# SonicWall

> Protect SonicWall access with Ironchip over RADIUS with NPS or over SAML: authentication servers, access control rules, and application metadata.

URL: https://docs.ironchip.com/en/identidad/integraciones/red/sonicwall/

This guide explains how to protect **SonicWall** with Ironchip over [RADIUS](https://docs.ironchip.com/en/identidad/protocolos/radius/) through [NPS](https://docs.ironchip.com/en/identidad/integraciones/red/nps/) or over [SAML](https://docs.ironchip.com/en/identidad/protocolos/saml/).

## RADIUS with NPS

### Requirements

- A functional Active Directory.
- NPS protected by Ironchip. See [Microsoft NPS](https://docs.ironchip.com/en/identidad/integraciones/red/nps/).
- An MFA [application](https://docs.ironchip.com/en/identidad/administracion/aplicaciones/) created in the Ironchip admin console.
- The Ironchip app downloaded.

### Configure SonicWall

1. In the left menu, under **System Configuration**, go to **Authentication Servers**.

   [Image: Authentication Servers section under System Configuration]

2. Click **New** to create a configuration.

   [Image: New button in Authentication Servers]

3. Select the **RADIUS (Username/Password)** type.

   [Image: Selecting the RADIUS (Username/Password) type]

4. Enter the details of your RADIUS server:

   - **Name**: a descriptive name for the configuration.
   - **Primary RADIUS server**: the IP of your RADIUS server. Click **Test** to check that SonicWall can reach the server.
   - **Shared secret**: the RADIUS shared secret.
   - **Match RADIUS groups by**: the Filter-ID attribute (11), which appears as `filterid attribute` in the drop-down list.
   - **Timeout**: `60` seconds.

   [Image: RADIUS server details in SonicWall]

5. Save the changes, go to **Security Administration**, and create a new entry in **Access Control**.

   [Image: Access Control section in Security Administration]

6. Fill in the fields as shown in the image. The description can be anything you like:

   - **Position**: `1`, with **Enabled** selected.
   - **Description**: any text you prefer.
   - **Action**: `Permit`.
   - **Direction**: `User`.
   - **From**: `Any user`.
   - **To**: `Any resource`.

7. Save the changes.

   [Image: Completed Access Control entry]

8. Finally, in NPS (**Network Policy Server**), create a RADIUS client that points to the SonicWall IP.

   [Image: NPS RADIUS clients with the client that points to SonicWall]

### Verify the integration

When you sign in to SonicWall Workplace, select the authentication server you created in **Log in to**, enter your user credentials, and accept the Ironchip notification on your phone to sign in.

[Image: SonicWall Workplace login with the Ironchip service selected in Log in to]

[Image: Username and password on the SonicWall Workplace login]

## SAML

### Requirements

- Access to the Ironchip admin console.
- The Ironchip app downloaded.

### Configure SonicWall

1. In the left menu, under **System Configuration**, go to **Authentication Servers**.

   [Image: Authentication Servers section under System Configuration]

2. Click **New** to create a configuration.

   [Image: New button in Authentication Servers]

3. Select **SAML 2.0**.

   [Image: Selecting the SAML 2.0 type]

### Exchange metadata with Ironchip

1. Before continuing, go to the Ironchip admin console, create a SAML application, and download the metadata file.

   [Image: Downloading the SAML application metadata file]

2. Go back to SonicWall and upload the file in the new configuration.

   [Image: Uploading the metadata file in SonicWall]

3. Once imported, export the file that SonicWall generated.

   [Image: Exporting the file generated by SonicWall]

4. Copy the content of that file, upload it to a public address, and paste the URL in the **Metadata URL** field of the SAML application you created.

   [Image: Metadata URL field of the SAML application]

5. Give users access to this application, with the same username as in SonicWall.

:::note
In the current version of the console, the SAML application has the **Service Provider (SP)** section with the **SP Metadata** field, which accepts **URL**, **Text** and **File**. Select **File**, choose the exported file and click **Import**: you do not need to upload it to a public address.
:::

### Verify the integration

When you sign in to SonicWall Workplace, select the SAML authentication server you created in **Log in to**.

[Image: Selecting the SAML authentication in SonicWall]

A new Ironchip tab opens where you enter your username. A notification is sent to the app.

[Image: Ironchip tab to enter the username]