SonicWALL EM5000 Manual Do Utilizador

SonicWALL UMA EM5000 Getting Started Guide  

Page 7

GMS Gateway Recommendations

A GMS gateway is a SonicWALL UTM appliance that allows for 
secure communication between the SonicWALL UMA EM5000 
and managed appliance(s) using VPN tunnels. A GMS gateway 
is not required in all deployment scenarios, as described in this 
section. 

When deployed, the GMS gateway must be a SonicWALL VPN-
based network security appliance running SonicOS Enhanced 
firmware or another VPN device that is interoperable with 
SonicWALL VPN. SonicWALL strongly recommends that the 
GMS gateway be, at minimum, a SonicWALL NSA 2400 
network security appliance with SonicOS Enhanced 5.1 or 
higher firmware.The GMS gateway provides a VPN 
management tunnel for each managed appliance. The number 
of management tunnels depends on the number of VPNs 
supported by the GMS gateway appliance and may be a limiting 
factor.

There are three SonicWALL appliance management methods 
with varying GMS gateway requirements. When using HTTPS 
as the management method, it is optional to have a GMS 
gateway between each SonicWALL UMA EM5000 agent server 
and the managed SonicWALL appliance(s). If you select 
Existing VPN tunnel as the management method, a gateway is 
optional. If you select Management VPN tunnel, you must have 
a GMS gateway between the SonicWALL UMA EM5000 agent 
appliance and the managed SonicWALL appliance(s) to allow 
each SonicWALL UMA EM5000 agent to securely communicate 

with its managed appliance(s). The following list provides more 
detail on SonicWALL appliance management methods and 
gateway requirements: 

•

Management VPN tunnel – A GMS gateway is required. 
Each SonicWALL UMA EM5000 agent must have a 
dedicated gateway. The security association (SA) for this 
type of VPN tunnel is created when the appliance is 
configured for SonicWALL GMS management using the 
Management Tunnel method.

•

The SonicWALL UMA EM5000 automatically creates the 
SA in the gateway. For this configuration, the gateway must 
be a SonicWALL VPN-based appliance. The gateway can 
be configured in NAT-Enabled or transparent mode. 

•

Existing VPN tunnel – A GMS gateway is optional. The 
SonicWALL UMA EM5000 can use VPN tunnels that 
already exist in the network to communicate with the 
managed appliance(s). The GMS gateway can be a 
SonicWALL VPN-based appliance or another VPN device 
that is interoperable with SonicWALL VPN.

•

HTTPS – A GMS gateway is optional. The SonicWALL 
UMA EM5000 can use HTTPS management instead of a 
VPN tunnel to communicate with the managed 
appliance(s).