SonicWALL NSA 2400, Руководство по началу работы

Страница: 46 / 70

SonicWALL NSA 2400 Getting Started Guide Page 45
Enabling Content Filtering Service
Content Filtering Service (CFS) Bypass for Administrators
The Do not bypass CFS blocking for the administrator
checkbox controls content filtering for administrators. By
default, when the administrator (“admin” user) is logged into the
SonicOS management interface from a system, CFS blocking is
suspended for that system’s IP address for the duration of the
authenticated session. If you prefer to provide content filtering
and apply CFS policies to the IP address of the administrator’s
system, perform the following steps:
1. Select the Do not bypass CFS blocking for the
Administrator checkbox .
2. Click Accept .
Enabling and Adding to the CFS Exclusion List
To enable the CFS Exclusion List and add a range of IP
addresses to it, perform the following steps:
1. Select the Enable CFS Exclusion List checkbox.
2. Click Add . The Add CFS Range Entry window is
displayed.
3. Enter the first IP address in the excluded range into the IP
Address From: field and the last address into the IP
Address To: field.
4. Click OK . The IP address range is added to the CFS
Exclusion List.
5. On the Security Services > Content Filter page, click
Accept .
Enforcing Security Services on
Network Zones
A network zone is a logical group of one or more interfaces to
which you can apply security rules to regulate traffic passing
from one zone to another zone.
Security services such as Gateway Anti-Virus are automatically
applied to the LAN and WAN network zones. To protect other
zones such as the DMZ or Wireless LAN (WLAN), you must
apply the security services to the network zones. For example,
you can configure SonicWALL Intrusion Prevention Service for
incoming and outgoing traffic on the WLAN zone to add more
security for internal network traffic.
To apply services to network zones:
1. Navigate to the Network > Zones page.
2. In the Zone Settings table, click the Configure icon for the
zone where you want to apply security services.
3. In the Edit Zone dialog box on the General tab, select the
checkboxes for the security services to enable on this
zone.
4. Click OK .
5. To enable security services on other zones, repeat steps 2
through step 4 for each zone.