SonicWall CSE: Install the Connector

Overview #

The Connector is a dial-out connector that establishes a secure tunnel with the Global Edge Network. The Connector can be deployed in any location that has connectivity to your internal services. Each Connector only connects outbound and does not need any inbound open ports to operate correctly.

Note that when a Connector is used, traffic flows from entities on the internet to the Global Edge Network (where your organization’s managed Access Tiers reside), and then through the Connector to the internal service.

Network Configuration #

The Connector requires some minimal network configuration.

1. The Connector needs to be able to connect outbound to the internet; it does not need any inbound open ports to operate correctly.

2. Ensure that the Connector server can make an outbound HTTPS connection via port 443 to the Command Center. The Connector does this to register itself and receive its configuration parameters, by making API calls to https://{ccname}.console.banyanops.com/api/v1/. Note that the CCNAME for North American data centres is net, and the CCNAME for European data centers is eucc (i.e., https://net.console.banyanops.com/api/v1/ for U.S. and https://eucc.console.banyanops.com/api/v1/ for Europe).

3. Ensure that the Connector can make an outbound UDP connection to the Global Edge Network. The Connector will pick a port(s) in the range 21000 - 59999 to set up WireGuard tunnels with the Edge Network.

4. Ensure your networking policies allow traffic to flow from the Connector server to backend machines running the applications and services you need to secure access to.

Connector Sizing #

SonicWall recommends starting with 1 vCPU and then monitoring the throughput. If, for example, a 10 Gig link needs to be saturated, then increase vCPUs by a power of 2 (e.g., 1 vCPU, 2 vCPU, 4 vCPU), monitoring the throughput with each additional vCPU.

To monitor vCPU utilization, admins can check AWS cloud monitoring or the Connector instance itself (using the top command).

Download #

Download the latest Connector version here.

Supported OSs and Platforms #

The Connector can be installed using the following install methods on these operating systems and platforms:

Logs Locations for Troubleshooting #

Sections #