SONICWALL TZ670 Network Security User Guide

: June 13, 2024
: SONICWALL

Table of Contents

SONICWALL TZ670 Network Security
Product Information
Product Usage Instructions
Introduction
Prerequisites
Benefits
Use-case Scenarios of MSSP Monthly Services
Registering Hardware
- Registering Hardware through MSW
- Registering Hardware through the User Interface
Provisioning Licenses for TZ and NSa
- Provisioning Licenses from Tenant Products
- Provisioning Licenses from MSSP Tenants
Validating Licenses through User Interface
SonicWall Support
About This Document
References
Read User Manual Online (PDF format)
Download This Manual (PDF format)

SONICWALL TZ670 Network Security

SONICWALL-TZ670-Network-Security-product

Product Information

The TZ & NSa MSSP Monthly Services is a service offered by SonicWall for Gen 7 TZ and NSa hardware. It provides threat protection, essentials protection, and advanced protection services, as well as network security manager essentials and advanced services. The service is available on specific models of TZ and NSa products.

The service offers simple provisioning, monthly billing, unified billing with other MSSP Monthly program products, PSA integration, and the ability to scale up or down at any time. It is a cost-effective service without any up-front or long-term commitments.

Product Usage Instructions

Prerequisites
Before provisioning the license for TZ or NSa products under MSSP Monthly services, ensure the following prerequisites are met:

You own a Gen 7 TZ or NSa hardware. Note that you cannot license secondary units in high-availability pairs; only the primary unit can be licensed.
You cannot license Security-as-a-service (SECAAS) units.
You need to be part of the MSSP Monthly program. If you are not already a part of the program, you can follow the link https://www.sonicwall.com/partners/become-a-partner/ to become a partner.

Registering Hardware
Registration is an important part of the setup process to receive the benefits of SonicWall security services, firmware updates, and technical support. You can register a newly purchased TZ or NSa hardware in one of the following ways:

Registering Hardware through MSW
Registering Hardware through the User Interface

Provisioning Licenses for TZ and NSa
To provision licenses for TZ and NSa products, follow the appropriate steps:

Provisioning Licenses from Tenant Products
Provisioning Licenses from MSSP Tenants

Validating Licenses through the User Interface
To validate licenses, use the user interface and follow the provided instructions.

SonicWall Support
For any assistance or support related to the product or service, refer to the SonicWall Support section in the user manual.

Introduction

This Getting Started Guide provides information on SonicWall Gen 7 TZ and NSa products. MSSP program is a monthly service offer that is being extended to support Gen 7 TZ (TZ670, TZ 570, TZ 470, TZ370, TZ270, TZ 570W, TZ 470W, TZ370W, TZ270W, TZ570P) and NSa (NSa 6700, NSa 5700, NSa 4700, NSa 3700, NSa 2700) models. Services expire on the last day of the month if you do not renew before the expiry date. You do not get any grace period to renew the services before the unit gets deactivated. When the service expires, MSW deletes the service immediately.

NOTE:
The license expiry date for TZ or NSa devices that are licensed through the monthly billing program shows as the end of the month but the license gets renewed every month automatically.

SonicWall offers below listed SKUs:

SKU/Description

Threat Protection Service Suite (TPSS) Available only on TZ 270, TZ 370, and TZ 470
Essentials Protection Service Suite (EPSS) Available on all Gen7 TZ and NSA products
Advanced Protection Service Suite (APSS) Available on all Gen7 TZ and NSa product
Network Security Manager Essentials Available for TPSS and APSS
Network Security Manager Advanced Available only for EPSS

Below are examples of the TZ service statuses screenshots:

Service Expired

$SONICWALL-TZ670-Network-Security-fig- $1$$

Service Renewed

$SONICWALL-TZ670-Network-Security-fig- $2$$

Unit Deactivated

$SONICWALL-TZ670-Network-Security-fig- $3$$

Below are the sample descriptions for each type of SKU:

SonicWall TZ 470 Total Secure – Essential Edition 1 MO
SonicWall TZ 470 Total Secure – Advanced Edition 1 MO
SonicWall TZ 470 Total Secure – Threat Protection Edition 1 MO
SonicWall Network Security Manager Essentials with Management and 7-day Reporting
SonicWall Network Security Manager Advanced for TZ 470 2YR

Prerequisites

Make sure that the below-listed prerequisites are met to provision the license for TZ or NSa products under MSSP Monthly services:

You own a Gen 7 TZ or NSa hardware.
NOTE:
- You cannot license the secondary units in high availability pairs, you must license the primary.
- You cannot license Security-as-a-service (SECAAS) units.
You are part of the MSSP Monthly program. If you are not part of the MSSP Monthly program, follow the link https://www.sonicwall.com/partners/become-a-partner/.

Benefits

MSSP Monthly Services is a cost-effective service without any up-front or long-term commitments and provides in-arrear billing options according to MSSP’s billing procedure. You can enjoy the benefits listed below over annual licensing when you provision the licenses through MSSP Monthly services.

Simple provisioning
Monthly billing
Unified billing with other MSSP Monthly program products
PSA Integration
No need for renewal management
Lower upfront costs
Ability to scale up or down at any time

Use-case Scenarios of MSSP Monthly Services

You can use MSSP Monthly services to provision the licenses for Gen 7 TZ or NSa in the below-listed scenarios.

Newly procured Gen 7 TZ or NSa hardware. Follow the steps listed below to provision a new Gen 7 TZ or NSa.
1. Registering Hardware
2. Provisioning Licenses for TZ and NSa
Renewing or converting an existing Gen 7 TZ or NSa. Convert an existing Gen 7 TZ or NSa license into an MSSP Monthly license according to Provisioning Licenses for TZ and NSa.
- NOTE: Converting an existing annual license into an MSSP Monthly license overwrites the remaining value of the license and will be lost.

Registering Hardware

Registration is an important part of the setup process and is necessary to receive the benefits of SonicWall security services, firmware updates, and technical support. You can register a newly purchased TZ or NSa hardware in one of the following ways:

Registering Hardware through MSW
Registering Hardware through the User Interface

Registering Hardware through MSW

To register a newly purchased TZ and NSA hardware through MSW:

Login to MySonicWall.
Provision the Tenant if not provisioned.
For more information about provisioning tenants, refer to the Master or Regular MSSP Feature Guide available on the SonicWall Technical Documentation portal.
Navigate to MyWorkspace > Register Products.
Select the Tenant to which you want to register the hardware.
Enter a Serial number or Activation key or Assign a token of the purchased TZ and NSa hardware.
Enter the Authentication code if prompted.
For more information about the identification of the Serial number and Authentication Code on the hardware, click the Help icon next to the Authentication Code field.
Navigate to MSSP Monthly > MSSP Tenants and make sure that the tenant information is complete to which the new hardware is registered.
If the tenant information is incomplete, it looks similar to the below screenshot. Update the tenant information to continue with provisioning through MSSP Monthly services.

Registering Hardware through the User Interface

To register a newly purchased TZ or NSa hardware through a user interface (UI):

Continue from the Setup Guide or point your browser to the appliance LAN IP address (default https://192.168.168.168) and log in using the administrator credentials.
Click Register in the top banner or on the MONITOR | Current Status | System Status page under Security Services.
TIP: Registering the appliance from TZ or NSa UI requires that DNS Server settings are configured on the WAN (X1) interface.
Log in using your MySonicWall account name and password. If you do not have a MySonicWall account, go to https://www.mysonicwall.com to create an account.
MySonicWall directly obtains the necessary information from the appliance. When finished, a message that the registration has been completed appears. Click CONTINUE.

Provisioning Licenses for TZ and NSa

You can provision the licenses for the registered Gen 7 TZ or NSa products under MSSP Monthly services in one of the following ways:

From Tenant Products page according to Provisioning Licenses from Tenant Products.
From MSSP Tenants page according to Provisioning Licenses from MSSP Tenants.

Refer to the Master and Regular MSSP Feature Guides available on the SonicWall Technical Documentation portal for TZ and NSa Gen 7 products:

Provisioning MSSP, Tenant, and Product
License Usage Report
Inviting a new User
Creating a new User Group

Provisioning Licenses from Tenant Products

To provision a product from the Tenant Products page:

Login to MySonicWall.
Navigate to MyWorkspace > Tenant Products.
Identify and click the serial number from the list for which you want to enable MSSP Monthly services.
Enable MSSP Monthly Managed? under the Product Details tab. $SONICWALL-TZ670-Network-Security-fig- $7$$
Select the Security Service Bundle and the respective NSM Saas (Cloud).
Bundle/NSM Saas (Cloud)
- Threat Protection Service Suite Network Security Manager Essentials Network Security Manager Advanced
- Essentials Protection Service Suite Not applicable Network Security Manager Advanced
- Advanced Protection Service Suite Network Security Manager Essentials
  NOTE: Network Security Manager Essentials comes with Advanced Protection Service Suite. No action is required here. By default, NSM Essentials is selected and you cannot make any changes to it.
Set the Expiry Date for the Security Service Bundle and NSM Saas (Cloud).
NOTE: If Advanced Protection Service Suite is selected as a Security Service Bundle, you need to set the Expiry Date only for Advanced Protection Service Suite.
Disable the Zero Touch if you want to turn it off for the product. By default, the Zero Touch option is enabled.
The Zero Touch option is available only if Advanced Protection Service Suite or NSM licensing is selected.
Check I understand that by provisioning MSSP Monthly licensing, my annual licensing will be overwritten and the remaining value of the license will be lost box to overwrite an existing license value.
NOTE: This only applies if you are converting an active existing annual license.
Click Provision.
Check the STATUS of the added Product in the MSSP Tenants table.
- Active The Product is successfully provisioned, and ready to use.
- Provisioning in progress The Product provisioning is in progress. Wait until the status is changed to Active to use the Product.
- Expired The Product is expired and not available for use.

NOTE: You can find the CSC Console icon for the Active Products except for NSv Products.

Provisioning Licenses from MSSP Tenants

To provision a product from the MSSP Tenants page:

Login to MySonicWall.
Navigate to MSSP Monthly | MSSP Tenants.
Click Provision > Product.
Select the MSSP Name and Tenant Name under which you want to add the Product.
NOTE: You get the MSSP Name option if you are a Master MSSP only.
Select Gen7 TZ & NSa from the Product list.
Select Firewall from the list.
You can either Register a New Firewall or select the already registered firewall from the list. When you select:
- Register a New Firewall, a new tab opens to register a new firewall. For more information, refer to Registering Hardware through MSW.
- An existing firewall from the list, displays Active Annual & Perpetual Licensing statuses, Security Services Bundle, and NSM Saas (Cloud).
  NOTE: Provisioning an existing annual license into an MSSP Monthly license overwrites the remaining value of the license and will be lost.
Click the Refresh icon next to the Select Firewall field if you register a new firewall.
Select the Security Service Bundle and the respective NSM Saas (Cloud).
Security Service Bundle/NSM Saas (Cloud)
- Threat Protection Service Suite Network Security Manager
- Essentials Network Security Manager Advanced
- Essentials Protection Service Suite Not applicable Network Security Manager Advanced
- Advanced Protection Service Suite Network Security Manager Essentials
  NOTE: Network Security Manager Essentials comes with Advanced Protection Service Suite. No action is required here. By default, NSM Essentials is selected and you cannot make any changes to it.
Set the Expiry Date for the Security Service Bundle and NSM Saas (Cloud).
NOTE: If Advanced Protection Service Suite is selected as a Security Service Bundle, you need to set the Expiry Date only for Advanced Protection Service Suite.
Disable the Zero Touch if you want to turn it off for the product. By default, the Zero Touch option is enabled. The Zero Touch option is available only if Advanced Protection Service Suite or NSM licensing is selected.
Check I understand that by provisioning MSSP Monthly licensing, my annual licensing will be overwritten and the remaining value of the license will be lost box to overwrite an existing license value.
NOTE: This only applies if you are converting an active existing annual license.
Click Provision.
Check the STATUS of the added Product in the MSSP Tenants table.
- Active The Product is successfully provisioned, and ready to use.
- Provisioning in progress The Product provisioning is in progress. Wait until the status is changed to Active to use the Product.
- Expired The Product is expired and not available for use.
  NOTE: You can find the CSC Console icon for the Active Products except for NSv Products.

Validating Licenses through User Interface

To validate licenses through a user interface (UI):

Login to the firewall UI.
Navigate to DEVICE | Settings > Licenses.
Check the license details are matched with the MySonicWall licensing screen.
Click Synchronize if you do not see the correct expiration dates, bundles, or Zero Touch settings. $SONICWALL-TZ670-Network-Security-fig- $8$$
Login to the Network Security Manager page.
Navigate to FIREWALLS | Inventory. The inventory option is shown only if NSM licensing is provisioned. Make sure that the unit shows Online with the correct Zero Touch setting. $SONICWALL-TZ670-Network-Security-fig- $9$$
Click the Friendly Name to go into the firewall view. You are licensed for NSM Advanced if you see the Productivity in the left pane menu. $SONICWALL-TZ670-Network-Security-fig- $10$$

SonicWall Support

Technical support is available to customers who have purchased SonicWall products with a valid maintenance contract. The Support Portal provides self- help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. To access the Support Portal, go to https://www.sonicwall.com/support.

The Support Portal enables you to:

View knowledge base articles and technical documentation
View and participate in the Community forum discussions at https://community.sonicwall.com/technology-and-support.
View video tutorials
Access https://mysonicwall.com.
Learn about SonicWall Professional Services
Review SonicWall Support services and warranty information
Register for training and certification
Request technical support or customer service

To contact SonicWall Support, visit https://www.sonicwall.com/support /contact-support.

About This Document

TZ & NSa MSSP Monthly Services Getting Started Guide
Updated – July 2023 Software Version – 232-006032-00 Rev A

The information in this document is provided in connection with SonicWall and/or its affiliates’ products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, SONICWALL AND/OR ITS AFFILIATES ASSUME NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL SONICWALL AND/OR ITS AFFILIATES BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF SONICWALL AND/OR ITS AFFILIATES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SonicWall and/or its affiliates make no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserve the right to make changes to specifications and product descriptions at any time without notice. and/or its affiliates do not make any commitment to update the information contained in this document.

For more information, visit https://www.sonicwall.com/legal.

End User Product Agreement
To view the SonicWall End User Product Agreement, go to: https://www.sonicwall.com/legal/end-user-product-agreements/.

Open Source Code
SonicWall Inc. is able to provide a machine-readable copy of open source code with restrictive licenses such as GPL, LGPL, and AGPL when applicable per license requirements. To obtain a complete machine-readable copy, send your written requests, along with certified check or money order in the amount of USD 25.00 payable to “SonicWall Inc.”, to:

General Public License Source Code Request