SonicWall Training

Lesson 1 • SonicOS Interface Navigation

Introduces the SonicOS web management GUI and CLI entry points. Familiarity here accelerates all later configuration tasks.

Lesson 2 • Initial Hardware Setup

Covers physical installation, cabling, and first-boot procedures for SonicWall appliances. Students gain hands-on readiness before touching the management interface.

Lesson 3 • Registration and Licensing

Walks through MySonicWall registration, licence activation, and subscription management. Proper licensing unlocks security services covered in later chapters.

Lesson 4 • Network Security Core Concepts

Reviews stateful inspection, zones, and threat vectors relevant to SonicWall deployments. Provides the security vocabulary used throughout the course.

Lesson 1 • Interface Diagnostics and Verification

Uses built-in tools to verify link state, IP assignment, and zone membership. Diagnostic skills prevent misconfiguration from propagating into policy layers.

Lesson 2 • Interface Types and Modes

Explains static, DHCP, PPPoE, and VLAN sub-interface modes available in SonicOS. Correct mode selection is the prerequisite for all routing and policy work.

Lesson 3 • VLAN and Subinterface Design

Implements 802.1Q VLANs to segment traffic across departments or guest networks. Segmentation reduces attack surface and supports granular policy enforcement.

Lesson 4 • Security Zone Architecture

Defines built-in zones (LAN, WAN, DMZ, WLAN) and custom zone creation. Zone assignments drive access rule defaults and inspection policies.

Lesson 1 • Access Rule Fundamentals

Explains rule order, default deny, and zone-pair rule tables in SonicOS. Students write allow and deny rules with correct source, destination, and service fields.

Lesson 2 • Port Forwarding and Server Publishing

Publishes internal servers to the internet using destination NAT and paired access rules. This section bridges NAT theory with real-world DMZ server exposure.

Lesson 3 • NAT Policy Configuration

Configures source NAT, destination NAT, and one-to-one NAT for inbound and outbound flows. NAT policies are tightly coupled with access rules for complete traffic control.

Lesson 4 • Access Rule Optimisation and Auditing

Reviews rule shadowing, redundancy, and unused rule cleanup techniques. Optimised rule sets improve performance and reduce security gaps.

Lesson 1 • VPN Troubleshooting Techniques

Diagnoses tunnel failures using logs, packet captures, and VPN diagnostics tools. Systematic troubleshooting reduces mean time to restore encrypted connectivity.

Lesson 2 • Site-to-Site VPN Tunnels

Builds policy-based and route-based site-to-site tunnels between SonicWall appliances. Students configure both ends and verify encrypted traffic flow.

Lesson 3 • Mobile Connect and SMA Integration

Integrates SonicWall Mobile Connect app and Secure Mobile Access appliances for enterprise remote access. Extends VPN to iOS, Android, and macOS endpoints.

Lesson 4 • IPsec VPN Fundamentals

Reviews IKE phases, encryption algorithms, and authentication methods used in SonicWall IPsec. Conceptual clarity here prevents misconfiguration in tunnel setup.

Lesson 1 • Gateway Anti-Malware and Anti-Virus

Configures gateway-level malware scanning for HTTP, FTP, SMTP, and POP3 protocols. Stops malicious file transfers before they reach endpoints.

Lesson 2 • Capture Advanced Threat Protection

Configures the cloud-based Capture ATP sandbox for zero-day file analysis. Sandboxing catches threats that signature-based engines miss.

Lesson 3 • Intrusion Prevention System

Enables and tunes IPS signature categories, attack priorities, and prevention actions. IPS is the primary inline defence against exploit traffic.

Lesson 4 • Security Service Policy Tuning

Aligns IPS, anti-malware, and ATP policies with zone pairs and application profiles. Proper tuning balances security efficacy with throughput requirements.

Lesson 1 • Guest Services and Captive Portal

Configures the guest wireless portal with terms acceptance, voucher codes, and time limits. Guest services isolate visitor traffic while providing controlled internet access.

Lesson 2 • Local User and Group Management

Creates local user accounts and groups with VPN, management, and guest access privileges. Local accounts serve as a fallback when directory integration is unavailable.

Lesson 3 • Multi-Factor Authentication

Adds TOTP, email OTP, or RADIUS-based MFA to VPN and management logins. MFA significantly reduces credential-based attack success rates.

Lesson 4 • Single Sign-On Configuration

Deploys SonicWall SSO agent or terminal services agent for transparent user identification. SSO eliminates repeated login prompts while maintaining identity-based policy.

Lesson 1 • CFS Policy and User Group Mapping

Assigns distinct CFS profiles to LDAP/AD user groups for role-based filtering. Group-based policies replace broad blanket rules with targeted controls.

Lesson 2 • Reporting and Policy Verification

Generates CFS and App Control reports to verify policy effectiveness and user compliance. Data-driven review enables continuous policy refinement.

Lesson 3 • Content Filtering Service Setup

Activates CFS and configures category-based URL filtering policies for user groups. Category blocking is the fastest path to acceptable-use policy enforcement.

Lesson 4 • Bandwidth Management and QoS

Configures egress and ingress bandwidth limits and priority queues for critical traffic. QoS ensures voice and business applications receive guaranteed bandwidth.

Lesson 1 • Firmware Management and Updates

Manages firmware upgrades, rollback procedures, and scheduled update policies. Keeping firmware current closes known vulnerabilities and adds platform features.

Lesson 2 • Real-Time Dashboard and Alerts

Uses the SonicOS dashboard, AppFlow monitor, and email alerts for live threat visibility. Proactive alerting shortens response time to security and availability events.

Lesson 3 • Role-Based Administration

Creates limited-privilege admin accounts with read-only or feature-specific access scopes. Least-privilege administration reduces the blast radius of compromised credentials.

Lesson 4 • Syslog and Log Management

Configures syslog export to external SIEM or log servers with appropriate severity filters. Centralised logging is the foundation of incident detection and compliance reporting.

Lesson 5 • SNMP and NetFlow Monitoring

Enables SNMP v2c/v3 and NetFlow export for integration with network management platforms. Telemetry data provides traffic baselines and anomaly detection inputs.