How to add a firewall to NSM manually

This is a KB on how to manually add a firewall to NSM.

Warning:

NSM Advanced License will need to reboot firewall when adding to it to NSM.

For NSM Advanced License, NSM will configure reporting on the firewall. The process will enable AppFlow on firewall, which will require firewall reboot to make AppFlow taking effect. For early versions of firewall firmware (before 7.2.0), the rebooting of firewall is automatic. For later version (7.3.0 and later), firewall administrator will need to manually reboot firewall. It is recommended to reboot the firewall in an maintenance window. 

For NSM Essential License, NSM uses CTA reports for reporting. This does not need to configure AppFlow on firewall. It does not need to reboot firewall.

Note:

When adding a firewall to NSM manually, the default admin account needs to be used. If 2FA or TOTP is enabled for default admin account, since NSM cannot read 2FA or TOTP code, manually adding the firewall to NSM will not be successful. In this scenario, use Zero Touch to add the firewall to NSM.

Steps to add a firewall to NSM manually 

Step 1: Log into mysonicwall.com, click on the serial number of the firewall, go to Product Details page, change to Cloud manage, make sure Zero Touch is disabled;

Step 2: Log into NSM this tenant, noticing the firewall is offline unmanaged. Clicking on Hamburg at the end of the line ;

Step 3: Edit Settings popup will show. Enter the login information for the firewall in 3 areas:

IP Address with Port. Note that even it uses default port 443, it has to be included: example 34.25.61.2:443

Username

Password

Step 4: Log into firewall, create access rule to allow NSM WAN access. NSM FQDN and IPs can be found in this KB:

https://www.sonicwall.com/support/knowledge-base/sonicwall-nsm-FQDNs-and-ip-list/200810081626220/

In NSM, firewall status should be eventually Online Managed.