SonicWALL 3500 User Manual

Page of 74
SonicWALL NSA 5000/4500/3500 Getting Started Guide  
Page 51
4.
In the 802.11a Radio and 802.11a Adv tabs, configure the 
settings for the operation of the 802.11a radio bands. The 
SonicPoint has two separate radios built in. Therefore, it 
can send and receive on both the 802.11a and 802.11g 
bands at the same time.
5.
The settings in the 802.11a Radio and 802.11a Advanced 
tabs are similar to the settings in the 802.11g Radio and 
802.11g Advanced tabs.
6.
When finished, click OK.
Configuring a Wireless Zone 
You can configure a wireless zone on the Network > Zones 
page. Typically, you will configure the WLAN zone for use with 
SonicPoints. 
1.
On the Network > Zones page in the WLAN row, click the 
icon in the Configure column.
2.
In the Edit Zone dialog box on the General tab, the Allow 
Interface Trust setting automates the creation of Access 
Rules to allow traffic to flow between the interfaces of a 
zone instance. For example, if the WLAN zone has both 
the X2 and X3 interfaces assigned to it, checking Allow 
Interface Trust on the WLAN zone creates the necessary 
Access Rules to allow hosts on these interfaces to 
communicate with each other.
3.
Select the checkboxes for the security services to enable 
on this zone. Typically you would enable Gateway Anti-
VirusIPS, and Anti-Spyware. If you are running 
SonicWALL Client Anti-Virus, select Enable Client AV 
Enforcement Service.
4.
Click the Wireless tab. 
In the Wireless Settings section, select Only allow 
traffic generated by a SonicPoint 
to allow only traffic 
from SonicWALL SonicPoints to enter the WLAN zone 
interface. This allows maximum security on your 
WLAN. Uncheck this option if you want to allow any 
traffic on your WLAN zone regardless of whether or 
not it is from a wireless connection. Uncheck Only 
allow traffic generated by a SonicPoint 
and use the 
zone on a wired interface to allow guest services on 
that interface. 
Select SSL VPN Enforcement to require that all traffic 
that enters into the WLAN zone be authenticated 
through a SonicWALL SSL VPN appliance. 
Note:
SSL VPN Enforcement allows the added security of 
one-time passwords when using a SonicWALL SSL 
VPN appliance.
In the SSL VPN Server list, select an address object 
to direct traffic to the SonicWALL SSL VPN appliance. 
In the SSL VPN Service list, select the service or 
group of services that you want to allow for clients 
authenticated through the SSL VPN.
If your wireless network is already running WiFiSec, 
you can select WiFiSec Enforcement to require that 
all traffic that enters into the WLAN zone interface be 
either IPsec traffic, WPA traffic, or both.