Solved

Need to block websites without using SonicWall CFS

Posted on 2009-07-10
2
3,282 Views
Last Modified: 2012-05-07
I have a pro 2040 enhanced. We are using CFS to block content on most computers, there are some computers where the CFS is way too restrictive for the users to do their job and those IP addresses are expempt from being blocked by CFS. But, it has become apparent that websites like facebook, myspace, craigslist, monster and few others need to be blocked. I was wondering if there is a way to create a rule to block access to these websites on the individual IP's that have been exempted from CFS from.
No Active Directory is being used here either, Noone is logging into a domain.

Or maybe there is a better way to go about doing this?

thanks
0
Comment
Question by:moletech
2 Comments
 
LVL 6

Expert Comment

by:KevinCovert
ID: 24828854
just use the hosts file, or the sonicwall has a blacklist (deny) where you can explicitly block sites/urls.

If you want to block from a handful of hosts, I would use the hosts file (kind of a pain to manage on any moderate scale) or if all PCs need blocked, I would look into using OpenDNS, its free and great.

Hope that helps

Here is some info on the hosts file and how you could use it.
http://www.mvps.org/winhelp2002/hosts.htm


KMC
0
 
LVL 13

Accepted Solution

by:
Ugo Mena earned 250 total points
ID: 24831937
Based on a similar enhanced 2040 setup, we use a combination of the CFS, IPS signatures, and address objects to restrict access to a variety of sites and services, while still allowing owners and top level mgmt to use specific blocked sites and services. First set up address object(s) for your exempt users, this allows you to excluded (or included) them from accessing specific IPS signatures (ie. Facebook login, myspace, etc.) Then set the CFS settings to the least restrictive filtering setting needed for all users. Finally use the IPS signatures, time schedules, and address objects to granularly set or remove restrictions on your exempt group.

I would not use the CFS blacklist to keep users off of sites like facebook, it is much easier and more reliable to restrict access using the IPS signatures.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I recently had the displeasure of buying a new firewall at one of the buildings I play Sys Admin at. I had to get a better firewall than the cheap one that I had there since I was reconnecting the main office to the satellite office via point-to-poi…
I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question