Remote Access
User Manual: Remote-Access of /wp-content/uploads/2017/11
Open the PDF directly: View PDF 
.
Page Count: 7
CENTRAL MANAGEMENT
Powerful virtual machine for appliance
management, resilience and reporng
SonicWall Central Management Server
(CMS) provides organizaons, distributed
enterprises and service providers with
a powerful and intuive soluon to
centrally manage and rapidly deploy
SonicWall Secure Mobile Access
(SMA) soluons. For mid-size or large
enterprises, CMS streamlines security
policy management and appliance
deployment, minimizing administraon
overhead. For Service Providers, CMS
simplies the security management of
mulple clients and creates addional
revenue opportunies. Administrators
can cluster CMS soluons for added
redundancy and scalability.
Central Management Server (CMS) for SMA
SonicWall CMS is a virtual machine that
gives organizaons a single administrave
user interface to manage mulple SMA
appliances. The administrator can use the
Central Management Console (CMC) of
the CMS to manage all SMA appliances,
regardless of locaon. CMS and managed
appliances are closely integrated through
nave communicaons secured with TLS.
CMS requires no dedicated appliance or
hardware. It manages appliances that run
SMA OS 11.4 or higher.
Benets:
• Deliver services with near-zero
downme. Reduce TCO by accurately
sizing usage capacity and allocate
user licenses automacally across
appliances based on demand.
• Decrease capital costs with acve-
acve high availability clusters that
work in combinaon of physical and
virtual appliances.
• Provide zero-impact failover to users
across data centers in a global mesh
network.
• Simplify and manage policy roll-
outs across appliances or selected
appliances.
• Customize the visual dashboards to
monitor real-me and historical events.
• Reduce maintenance overhead
by automang roune tasks and
scheduling acvies.
• Get aconable insights you need to
make the right decisions.
• Control and predict costs with ease,
using simple subscripon licensing
model.
VPN Admin
Management
Console Central Management Server (CMS)
• Configure the managed appliances
• Manage and dynamically allocate pooled user licenses
• Monitor appliances
• View consolodated reports
Corporate Network
Internet
SRA EX 9000 SMA 7200 SMA 6200 SMA Virtual
Appliance
Cell phone Tablet LaptopDesktop
Managed Appliances
2
Features:
Global load-balancing – SonicWall Global Trac Opmizer
(GTO) oers intelligent global load-balancing with zero-impact
to users. Trac is routed to the most opmized and highest
performing data center.
Dynamic high availability – Managed appliances that run
SMA OS 12.0 or higher provide acve/acve clustering for
redundancy, availability and reliability, whether deployed in a
single data center or across mulple geographically dispersed
data centers.
Zero impact failover – Universal session persistence provides
high-performance, low-latency failover in a global acve-acve
cluster. In the event that an SMA appliance goes oine, users
do not need to re-enter their credenals for login, thereby
providing a friconless user experience and improving workforce
producvity.1
Scalable performance – Scale performance and eliminate single
point of failure by clustering appliances. Horizontal clustering
fully supports mixing physical and virtual SMA appliances.
Dynamic licensing – User licenses no longer have to be applied
to individual SMA appliances. Users can be distributed and
reallocated dynamically among the managed appliances, based
on user demand.
Central management – CMS includes the central management
console (CMC), which provides centralized, web-based
management for all SMA capabilies.
Custom alerts – Alerts can be congured to generate SNMP
traps that are monitored by any IT infrastructure Network
Management System (NMS).
Real-me monitoring – SonicWall CMS dashboard provides a
single pane of glass view for IT administrators to monitor the
health of all the SMA appliances and view useful informaon
such as network acvity, license and capacity usage etc..
Administrators can customize the dashboard, visualize
the data and generate ad hoc reports with ease using the
intuive interface.
SIEM integraon – Real-me output to central SIEM data
collectors allows security teams to correlate event driven
acvies, to understand the end-to-end workow of a parcular
user or applicaon. This is crical during security incident
management and forensic analysis.
Automated maintenance – SonicWall CMS comes with a
built-in scheduler that enables IT Administrators to automate
maintenance tasks such as deploying policies, replicang
conguraon sengs, rolling out rmware patches or upgrades
and restarng services, without manual intervenon.
24x7 support – No addional support license is required. Round-
the-clock coverage is included with central pooled user licenses.
1Supported in SMA OS 12.1 or above
3
Central User Licenses
User licenses no longer have to be applied to individual SMA
appliances. Central Management Server (CMS) can manage a pool
of user licenses and dynamically allocate them among managed
appliances. The CMS distributes the pool of licenses between the
managed appliances based on demand in real-me. In the event
that a managed appliance is unable to communicate with CMS,
the 'orphaned' appliance can run for 7 days on its leased license
and use 100% of CMS user licenses.
Customers with appliances that are globally distributed can
benet from the uctuang demands for user licenses due to
me dierences. The CMS reallocates licenses to managed
appliances where user demands have peaked from appliances
in a dierent geographic area, where usage has fallen due
to o-work/night hours. Customers with appliances that are
behind load balancers can benet from the dynamic distribuon
of licenses across managed appliances, as the load balancer
distributes connecon requests across the managed appliances.
SonicWall provides organizaons the exibility to choose the
licensing opon that best suits their needs. Central user licenses
are available as a me-limited subscripon opon that includes
24X7 support, or as a perpetual opon that requires an acve
termed support contract. For organizaons that want a licensing
opon for specic usage, SonicWall oers ered opons with
AcveSync licenses.2
In addion, organizaons may scale capacity temporarily
during mes of business disrupons or emergencies using
Spike licenses.3
2,3 Supported in SMA OS 12.1 or above. With SMA OS 12.1, a global data
store manages and regulates user license consumption across appliances
thereby removing dependency on CMS.
4
Global High Availability
The SonicWall CMS provides a turnkey soluon to deliver a
high degree of business connuity and scalability. Global High
Availability (GHA) empowers the service owner through a series
of tools to deliver a service with zero downme and allows
service organizaons to fulll very aggressive SLAs.
GHA supports acve-acve clustering with either a physical or a
combinaon of physical and virtual appliances, whether in a single
data center or in a geographically dispersed data center. This
signicantly reduces upfront capital costs for the customer where
appliances are in acve use all the me rather than depreciang
in a data center waing for a disaster scenario.
GHA enables SMA appliances to scale performance by deploying
mulple appliances, thus eliminang a single point of failure. This
provides resilience whether IT deploys 2 SMA appliances in the
same data center or clusters of up to 100 physical and virtual
appliances across mulple data centers around the globe.
Further, a global data store shares user session state across the
mesh network of SMA appliances in an acve-acve cluster.4
This allows for session persistence across data centers around
the world. In the event of a failover, users do not need to re-enter
credenals, so their experience is friconless and producvity is
not impacted.
4Supported in SMA OS 12.1 or above.
5
Real Time Dashboard
The CMS dashboard displays a quick overview of the appliances
being managed. The Geographic View shows a visual locaon
of the appliance based on its city and country obtained during
conguraon. The alerts pane on the dashboard shows a
consolidated view of all currently acve alerts. The Alerts
are intuive and color coded to provide a quick status: Red
(ERROR), Yellow (WARNING) and Green (OKAY). The dashboard
provides real-me data for online managed appliances, and
includes Name, Status, Users, CPU usage, Memory usage,
Mbps & Upme.
CMS enables administrators to create system-wide reports and
charts, with ability to export to CSV or MS Excel. Administrators
can generate ad hoc reports for audit and compliance based
on categories (such as Users, Access, Devices or Network). It
enables greater insight into usage trends and remote access
events. The near real-me reporng also provides granular drill
down to insights, such as the bandwidth consumpon, data
transferred to users, access zones in use by users, desnaons
accessed by users and number of user sessions on appliances
or realms.
SYSTEM REQUIREMENTS
SMA 6200,7200, 8200v, EX9000
License type Descripon
CMS Applicaon
(Free Trial)
Customers can download a free trial of the CMS license from the MySonicWall portal, which
enables the CMS to manage 3 appliances and 15 users for 1 month. The free trial provides the
customer with a serial number and authentication code to enter in CMS console. CMS does
not require the appliances to use pooled licenses. CMS also support central management of
appliances that consume traditional perpetual licenses.
CMS Appliance (Base) Customers can upgrade from the free trial to a Base CMS license at no cost. The Base CMS license
allows the CMS to monitor and manage up to 3 appliances. The Base CMS license does not have
user licenses and does not expire.
CMS Appliance (Full) Customers who want to manage more than 3 appliances need to purchase the stackable annual
license. With this license customer can manage up to 100 appliances. This license expires and
needs to be renewed at the end of its term.
CMS System Requirements
CMS Licensing Opons
SonicWall provides the following license opons for licensing the CMS
© 2017 SonicWall Inc. ALL RIGHTS RESERVED. SonicWall is a trademark
or registered trademark of SonicWall Inc. and/or its aliates in the U.S.A.
and/or other countries. All other trademarks and registered trademarks
are property of their respecve owners.
SonicWall, Inc.
5455 Great America Parkway | Santa Clara, CA 95054
Refer to our website for addional informaon.
www.sonicwall.com
7
DataSheet-CentralManagementServer4SMA-US-VG-MKTG295
About Us
SonicWall has been ghng the cyber-criminal industry for over 25 years, defending small, medium size businesses and enterprises
worldwide. Our combinaon of products and partners has enabled a real-me cyber defense soluon tuned to the specic needs of
the more than 500,000 global businesses in over 150 countries, so you can do more business with less fear.
CMS APPLIANCE LICENSE
CENTRAL USER LICENSES (SUBSCRIPTION)
CENTRAL USER LICENSES (PERPETUAL)
24X7 SUPPORT FOR CENTRAL USER LICENSES (PERPETUAL)
CENTRAL ACTIVESYNC LICENSES (SUBSCRIPTION)
CENTRAL SPIKE LICENSES
CAPTURE ADD-ON (SUBSCRIPTION)
CMS Ordering Informaon
For more information on CMS visit our website.
To buy CMS, contact SonicWall sales here.
