Page 18

Enabling Security Services in SonicOS

Enabling Content Filtering Service

To enable Content Filtering Service (CFS) in SonicOS:

1.

Navigate to the

Security Services

>

Content Filter

page.

2.

Select

SonicWALL CFS

in the Content Filter Type drop-

down list and then click the

Configure

button.

3.

In the

Policy

tab, click the

Configure

button for the default

policy. The Edit CFS Policy windows displays.

4.

In the

URL List

tab, review and select additional exclusion

categories as needed.

5.

Click

OK

to both pop-up windows.

6.

Click the

Accept

button to apply changes.

Content FIltering Service contains other useful features,

including:

•

URL Rating Review

allows the administrator and users to

review blocked URL ratings if they think a URL is rated

incorrectly.

•

Restrict Web Features

restricts features such as cookies,

Java, ActiveX, and HTTP Proxy access.

•

Trusted Domains

allows access to restricted features on

trusted domains.

•

CFS Exclusion List

excludes administrators and/or IP

ranges from content filtering enforcement.

•

Blocked Content Web Page

displays a custom HTML

page to users when content is blocked.

Tip:

For a complete overview of CFS features, refer to the

SonicOS Enhanced Administrator’s Guide.

SonicWALL TZ 100/200 Series Getting Started Guide

Page 19

Verifying Security Services on Zones

Security services such as Gateway Anti-Virus are automatically

applied to the LAN and WAN network zones. To protect other

zones such as the DMZ or Wireless LAN (WLAN), you must

apply the security services to the network zones. For example,

you can configure SonicWALL Intrusion Prevention Service for

incoming and outgoing traffic on the WLAN zone to add more

security for internal network traffic.

To apply services to network zones:

1.

Navigate to the

Network

>

Zones

page.

2.

In the Zone Settings table, click the

Configure

icon for the

zone where you want to apply security services.

3.

In the

Edit Zone

dialog box on the

General

tab, select the

checkboxes for the security services to enable on this

zone.

4.

Click

OK

.

Congratulations!

Your SonicWALL TZ 100/200 series

appliance is registered and fully functional with active UTM

security services enabled.

For advanced network setup information, continue to:

•

Advanced Network Configuration

- page 21

•

Advanced Deployments

- page 33

Page 20

Verifying Security Services on Zones

SonicWALL TZ 100/200 Series Getting Started Guide

Page 21

Advanced Network Configuration

In this Section:

This section provides detailed overviews of advanced deployment scenarios, as well as configuration instructions for connecting your

SonicWALL TZ 100/200 series appliance to various network devices.

•

An Introduction to Zones and Interfaces

- page 22

•

SonicWALL Wireless Firewalling

- page 23

•

Configuring Interfaces

- page 24

•

Creating Network Access Rules

- page 27

•

Address Objects

- page 29

•

Network Address Translation

- page 31

Tip:

Before completing this section, fill out the information in

Recording Configuration Information

- page 2.

4

Page 22

An Introduction to Zones and Interfaces

An Introduction to Zones and Interfaces

Zones split a network infrastructure into logical areas, each with

its own set of usage rules, security services, and policies. Most

networks include multiple definitions for zones, including those

for trusted, untrusted, public, encrypted, and wireless traffic.

Some basic (default) zone types include:

WAN

—Untrusted resources outside your local network.

LAN

—Trusted local network resources.f

WLAN

—Local wireless network resources originating from

SonicWALL wireless enabled appliances.

DMZ

—Local network assets that must be accessible from the

WAN zone (such as Web and FTP servers).

VPN

—Trusted endpoints in an otherwise untrusted zone, such

as the WAN.

The security features and settings that zones carry are

enforced by binding a zone to one or more physical interfaces

(such as, X0, X1, or X2) on the SonicWALL TZ 100/200 series

appliance.

The X1 and X0 interfaces are preconfigured as WAN and LAN

respectively. The remaining ports are also LAN ports by default,

however, these ports can be configured to meet the needs of

your network, either by using basic zone types (WAN, LAN,

WLAN, DMZ, VPN) or configuring a custom zone type to fit your

network requirements (Gaming Console Zone, Wireless Printer

Zone, Wireless Ticket Scanner Zone, and more).

X0

Console

Wireless Clients

Wireless Devices

Wireless (WLAN)

Hotel / Home Office

Front Lobby

Sales

Marketing

X1 WAN

X0 LAN

W0 WLAN