Advanced Management

•

Enable management using GMS – Determines whether the Dell SonicWALL Security Appliance is managed using SNMP or Dell SonicWALL Global Management System (GMS). This option is disabled by default, which means management is by SNMP. For how to configure GMS management, see Enabling GMS Management .

This management interface provides a trusted interface to the management appliance. Network connections to this interface is very limited. If the NTP, DNS, and SYSLOG servers are configured in the MGMT subnet, the appliance uses the MGMT IP as the source IP and creates MGMT address object and route policies automatically. All traffic from the management interface is routed by this policy. Created routes display on the Network > Routing page.


	NOTE: The MGMT address object and route policies are create/update IPv4 management IP. As the IPv6 management IP address object is created by default, this feature doesn't work on IPv6 management IP address object creation

For more information on Dell SonicWALL Global Management System, go to http://www.sonicwall.com.

Enabling GMS Management

You can configure the firewall to be managed by Dell SonicWALL Global Management System (Dell SonicWALL GMS).

To configure the firewall for GMS management:

Select the Enable Management using GMS checkbox.

Click Configure. The Configure GMS Settings dialog displays.

Enter the host name or IP address of the GMS Console in the GMS Host Name or IP Address field.

Enter the port in the GMS Syslog Server Port field. The default value is 514.

Optionally, select Send Heartbeat Status Messages Only to send only heartbeat status instead of log messages. This option is disabled by default.

Select GMS behind NAT Device if the GMS Console is placed behind a device using NAT on the network. Enter the IP address of the NAT device in the NAT Device IP Address field. This option is disabled by default.

Select one of the following GMS modes from the Management Mode drop-down menu.

•

Existing Tunnel - If this option is selected, the GMS server and the firewall already have an existing VPN tunnel over the connection. Enter the GMS host name or IP address in the GMS Host Name or IP Address field. Enter the port number in the Syslog Server Port field.

•

HTTPS - If this option is selected, HTTPS management is allowed from two IP addresses: the GMS Primary Agent and the Standby Agent IP address. The Dell SonicWALL Security Appliance also sends encrypted syslog packets and SNMP traps using 3DES and the firewall administrator’s password.

Click OK.