User manual SONICWALL CONTENT FILTERING SERVICE 3.0 OVERVIEW REV A

[. . . ] Application Firewall/CFS 3. 0 are not supported on all hardware/software platforms, please refer to your license management page in MySonicWALL to confirm license availability. 2 Content Filtering Service 3. 0 Application Firewall for CFS Application Firewall Policy CFS Policy Type ­ When defining an Application Firewall policy, the Application Object drop down list displays all application objects which have been defined in the previous section as `CFS Category List'. Allowed actions on this policy type include: ­ HTTP Block Page ­ Manage Bandwidth ­ No Action ­ CFS Block Page ­ Packet Monitor Allowed Zones include: ­ LAN ­ DMZ ­ SSLVPN ­ VPN ­ WLAN Note CFS Message Format Checkbox ­ By default, messages are logged in Application Firewall format. This checkbox allows you to log using message format standard for CFS. Content Filtering Service 3. 0 3 CFS 3. 0 Policy Management Overview CFS 3. 0 Policy Management Overview When a CFS policy assignment is implemented using the Application Firewall method, it is controlled by Application Firewall CFS policies in the Application Firewall > Policies page instead of by Users and Zones. While the new Application Firewall method of CFS management offers more control and flexibility, the administrator can still choose the previous user/zone management method to perform content filtering. [. . . ] Enter a descriptive Object Name, such as `Forbidden Content'. Select `CFS Category List' from the Match Object Type dropdown list. Use the checkboxes to select the categories you wish to add to the forbidden content list. Step 6 Click the OK button to add the object to the Application Objects list. Content Filtering Service 3. 0 9 CFS 3. 0 Configuration Examples Create an Application Firewall Policy to Block Forbidden Content Create an Application Firewall policy to block content defined in the Application Object: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 Navigate to the Firewall > App Rules page in the SonicOS management interface. Click the Add Policy button, the Add/Edit Application Firewall Policy window displays. Enter a descriptive name for this action in the Policy Name field, such as `Block Forbidden Content'. Select `CFS' from the Policy Type dropdown list. From the Application Object dropdown list, select the object you created in the previous section. In the case of our example, this object is named `Forbidden Content'. From the Action dropdown list, select `CFS block page' to display a pre-formatted `blocked content' page when users attempt to access forbidden content. Optionally, select the Users/Groups who this policy is to be Included or Excluded on from the dropdown list. Our example uses the defaults of including `all' and excluding `none'. Optionally, select a Schedule of days and times when this rule is to be enforced from the dropdown list. Our example uses `Always On' to always enforce this policy. Click the Add New Action Object button, the Add/Edit Action Object window displays. Enter a descriptive Action Name for this action. Select `Bandwidth Management' from the Action dropdown list. Select from the Bandwidth Aggregation Method dropdown list: a. b. Per Policy - to apply this limit to each individual policy. Per Action - to share this action limit across all policies to which it is applied. Step 6 Step 7 Create the desired settings for Inbound Bandwidth Management and Outbound Bandwidth Management. Click the OK button to create this object. 12 Content Filtering Service 3. 0 CFS 3. 0 Configuration Examples Create an Application Firewall Policy to Manage Non-Productive Content Create an Application Firewall policy to block content defined in the Application Object: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Navigate to the Firewall > App Rules page in the SonicOS management interface. Click the Add Policy button, the Add/Edit Application Firewall Policy window displays. Enter a descriptive name for this action in the Policy Name field. [. . . ] This allows for insertion of custom CFS-managed content into the existing and very flexible category structure. To create a new CFS custom category: · · Enable CFS Custom Categories -- page 15 Add a New CFS Custom Category Entry -- page 15 Enable CFS Custom Categories Step 1 Step 2 Step 3 Navigate to the Security Services > Content Filter page in the SonicOS management interface. Scroll down and click the CFS Custom Category section and select the Enable CFS Custom Category checkbox. Click the Accept button to save your changes and enable the Custom Category feature. Add a New CFS Custom Category Entry Step 1 Again in the Security Services > Content Filter page, scroll down to the CFS Custom Category section and click the Add. . . [. . . ]