What is SonicWall SonicOS? #
SonicWall SonicOS and SonicOSX (SonicOS/X) is the operating system that runs on SonicWall firewalls and provides the web management interface, API, and the Command Line Interface for firewall configuration.
Why Should You Use the SonicWall SonicOS Connector? #
The SonicWall SonicOS connector provides visibility into the assets in your environment. You can use this visibility to:
-
ensure assets are managed per your security policies
-
derive relationships between assets, users, applications, and data
How Does This Connector Work? #
Lucidum executes read-only requests to the SonicWall SonicOS REST API and ingests only meta-data about SonicWall SonicOS devices. Lucidum does not retrieve any data stored on your assets.
Prerequisites #
To use the Lucidum connector for SonicWall SonicOS, you must first:
-
Enable the SonicOS API and enable HTTP Basic Authentication. For details, see https://www.sonicwall.com/support/technical-documentation/docs/sonicos-7-0-0-0-device_settings/Content/Topics/Audit_SonicOS_API/SonicOS-API-enabling.htm/
-
Enable HTTPS User Login. For details, seehttps://www.sonicwall.com/support/knowledge-base/gui-how-can-i-enable-remote-management-e-g-https-management-on-the-sonicwall/170505449785599/#:~:text=Login to the SonicWall management,MANAGEMENT protocol(s) section.
-
Disable the User Login Status Popup. See Disabling the User Login Status Popup in https://www.sonicwall.com/support/knowledge-base/how-can-i-configure-additional-administrator-user-profiles-in-sonicos-enhanced/170505824663553/
Configuring the Connector in Lucidum #
Field |
Description |
Example |
---|---|---|
Host |
The hostname of the server for SonicWall SonicOS. |
10.2.290.29 |
Port |
The port on the SonicWall SonicOS server. Default port is 443 |
443 |
Username |
User name for a SonicWall local user account that is a member of the SonicWall Administrators group. |
 justynmutts |
Password |
User name for a SonicWall local user account that is a member of the SonicWall Administrators group. |
************ |
Proxy |
If you are using a proxy server to allow this connector to communicate with on-premises devices, enter the IP address: port for the proxy server, usually 192.168.255.6:3128 |
192.168.255. |
Source Documentation #
Creating Credentials #
To create a local user account that is a member of the SonicWall Administrators group:
Assign the new user to the group SonicWall Administrators
Required Permissions #
Object |
Permissions |
---|---|
Group |
SonicWall Administrators |