<div>
i've never blocked an entire domain. &nbsp;however, if you have the Content Filter security service licensed, you might be able to setup a custom deny entry for *.ru and *.cn. &nbsp;you'd have to try it to know for sure. &nbsp;here are some KBs you might find helpful.<br />
<br />
<br />
<a href="http://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=8073" rel="ugc">http://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=8073</a><br />
<a href="http://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=7002" rel="ugc">http://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=7002</a><br />
<a href="http://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=3551" rel="ugc">http://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=3551</a>
</div>


i've never blocked an entire domain.  however, if you have the Content Filter security service licensed, you might be able to setup a custom deny entry for *.ru and *.cn.  you'd have to try it to know for sure.  here are some KBs you might find helpful.


http://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=8073 [http://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=8073]
http://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=7002 [http://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=7002]
http://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=3551 [http://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=3551]

<div>
I'll look into these, we do have content filtering.
</div>


I'll look into these, we do have content filtering.

<div>
hey...those are good ideas...
</div>


<div>
This question has been classified as abandoned and is being closed as part of the Cleanup Program. &nbsp;See my comment at the end of the question for more details.
</div>


This question has been classified as abandoned and is being closed as part of the Cleanup Program.  See my comment at the end of the question for more details.

<div>
<div class="content wysiwyg-content">
I have a Sonicwall NSA 2400 and I would like to block all traffic from .ru and .cn but, can see how I would do this. Is it possible with this firewall and how if it is.
</div>
</div>


I have a Sonicwall NSA 2400 and I would like to block all traffic from .ru and .cn but, can see how I would do this. Is it possible with this firewall and how if it is.

Blocking all .ru and .cn with a Sonicwall NSA 2400

Hardware-based firewalls provide more sophisticated protection for inbound and outbound traffic than the simple Windows software firewall or the basic NAT firewalls found in routers. These devices implement techniques such as stateful packet inspection, deep packet inspection, and content filtering; and may include built-in antivirus and anti-malware protection.

Hardware Firewalls

The Domain Name System (DNS) is a hierarchical, globally distributed system responsible for associating the name of a computer, service or other resource into an IP address for connecting to the Internet or a private network. Most prominently, it translates domain names to the numerical IP addresses needed for the purpose of computer services and devices worldwide.

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.