required for product registration. Create one at www.MySonicWall.com.

To register your SMA appliance:

1. On the System > Status page, click the "Register your SonicWall appliance" link. The System > Licenses page displays.
2. On the System > Licenses page, click the register link at the top.
3. On the System > Licenses > License Management page, enter your MySonicWall credentials and click Submit.
4. On the System > Licenses > License Management > Registration Completed page, click Continue.

NOTE: Your SMA 210/410 comes with SMA 10.2 firmware. Newer firmware, user licenses, and services are available at www.MySonicWall.com. See the SMA Upgrade Guide for more information.

10 Configuring NetExtender Settings

Adding a NetExtender Client Route

NetExtender allows remote clients seamless access to local network resources.

To configure a NetExtender client route:

1. Navigate to the Clients > Routes page.
2. To force all SMA client traffic through the NetExtender tunnel, select Enabled from the Tunnel All Mode drop-down list.
3. Click ADD CLIENT ROUTE.
4. Enter the network address of the trusted network in the Destination Network field (e.g., 192.168.168.0 for your LAN).
5. Enter the subnet mask of the destination network in the Subnet Mask field (e.g., 255.255.255.0).
6. Click ACCEPT to finish adding the route.

Setting Your NetExtender Address Range

The NetExtender address range is the IP pool for remote users. Ensure it's large enough for concurrent users.

The range should be within the same subnet as the SMA's connected interface and must not overlap with other hosts on the same segment.

Example: If your LAN is 192.168.168.0/24 and you need 10 concurrent sessions, use 192.168.168.240 to 192.168.168.249.

To set your NetExtender address range:

1. Navigate to Clients > Settings.
2. Enter an unused address range within your LAN in the Client Address Range Begin and Client Address Range End fields.
3. Click ACCEPT to add the Client Address Range.

If you lack sufficient addresses, you may use a new subnet for NetExtender. This might occur if your LAN uses NAT mode with a small subnet or Transparent mode with limited public addresses. Assign a new, unallocated IP range to NetExtender (e.g., 192.168.10.100 to 192.168.10.200) and configure a route on your gateway appliance.

Example: For a Transparent range of 67.115.118.75-80 and needing 50 NetExtender clients, configure the SMA X0 interface with an available IP (e.g., 67.115.118.80) and the NetExtender range as 192.168.10.100-200. On your gateway, configure a static route to 192.168.10.0 using 67.115.118.80.

11 Verifying Connection from the Internet

You can verify your connection using a remote client on the WAN.

To verify a connection from the Internet:

1. From a WAN connection outside your corporate network, launch a browser and enter: https://<WAN_IP_address_of_SMA>
2. When prompted, enter administrator or user credentials (e.g., admin / password).
3. Select LocalDomain or your configured domain and click Login. The SonicWall Virtual Office screen displays.
4. Click NetExtender to start the client installation.
5. If prompted to install the SMA Connect Agent, click DOWNLOAD and complete the installation. Click [Details] for more information.
6. Ping a host on your corporate LAN to verify your remote connection. Your SMA appliance is now successfully set up.

TIP: Using a fully qualified domain name (FQDN) is easier for remote users than an IP address. Create a DNS record for FQDN access. Contact your ISP if you don't manage your own public DNS servers.

12 Next Steps

Based on your network requirements, consider:

• Configuring Custom Zones
• Configuring NetExtender
• Configuring Application Offloading

For advanced configuration topics, see the SMA Administration Guide.

13 Safety and Regulatory Information

This section provides safety, regulatory, trademark, copyright, and warranty information.

Appliance Mounting Information

For proper installation:

1. The SonicWall appliance is designed for standard 19-inch rack mounting.
2. Use rack manufacturer-recommended hardware and ensure the rack is adequate.
3. Ensure no water or excessive moisture enters the unit.
4. Allow unrestricted airflow around the unit and through side vents. A minimum of 1 inch (25.44mm) clearance is recommended.
5. Route cables away from power lines, fluorescent lighting, and noise sources (radios, transmitters, amplifiers).
6. Mount in a location away from direct sunlight and heat sources. Maximum ambient temperature: 104°F (40°C).
7. If installed in a closed or multi-rack assembly, the operating ambient temperature may be higher than room ambient. Consider this when installing.
8. Mount the SonicWall appliance evenly in the rack to prevent hazardous conditions from uneven mechanical loading.
9. Use four compatible mounting screws and hand-tighten them for secure installation. Align mounting holes with the 19-inch rack mount cabinet's mounting bars.
10. A suitably rated and approved branch circuit breaker should be part of the building installation. Follow local codes.
11. Consider the connection of the equipment to the supply circuit. Do not overload the circuit; observe equipment nameplate ratings.
12. Maintain reliable grounding of rack-mounted equipment. Pay attention to power supply connections like power strips.
13. The included power cords are approved for specific countries/regions. Verify suitability for your location.
14. Minimum power cord rating for EU (CE): Certified cord not lighter than light PVC sheathed flexible cord per IEC 60227 (H05 VV-F or H05 VVH2-F2), rated for at least 3G 0.75 mm².
15. For GS-Marked rack-installed products: This equipment is not intended for use at workplaces with visual display units, per §2 of the German ordinance.

Sicherheitsanweisungen (Safety Instructions - German)

For proper mounting, observe the following:

• SonicWall models are designed for standard 19-inch rack mounting.
• Ensure the rack is suitable and use recommended mounting hardware.
• Protect the unit from water and high humidity.
• Ensure air circulation around the unit and clear side vents (min. 26mm clearance).
• Route network cables away from power lines, fluorescent lights, and noise sources.
• Mount away from direct sunlight and heat sources; max ambient temperature 40°C.
• In closed/multi-rack assemblies, ambient temperature may be higher; ensure it does not exceed 40°C.
• Mount horizontally in the rack to avoid hazards from uneven mechanical loading.
• Use four matching mounting screws, hand-tighten securely. Align mounting holes with rack mounting bars.
• A suitably rated and tested fuse should be part of the building installation; follow local codes.
• Check the device's connection to the power supply to avoid overloading. Carefully check the device's nameplate ratings. Do not overload the circuit.
• Ensure reliable grounding of rack-mounted equipment, especially for connections via power strips.
• Included power cords are approved only for specific countries/regions; verify suitability for your location.
• Minimum power cord rating for EU (CE): Certified cord not lighter than light PVC sheathed flexible cord per IEC 60227 (H05 VV-F or H05 VVH2-F2), rated for at least 3G 0.75 mm².
• For GS-Marked rack-installed products: This equipment is not intended for use at workplaces with visual display units, per §2 of the German ordinance.

Lithium Battery Warning

The Lithium Battery in the SonicWall SMA 210/410 appliance cannot be replaced by the user. Return the appliance to an authorized SonicWall service center for replacement. Dispose of the battery or appliance according to the manufacturer's instructions.

Sicherheitsanweisungen zur Lithiumbatterie (Lithium Battery Safety Instructions - German)

The Lithium Battery used in the SonicWall SMA 210/410 appliance may not be replaced by the user. The appliance must be returned to a SonicWall authorized service center for replacement with the same or equivalent type recommended by the manufacturer. If, for any reason, the battery or SonicWall SMA 210/410 appliance must be disposed of, do so following the battery manufacturer's instructions.

Cable Connections

All Ethernet and RS232 (Console) cables are designed for intra-building connection to other equipment. Do not connect these ports directly to communication wiring or other wiring that exits the building where the SonicWall appliance is located.

Kabelverbindungen (Cable Connections - German)

All Ethernet and RS232 (Console) cables are designed for intra-building connection to other equipment. Do not connect these ports directly to communication wiring or other wiring that exits the building where the SonicWall appliance is located.

安全說明 (Safety Instructions - Chinese)

For proper installation, the following conditions are required:

• SonicWall appliances are designed for standard 19-inch rack mounting.
• Use rack manufacturer-recommended hardware and ensure the rack is adequate.
• Ensure no water or excessive moisture enters the unit.
• Allow unrestricted airflow around the unit and through side vents. Minimum 1 inch (25.44mm) clearance recommended.
• Route cables away from power lines, fluorescent lighting, and noise sources like radios, transmitters, and broadband amplifiers.
• Mount in a location away from direct sunlight and heat sources. Maximum ambient temperature: 104°F (40°C).
• If installed in a closed or multi-rack assembly, the operating ambient temperature may be higher than room ambient. Consider this when installing.
• Mount the SonicWall appliance evenly in the rack to prevent hazardous conditions from uneven mechanical loading.
• Use four compatible mounting screws and hand-tighten them. Align mounting holes with the 19-inch rack mount cabinet's mounting bars.
• A suitably rated and approved branch circuit breaker should be part of the building installation. Follow local codes.
• Consider the connection of the equipment to the supply circuit. Do not overload the circuit; observe equipment nameplate ratings.
• Maintain reliable grounding of rack-mounted equipment. Pay attention to power supply connections like power strips.
• The included power cords are approved for specific countries/regions. Verify suitability for your location.
• Lithium Battery Warning: The Lithium Battery used in the SonicWall SMA 210/410 appliance may not be replaced by the user. The appliance must be returned to a SonicWall authorized service center for replacement with the same or equivalent type recommended by the manufacturer. If, for any reason, the battery or SonicWall SMA 210/410 appliance must be disposed of, do so following the battery manufacturer's instructions.
• Cable Connections: All Ethernet and RS232 (Console) cables are designed for intra-building connection to other equipment. Do not connect these ports directly to communication wiring or other wiring that exits the building where the SonicWall appliance is located.

台灣RoHS / 限用物質含有情況標示資訊 (Taiwan RoHS / Restricted Substances Information)

Declaration of Conformity

A "Declaration of Conformity" in accordance with the directives and standards has been made and is on file at SonicWall International Limited, City Gate Park, Mahon, Cork, Ireland. CE declarations can be found online at: https://www.sonicwall.com/support.

NOTE: Additional regulatory notifications and information for this product can be found online at: https://www.sonicwall.com/support.

Warranty Information

SonicWall Inc. warrants the product against defects in materials and workmanship under normal use for twelve (12) months from the delivery date (or not more than ninety (90) days after original shipment). This Limited Warranty is non-transferable and applies only to the original end user. SonicWall's sole liability and the customer's exclusive remedy is shipment of a replacement product, which may be of equal or greater functionality and new or like-new quality.

SonicWall's obligations are contingent upon the return of the defective product according to SonicWall's Support Services policies.

This warranty does not apply if the product has been subjected to abnormal electrical stress, damaged by accident, abuse, misuse, misapplication, or unauthorized modification.

DISCLAIMER OF WARRANTY: EXCEPT AS SPECIFIED, ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS, AND WARRANTIES, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NONINFRINGEMENT, SATISFACTORY QUALITY, OR ARISING FROM COURSE OF DEALING, LAW, USAGE, OR TRADE PRACTICE, ARE EXCLUDED TO THE MAXIMUM EXTENT ALLOWED BY APPLICABLE LAW. IMPLIED WARRANTIES ARE LIMITED IN DURATION TO THE WARRANTY PERIOD. SOME JURISDICTIONS DO NOT ALLOW LIMITATIONS ON IMPLIED WARRANTY DURATION.

DISCLAIMER OF LIABILITY: SONICWALL'S SOLE LIABILITY IS THE SHIPMENT OF A REPLACEMENT PRODUCT. SONICWALL OR ITS SUPPLIERS ARE NOT LIABLE FOR ANY DAMAGES, INCLUDING LOSS OF PROFITS, BUSINESS INTERRUPTION, LOSS OF INFORMATION, OR OTHER PECUNIARY LOSS ARISING FROM USE OR INABILITY TO USE THE PRODUCT, OR FOR SPECIAL, INDIRECT, CONSEQUENTIAL, INCIDENTAL, OR PUNITIVE DAMAGES, HOWEVER CAUSED AND REGARDLESS OF THE THEORY OF LIABILITY. Liability shall not exceed the price paid by the customer. These limitations apply even if the warranty fails of its essential purpose. SOME JURISDICTIONS DO NOT ALLOW LIMITATION OR EXCLUSION OF CONSEQUENTIAL OR INCIDENTAL DAMAGES.