Avatar of Carlo
Carlo
Flag for United States of America asked on

Setup a DMZ Zone for a Q-SEE CCTV in a SONICWALL to give access to a remote laptop that could be in any domain

Currently I have a Q-SEE CCTV system that I have given a static ip address 192.168.1.x and I have a laptop that needs access to this CCTV system from anywhere as it moves from State to State within different networks.

I have a fairly new SONICWALL NSA 250M and believe the best thing to do is to set up a DMZ. I could be wrong...but please I am open for suggestions.

How do I go about achieving this?

Thanks.
Hardware FirewallsSoftware FirewallsNetworking Hardware-Other

Avatar of undefined
Last Comment
Carlo

8/22/2022 - Mon
rharland2009

You could certainly put the CCTV system in the DMZ if you wanted to - this would also officially segregate it from your LAN and would require some rules to allow connection from inside your network.
If the CCTV system has authentication, then perhaps the easiest way to accomplish this would be use NAT/PAT to map a public IP address to the private IP of the CCTV system, and have the traveling laptop access the CCTV system via the public IP.
Even if you put the CCTV in the DMZ, you'd still need to do some amount of port forwarding/NAT translation to make it accessible from the external Internet.
If your laptop user connects to your network via VPN, then you could leave the CCTV system where it is.
Carlo

ASKER
I was thinking about the VPN too...never done a NAT/PAT configuration.
rharland2009

Re: NAT/PAT - not too bad on a Sonicwall. The wizard's actually really good and will do most of the heavy lifting for you.
However, if you go the VPN route, you won't have to do anything - as long as the laptop user is okay with getting on the VPN before they can view the cameras.
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23
Carlo

ASKER
I have a Sonicwall Firewall, so if I wanted to set this up correctly using a VPN, I would have to do it using a VPN Tunnel and not  a Site to Site configuration correct?
ASKER CERTIFIED SOLUTION
rharland2009

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Carlo

ASKER
I am trying to setup the Sonicwall as a VPN and having issues doing it thru a POLICY TYPE Tunnel.
Can you help with this as well? Thanks.
Carlo

ASKER
Thanks that be all. I called Dell for my SonicWall, they were able to help me setting up the VPN. :)
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.