Configuring firewalls to be managed by using Unified Management / NSM On-premise

To configure SonicWall security appliance to be managed using Unified Management / NSM On-premise

1. Navigate to Device | Settings > Administration.
2. In Firewall Administrator tab, under Advanced Management section, select Management using SonicWall Unified Management / NSM On-premise and click Configure.



The SonicWall UM / NSM On-premise Settings page is displayed.



3. In the Unified Management / NSM On-premise Server IP Address field, enter the Unified Management / NSM On-premise server IP address.

4. In the Unified Management / NSM On-premise Syslog Server Port field, enter the Unified Management / NSM On-premise syslog server port. The default value is 514.

5. Select Send Heartbeat Status Messages Only to send only a heartbeat status instead of log messages.

6. Select Unified Management / NSM On-premise behind NAT Device if the Unified Management / NSM console is placed behind a device using NAT on the network. Type the IP address of the NAT device in the NAT Device IP Address field.

7. From the Management Mode drop-down menu, select one of the following Unified Management / NSM modes.

   • IPSec Management Tunnel
   • Existing Tunnel
   • HTTPS

1. If IPSec Management Tunnel is selected, then enter the following:

   • Inbound/Outbound SPI

   • Encryption Algorithms

   • Encrypt and Authenticate (DES MD5)

   • Encryption Key

   • Authentication Key

2. If Existing Tunnel is selected the existing established tunnel is used.

3. If HTTPS is selected, then enter the following:

   • Send Syslog Messages to a Distributed GMS Reporting Server

   • GMS Reporting Server IP Address

   • GMS Reporting Port

8. Enable Out of Band Management on management port to use the dedicated management port for connectivity.

   Enabling this option requires a reboot of the firewall.

9. Click Accept.