Solved

SonicWall TZ210-firewall - configure firewall and block internet access for certain pc's

Posted on 2011-02-22
9
3,556 Views
Last Modified: 2012-05-11
SonicWall TZ210-firewall - configure firewall and block internet access for certain pc's
0
Comment
Question by:teju27
9 Comments
 

Author Comment

by:teju27
ID: 34951933
hai i want SonicWall TZ210-firewall - configure firewall and block internet access for certain pc's ?
0
 
LVL 35

Expert Comment

by:Ernie Beek
ID: 34952233
0
 
LVL 33

Accepted Solution

by:
digitap earned 250 total points
ID: 34952994
you can either create a LAN > WAN rule on the sonicwall under firewall > access rules to block by IP or by MAC address.  if you do by IP, then you'll want to set them as static IP or DHCP reservation on your DHCP server.  i'd think it would be easier to do it by MAC.  create an address object under Network > Address Objects for the LAN zone and choose MAC as the type.  then, create the firewall rule choosing the new address object as the source and ANY for destination and service.  if you have more than one, then you should create a address group then an address object for each device.  add the objects to the group and use the group in the firewall rule as the source.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 6

Assisted Solution

by:theonlyallan
theonlyallan earned 250 total points
ID: 34953032
You should first create a Group, and add all the MAC addresses of the PCs to this Group.

You should then create a Group and add all the ports / services you want to block: ie: HTTP Port80, Https, FTP, Telnet, etc..

Then create a firewall rule  LAN > WAN that will block  the groups that you have just created.

If you have an active subscription service, you can enable Application Firewall, which will do the same thing for you.
0
 
LVL 33

Expert Comment

by:digitap
ID: 34953213
@theonlyallan :: cool...thanks for confirming my steps.  do you read what other experts post?
0
 
LVL 33

Expert Comment

by:digitap
ID: 35214814
the author indicated the solution is not clear. after reviewing, i see that a combination of my solution, http:#a34952994, and theonlyallan's solution, http:#a34953032, provides all the steps necessary to do what the author's is trying to accomplish.

my recommendation is to select those two solutions as the new disposition for this question. otherwise, Deleted.
0
 
LVL 35

Expert Comment

by:Ernie Beek
ID: 35215021
I was surprised to get rewarded seeing the other comments. So I go with digitap on this one with one addition: digitap: solution (80%), theonlyallan: assisted (20%)
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
Use of TCL script on Cisco devices:  - create file and merge it with running configuration to apply configuration changes
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

735 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question