Need to block websites without using SonicWall CFS

I have a pro 2040 enhanced. We are using CFS to block content on most computers, there are some computers where the CFS is way too restrictive for the users to do their job and those IP addresses are expempt from being blocked by CFS. But, it has become apparent that websites like facebook, myspace, craigslist, monster and few others need to be blocked. I was wondering if there is a way to create a rule to block access to these websites on the individual IP's that have been exempted from CFS from.
No Active Directory is being used here either, Noone is logging into a domain.

Or maybe there is a better way to go about doing this?

thanks
moletechAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
Ugo MenaConnect With a Mentor Commented:
Based on a similar enhanced 2040 setup, we use a combination of the CFS, IPS signatures, and address objects to restrict access to a variety of sites and services, while still allowing owners and top level mgmt to use specific blocked sites and services. First set up address object(s) for your exempt users, this allows you to excluded (or included) them from accessing specific IPS signatures (ie. Facebook login, myspace, etc.) Then set the CFS settings to the least restrictive filtering setting needed for all users. Finally use the IPS signatures, time schedules, and address objects to granularly set or remove restrictions on your exempt group.

I would not use the CFS blacklist to keep users off of sites like facebook, it is much easier and more reliable to restrict access using the IPS signatures.
0
 
KevinCovertCommented:
just use the hosts file, or the sonicwall has a blacklist (deny) where you can explicitly block sites/urls.

If you want to block from a handful of hosts, I would use the hosts file (kind of a pain to manage on any moderate scale) or if all PCs need blocked, I would look into using OpenDNS, its free and great.

Hope that helps

Here is some info on the hosts file and how you could use it.
http://www.mvps.org/winhelp2002/hosts.htm


KMC
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.