SonicWALL TZ 210 Series Getting Started Guide
Page 27
Creating Network Access Rules
A Zone is a logical grouping of one or more interfaces designed
to make management a simpler and more intuitive process than
following a strict physical interface scheme.
By default, the SonicWALL security appliance’s stateful packet
inspection allows all communication from the LAN to the
Internet, and blocks all traffic from the Internet to the LAN. The
following behaviors are defined by the “Default” stateful
inspection packet access rule enabled in the SonicWALL
security appliance:
To create an access rule:
1.
On the
Firewall
>
Access
Rules
page in the matrix view,
select two zones that will be bridged by this new rule.
2.
On the Access Rules page, click
Add
.
The access rules are sorted from the most specific to the
least specific at the bottom of the table. At the bottom of the
table is the
Any
rule.
Note:
SonicWALL’s default firewall rules are set in this way
for ease of initial configuration, but do not reflect best
practice installations. Firewall rules should only allow
the required traffic and deny all other traffic.
Originating Zone
Destination Zone
Action
LAN, WLAN
WAN, DMZ
Allow
DMZ WAN
Allow
WAN
DMZ
Deny
WAN and DMZ
LAN or WLAN
Deny
TZ_210_GSG.book Page 27 Thursday, November 13, 2008 7:41 PM
