SonicWALL TZ 180 manual Setting Up SonicWALL Anti-Spyware Protection

Page 34

TotalSecure Configuration Task List

Use the IPS Global Setting to enable the option Prevent All for all three IPS Signature Groups.

Now all three IPS Signature Groups [High, Medium resp. Low Priority] will be Prevented, which will Prevent quite a lot flowing in the network, for example:

MSN Messenger, Yahoo Messenger, AIM, IRC and other Instant Messaging application will not work as will not any Peer-to-Peer applications.

A Terminal Service client will not be able to connect.

The VoIP Skype-application will not be able to connect

Zone Transfers will be Prevented

After these settings are implemented, the network administrator must keep a very close eye on the logs of the SonicWALL appliance for some time and there possibly could be some enraged users for a brief period of time.

As soon as traffic is Prevented by the IPS, a log-entry will be written to the logs. Depending whether the prevented traffic is valid or not, the network administrator has the option to disable the Prevention of that particular IPS-event, directly from the log viewer.

If the user tries to log in to a blocked site, an error message will appear.

Setting Up SonicWALL Anti-Spyware Protection

The SonicWALL Anti-Spyware license provided on your SonicWALL security appliance does not automatically enable the protection. To configure SonicWALL Anti-Spyware to begin protecting your network, you need to perform the following steps:

1.Enable SonicWALL Anti-Spyware

2.Specify Spyware Danger Level Protection

3.Apply SonicWALL Anti-Spyware Protection to Zones

Note: For complete instructions on setting up SonicWALL Anti-Spyware Service, refer to the SonicWALL Anti-Spyware Service Administrator’s Guide available on the SonicWALL Web site <http://www.sonicwall.com/us/3396.html>

Once you configure these basic anti-spyware protection settings, you can perform additional configuration options to tailor SonicWALL Spyware protection for your network environment.

Selecting Threat Protection > Anti-Spywaredisplays the configuration settings for SonicWALL Anti-Spyware on your SonicWALL security appliance. The Anti-Spywarepage is divided into three sections:

Anti-Spyware Status - displays status information on the state of the signature database, your SonicWALL Anti-Spyware license, and other information.

34 SonicWALL TZ 180 TotalSecure

Image 34
Contents Introduction What is TotalSecure?Document Scope Every SonicWALL TotalSecure solution includes the following Benefits of TotalSecureHow Does GAV Work? SonicWALL Gateway Anti-VirusGAV Overview BenefitsSonicWALL Gateway Anti-Virus/Intrusion Prevention Features SonicWALL GAV Multi-Layered Approach Remote Site Protection Internal Network ProtectionHttp File Downloads SonicWALL GAV Architecture Server ProtectionDisabling the SonicWALL GAV/IPS Engine Protocol HandlingSmtp IPS Overview SonicWALL Intrusion Prevention ServiceHow Does IPS Work? What is a Zone? SonicWALL Anti-Spyware SonicWALL Anti-Spyware Security ServiceSpyware Threat SonicWALL Anti-Spyware CFS Overview SonicWALL Content Filtering Service PremiumHow Does CFS Premium Work? DPI Overview SonicWALL Deep Packet InspectionHow Does DPI Work? Deep Packet Inspection Flow Diagram SonicWALL Security Dashboard Security Dashboard Overview SonicWALL Security Dashboard What is Security Dashboard? How Does the Security Dashboard Work?Registering Your Appliance on MySonicWALL Registering Your Appliance on MySonicWALL TotalSecure Configuration Task List Registering Your SonicWALL Security ApplianceEnabling SonicWALL GAV Setting Up SonicWALL GAV ProtectionApplying SonicWALL GAV Protection on Interfaces Applying SonicWALL GAV Protection on Zones SonicOS Enhanced Edit ZoneViewing SonicWALL GAV Status Information Specifying Protocol Filtering Updating SonicWALL GAV SignaturesEnabling Inbound Inspection Configuring Client Alerts and an Exclusion List Enabling Outbound Smtp InspectionConfiguring a SonicWALL GAV Exclusion List Configuring Client AlertsRestricting File Transfers Viewing SonicWALL GAV Signatures Displaying SignaturesNavigating the Gateway Anti-Virus Signatures Table Enabling SonicWALL IPSEnable IPS Logging Brute-force Baseline SetupSetting Up SonicWALL Anti-Spyware Protection Enabling SonicWALL Anti-Spyware Glossary Setting Up CFS PremiumSpecifying Spyware Danger Level Protection Glossary Related Documentation Solution Document Version History Version Number Date Related Documentation SonicWALL TZ 180 TotalSecure
Related manuals
Manual 34 pages 40.02 Kb Manual 38 pages 55.88 Kb