SonicWALL NSA 240 - Page 64

SonicWALL NSA 240 Getting Started Guide Page 59
Configuring a Wireless Zone
You can configure a wireless zone on the Network > Zones
page. Typically, you will configure the WLAN zone for use with
SonicPoints.
1. On the Network > Zones page in the WLAN row, click the
icon in the Configure column.
2. In the Edit Zone dialog box on the General tab, the Allow
Interface Trust setting automates the creation of Access
Rules to allow traffic to flow between the interfaces of a
zone instance. For example, if the WLAN Zone has both
the X2 and X3 interfaces assigned to it, checking Allow
Interface Trust on the WLAN Zone creates the necessary
Access Rules to allow hosts on these interfaces to
communicate with each other.
3. Select the checkboxes for the security services to enable
on this zone. Typically you would enable Gateway Anti-
Virus, IPS, and Anti-Spyware. If your wireless clients are
all running SonicWALL Client Anti-Virus, select Enable
Client AV Enforcement Service.
4. Click the Wireless tab.
• In the Wireless Settings section, select Only allow
traffic generated by a SonicPoint to allow only traffic
from SonicWALL SonicPoints to enter the WLAN Zone
interface. This provides maximum security on your
WLAN. Uncheck this option if you want to allow any
traffic on your WLAN Zone regardless of whether or
not it is from a SonicPoint.
• Select SSL VPN Enforcement to require that all traffic
that enters into the WLAN Zone be authenticated
through a SonicWALL SSL VPN appliance. SSL VPN
Enforcement allows the added security of one-time
passwords when using a SonicWALL SSL VPN
appliance.
• In the SSL VPN Server list, select an address object
to direct traffic to the SonicWALL SSL VPN appliance.
• In the SSL VPN Service list, select the service or
group of services that you want to allow for clients
authenticated through the SSL VPN.
• If your wireless network is already running WiFiSec,
you can select WiFiSec Enforcement to require that
all traffic that enters into the WLAN Zone interface be
either IPsec traffic, WPA traffic, or both. If you have
configured WPA2 as your authentication type, you do
not need to enable WiFiSec.