SonicWALL 5.8.1 Microscope & Magnifier User Manual


  Open as PDF
of 1490
 
WAN Acceleration Overview
1273
SonicOS 5.8.1 Administrator Guide
Step 3 The SonicWALL WXA at the data center is configured to share All Shares on the File Server.
Step 4 The SonicWALL WXA at the remote site is configured to share All Shares on the WXA
appliance located at the data center.
Steps 3 and 4 allow the domain users to access shares on the data center.
Deployment Pre-Requisites
The Pre-Requisites for deploying the WAN Acceleration service are as follows:
A SonicWALL NSA/TZ series appliance is required to deploy the SonicWALL WXA series
appliance.
The remote sites use services in the data center for example, a central file or SharePoint
repository.
Traffic passing through the SonicWALL WXA series appliance requires IPv4.
Deployment Considerations
Consider the following when deploying the SonicWALL WXA series appliance:
The SonicWALL WXA series appliances require deployment with SonicWALL NSA/TZ
series appliances running SonicOS 5.8.1 or higher.
Typically the SonicWALL WXA series appliances are deployed in a site-to-site VPN
configuration through their respective SonicWALL NSA/TZ series appliances. However,
you can also use routing or L2 Bridge Mode, refer to the SonicOS 5.8.1 Administrators
Guide for details.
If a SonicWALL WXA series appliance is used in a high availability configuration, a switched
connection to both SonicWALL high availability pairs is required.
Encrypted traffic is highly randomized and does not materially benefit from the SonicWALL
WXA series appliance’s WAN Acceleration service. Therefore, SSL and TLS traffic types
are not accelerated.
The WAN Acceleration service is compatible with IPv4 only.
WFS Acceleration supports Windows file services using Active Directory/Kerberos for
authentication and authorization.
WFS Acceleration does not currently support NTLM or other non-Kerberos authentication
mechanisms.
Create a Static DHCP scope on the managing SonicWALL security appliance for the WXA
appliance.
If the remote offices have Domain Controllers and DNS Servers, it is recommend that you
use the local DNS server addresses and domain DNS name in the DHCP scope. Configure
the Domain Name and Domain DNS server IP addresses in the configured DHCP scope.
The WXA appliance will auto-discover Kerberos, LDAP, and NTP servers based on this type
of information to assist in joining the appliance to the domain.
Review the LDAP, Kerberos, and NTP services. In a multi-site domain where sites and
services are not explicitly configured, the WXA appliance might not choose the closest
servers.