SonicWALL SonicWALL UTM Appliance manual

Page 39

Step 7: Next navigate to Users > Local Groups and configure the Group you want the new CFS policy to apply to.

Step 8: Select the CFS policy you created under the CFS Policy tab. Repeat this same process for every group that requires custom CFS settings.

Enforcing CFS Policies without Requiring All Users to Authenticate

There is one more trick you can do with CFS involving user authentication. Some organizations want a default policy that applies to virtually everyone, but would rather not use Single Sign On (SSO) or local authentication for the majority of their user base. However, they still want a way for specific groups/users to be able to authenticate so they can bypass the default CFS policy. In this scenario, you will want to customize the CFS block page. The default block page informs a user that website is forbidden for X reason. What we want to do is add some simple html code that informs the users the page is still forbidden, but include a link that redirects them to login into the firewall. After logging in that user will now inherit whatever CFS permissions you’ve assigned them.

39

Image 39

Contents Contents Page Integrating LDAP/Active Directory with Sonicwall UTM Configuring the CA on the Active Directory ServerImporting the CA Certificate onto the SonicWALL Configuring the SonicWALL Appliance for LdapPage Page Page Page Page Page Page Enable Radius to Ldap Relay Enables this feature Authentication Page Page Page Creating Firewall Rules with Ldap Groups/Users SonicOS Options That Leverage Groups/UsersPage Page Firewall Rules with Bandwidth Management & Logging Page Blocking Domains with Firewall Rules Blocking Websites Domain Names for Groups/UsersPage Page Navigate to Firewall Access Rules Create a rule to allow Http traffic for your allowed lists Do the same for Https Create the deny rules for Http and Https Firewall rules should now look like the below picture Blocking Https SSL Domains with SSL Control Configuring a SSL Blacklist and Whitelist Page Applying Different CFS Policies to Groups Page Creating Custom CFS Policies Navigate to the Policy tab and add a new CFS policy Page Page Page Http//$$fwinterface$$/$#SWLSTYLESCSS#$ Variables for Custom Block Page in SonicOSAdvanced Sample Code for SonicOS Basic Sample Code for SonicOSPage Page Sample Code for SonicOS 5.1 or Earlier Sample JavaScript Code for SonicOSApplying Application Firewall Polices to Groups/Users Page Page Page Page Tightening Control over the Browsing Behavior of Users Blocking IM Traffic Categorically Applying Granular IM Policies Global VPN Client GVC Applying VPN Access Policies to Groups/UsersPage SSL-VPN NetExtender Guest Services Wireless Guest Services