en-US
search-icon

Cloud GMS Getting Started Guide

Provisioning and Adding Units

The next steps in setting up your SonicWall Cloud GMS are provisioning SonicWall appliances to communicate with Cloud GMS and adding them to the SonicWall Cloud GMS. All SonicWall appliances must be provisioned before adding them to the SonicWall Cloud GMS. Make sure the provisioned SonicWall appliances have a valid Cloud GMS license, one for each SonicWall appliance.

Topics:

Before You Begin

1
Before you begin, you must have a MySonicWall account. Sign up for one at: https://www.MySonicWall.com/user/registration.aspx.
2
Your MySonicWall account must be a partner account to register for a Cloud GMS tenant. To become a SonicWall partner, register at https://www.sonicwall.com/partners/.
Topics:

Start Here

1
Log in to https://Cloud.MySonicWall.com using your MySonicWall credentials.
2
From the Home page, you have an option to sign up for a Free Trial or to register your Cloud GMS (using a beta key or a production key purchased from MySonicWall or through your Sales representative).
3
After you have enrolled for Cloud GMS, you will see a Cloud GMS service status page confirming that you have registered for Cloud GMS.
4
Your registration will be queued up for Cloud GMS Provisioning and an email will sent to you once provisioning is completed and your Cloud GMS login is ready for your use.
5
After you get a Provision Complete email, then you could login to your Cloud GMS Management user interface and begin adding and managing firewalls.
b
Click Manage Cloud GMS from Home or Service management.

Adding new SonicWall Appliances to Cloud GMS

2
Click Manage Cloud GMS from Home or Service management
3
Add a SonicWall appliance using the Cloud GMS Management user interface (see the GMS Getting Started Guide and Administrators Guide for procedures).

Adding existing (registered) SonicWall Appliances to Cloud GMS

Before you begin:
1
SonicWall appliances should be removed from all GMS instances.
3
Click “Manage Cloud GMS” from Home or Service management.
4
Add your SonicWall appliances using the Cloud GMS Management user interface (see the Cloud GMS Getting Started Guide and Admin Guide for procedures).

Provisioning your appliance for managing on Cloud GMS

To provision a SonicWall firewall appliance to support Cloud GMS, complete the following steps:
1
Login to the appliance interface.
2
Go to System > Management page and click Enable Management Using. Select GMS in the drop-down.
3
In the Management Method section, specify the following entries:
a
GMS HostName or IPAddress fields: cloudgms.global.sonicwall.com
b
GMS Syslog Server Port (use default): 514
c
Under Miscellaneous, click Send Heartbeat Status Messages Only.
d
Management Mode: HTTPS

The following screen is how the dialog should appear after configuration.

Allowing access to your appliance from Cloud GMS

1
Add a Rule to Allow Inbound HTTPS traffic on your NAT Device to allow access from Cloud GMS to the WAN interface of your managed appliance.
* 
NOTE: This is critical to manage the appliance from the Cloud GMS application. Without this, the appliance will not be acquired, it will appear Unprovisioned (yellow icon) and the following error will be displayed in the Status screen of the Cloud GMS UI (at the unit level).

Configuring your Appliance for Flow-based Reporting

To configure your appliance for flow-based reporting, make sure of the following:
1
Your appliance is already under management using the steps outlined in the previous sections. Make sure you have also:
a
Added new SonicWall Appliances to Cloud GMS or Added existing (registered) SonicWall Appliances to Cloud GMS.
b
Provisioned your appliance for management on Cloud GMS.
c
Allowed access to your appliance from Cloud GMS.
2
Your appliance in an acquired state – Firewall status is “Up.”

3
Supported Firmware Version on Firewall for Visualization – SonicOS Enhanced 5.8, 6.1 and later.
4
Appliance is licensed for Visualization
a
Navigate to Unit > Policies > AppFlow > Flow Reporting. Follow the instructions on the screen if you see the following screen:

5
After the unit has been acquired, flow reporting is configured automatically. During this process, you might need to reboot the firewall.