• Network Security Manager 2.4.0
• Network Security Manager Overview
  • About Network Security Manager
  • Related Documents
  • API Support
  • Legal Information
  • Conventions
    • Guide Conventions
    • UI Conventions
• Dashboard
  • Summary
  • Network
  • Threat
• Firewalls
  • Device Inventory
    • Device Status
      • Management Status
      • System Details
      • License Details
      • Zero Touch Status
      • Template and Firmware Versions
    • Managing Devices
      • Editing Device Settings
      • Multi-device Firmware Upgrade
      • Upgrading Firmware
      • Synchronizing Firewall Configuration with NSM
      • Creating Backup of Device Configuration
      • Manual Firewall Acquisition
    • Firewall View
  • Device Groups
    • Working with Device Groups
      • Creating Device Groups
      • Editing Device Groups
      • Creating Backup of Device-Group Configuration
      • Deleting Device Groups
  • Device Backups
    • Scheduling Backups
    • Archiving TSR
    • Archiving EXP
• Templates and Variables
  • Templates
    • Templates Inventory
    • Creating Templates
    • Editing Templates
    • Viewing Template Configuration
    • Creating Duplicate Template
    • Modifying Template Attributes
    • Applying Templates
    • View Template Status
    • Deleting Templates
  • Golden Template
  • Variable Data
    • Template Variables Overview
    • Add Variable
    • Edit Variable
    • Resolve Variable
    • Delete Variable
    • Using Template Variables
    • Creating Variables within Templates
• SonicWall Switch Configuration in Template
  • Add Switch
  • Edit Port
  • Switches
    • Network
    • Users
    • Static routes
    • 802.1x
    • Radius server
    • ARP
• Certificates
  • Navigating Certificates
  • New Signing Request
  • Commit and Deploy Certificate(s)
  • Configuring SCEP
  • Importing Certificates
  • Deleting Certificates
• Configuration Management
  • Approval Groups
    • Approval Workflow Settings
  • Approval Group Management
    • Searching the Approval Groups
    • Adding a New Approval Group
    • Editing an Approval Group
    • Deleting an Approval Group
    • Setting the Default Approval Group
  • Configuration Management Workflow
    • Committing and Deploying the Updates
      • Committing and Deploying Updates in the Firewall View
      • Committing and Deploying Updates to Device(s) in the Manager View
    • Viewing Pending Configuration Updates
    • Discarding Pending Configurations
    • Monitoring Commits
    • Managing Commits
      • Editing Commits
      • Redeploying Commits
      • Rescheduling Commits
      • Deleting Commits
    • Auditing Configuration Changes
• Tenants
• VPN Topology
  • IPsec VPN Topology
    • Topologies
      • Hub and Spoke Topology
      • Full Mesh Topology
      • Point to Point Topology
    • Security Associations
  • IPsec Monitor
  • Global Settings
• SD-WAN Topology
  • Configuring SD-WAN
  • Basic Information
  • Rules and Devices
    • Service Rule
    • Application Rule
    • Device Selection
• CSC Users
  • CSC User Status
  • Users
    • Sorting and Filtering
    • Editing CSC Users
  • Support Portal Users
  • Roles and Permissions
  • Authentication Servers
• Scheduled Reports
  • Managing the Schedules
    • Creating Scheduled Reports
    • Editing Schedule
    • Running Reports Manually
    • Setting the Report Date Range
  • Archived Reports
    • Downloading Archived Reports
• System Events
  • Configuring Log Settings
  • Alerts and Notifications
  • Configuring Twilio Setting for SMS
  • Viewing System Events
• SonicWall Support
  • About This Document

Security Associations

Security Association (SA) is an agreement between two IPsec peers or endpoints. The Security Association contains all the information required for the two peers to exchange data securely. In particular IKE Security Associations are used to specify the type of authentication and which group to use.

To add security association

1. Click Add to add new security association.

2. There are 3 screens to add the association. Click Save after each screen to proceed or Cancel to exit.

3. Basic - Enter the information in each screen :
   1. Security Association Name - Input a name to identify the security association

   2. Authentication Method- Choose an authentication method to establish a secure IPSec VPN.

      • IKE Using shared secret key - Selecting this option requires you to use IKE Phase 1 and 2.

      • Manual Key - Selecting this option opens IPSec SA options.

      • Certificates - Selecting this option lets you select local certificates for individual devices when creating a VPN Topology.

   3. Shared Secret Key - Password for the VPN gateway.
4. IKE Phase 1
   1. Exchange Mode - Choose the mode.
   2. Authentication - Choose the authentication.
   3. Encryption - Choose the encryption.
   4. DH Group - Choose the DH group.
   5. LifeTime - Enter IKE Phase 1 Lifetime in seconds between 120 to 9999999.
5. IKE Phase 2
   1. Protocol - Choose the protocol.
   2. Authentication - Choose the authentication.
   3. Encryption - Choose the encryption.
   4. Enable Perfect Forward Security - Check the box to enable or disable perfect forward security.
   5. LifeTime - Enter IKE Phase 2 Lifetime in seconds between 120 to 9999999.