Solved

Need to block websites without using SonicWall CFS

Posted on 2009-07-10
2
3,520 Views
Last Modified: 2012-05-07
I have a pro 2040 enhanced. We are using CFS to block content on most computers, there are some computers where the CFS is way too restrictive for the users to do their job and those IP addresses are expempt from being blocked by CFS. But, it has become apparent that websites like facebook, myspace, craigslist, monster and few others need to be blocked. I was wondering if there is a way to create a rule to block access to these websites on the individual IP's that have been exempted from CFS from.
No Active Directory is being used here either, Noone is logging into a domain.

Or maybe there is a better way to go about doing this?

thanks
0
Comment
Question by:moletech
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 6

Expert Comment

by:KevinCovert
ID: 24828854
just use the hosts file, or the sonicwall has a blacklist (deny) where you can explicitly block sites/urls.

If you want to block from a handful of hosts, I would use the hosts file (kind of a pain to manage on any moderate scale) or if all PCs need blocked, I would look into using OpenDNS, its free and great.

Hope that helps

Here is some info on the hosts file and how you could use it.
http://www.mvps.org/winhelp2002/hosts.htm


KMC
0
 
LVL 13

Accepted Solution

by:
Ugo Mena earned 250 total points
ID: 24831937
Based on a similar enhanced 2040 setup, we use a combination of the CFS, IPS signatures, and address objects to restrict access to a variety of sites and services, while still allowing owners and top level mgmt to use specific blocked sites and services. First set up address object(s) for your exempt users, this allows you to excluded (or included) them from accessing specific IPS signatures (ie. Facebook login, myspace, etc.) Then set the CFS settings to the least restrictive filtering setting needed for all users. Finally use the IPS signatures, time schedules, and address objects to granularly set or remove restrictions on your exempt group.

I would not use the CFS blacklist to keep users off of sites like facebook, it is much easier and more reliable to restrict access using the IPS signatures.
0

Featured Post

Get HTML5 Certified

Want to be a web developer? You'll need to know HTML. Prepare for HTML5 certification by enrolling in July's Course of the Month! It's free for Premium Members, Team Accounts, and Qualified Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Network traffic routing plays key role in your network, if you have single site with heavy browsing or multiple sites, replicating important application data from your Primary Default Gateway ,you have to route your other network traffic from your p…
Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
Visualize your data even better in Access queries. Given a date and a value, this lesson shows how to compare that value with the previous value, calculate the difference, and display a circle if the value is the same, an up triangle if it increased…
Suggested Courses

630 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question