Need to block websites without using SonicWall CFS

I have a pro 2040 enhanced. We are using CFS to block content on most computers, there are some computers where the CFS is way too restrictive for the users to do their job and those IP addresses are expempt from being blocked by CFS. But, it has become apparent that websites like facebook, myspace, craigslist, monster and few others need to be blocked. I was wondering if there is a way to create a rule to block access to these websites on the individual IP's that have been exempted from CFS from.
No Active Directory is being used here either, Noone is logging into a domain.

Or maybe there is a better way to go about doing this?

thanks
moletechAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

KevinCovertCommented:
just use the hosts file, or the sonicwall has a blacklist (deny) where you can explicitly block sites/urls.

If you want to block from a handful of hosts, I would use the hosts file (kind of a pain to manage on any moderate scale) or if all PCs need blocked, I would look into using OpenDNS, its free and great.

Hope that helps

Here is some info on the hosts file and how you could use it.
http://www.mvps.org/winhelp2002/hosts.htm


KMC
0
Ugo MenaCommented:
Based on a similar enhanced 2040 setup, we use a combination of the CFS, IPS signatures, and address objects to restrict access to a variety of sites and services, while still allowing owners and top level mgmt to use specific blocked sites and services. First set up address object(s) for your exempt users, this allows you to excluded (or included) them from accessing specific IPS signatures (ie. Facebook login, myspace, etc.) Then set the CFS settings to the least restrictive filtering setting needed for all users. Finally use the IPS signatures, time schedules, and address objects to granularly set or remove restrictions on your exempt group.

I would not use the CFS blacklist to keep users off of sites like facebook, it is much easier and more reliable to restrict access using the IPS signatures.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Hardware Firewalls

From novice to tech pro — start learning today.