Manuals / SonicWALL / Computer Equipment / Network Router

SonicWALL Internet Security Appliances Restrict Web Features 100, 101, 103, 105, 107, 112

Models: Internet Security Appliances

1 293

Download 293 pages 54.59 Kb

Page 4

7 Logging and Alerts	91
View Log	91
SonicWALL Log Messages	92
Log Settings	93
Configure the following settings:	93
Log Categories	95
Alerts/SNMP Traps	96
Reports	96
Web Site Hits	97
Bandwidth Usage by IP Address	97
Bandwidth Usage by Service	97
SonicWALL ViewPoint	98
8 Content Filtering and Blocking	99
Configuring SonicWALL Content Filtering	100
Restrict Web Features	100
URL List	101
Customizing the Content Filtering List	103
Consent	105
Mandatory Filtered IP Addresses	106
Configuring N2H2 Internet Filtering	107
Restrict Web Features	107
Configuring the Websense Enterprise Content Filter	110
Restrict Web Features	110
Configuring the Websense Content Filter List	112
Websense Server Status	112
Settings	112
URL Cache	113
9 Web Management Tools	114
Restarting the SonicWALL	114
Preferences	115
Exporting the Settings File	115
Importing the Settings File	116
Restoring Factory Default Settings	116
Updating Firmware	117
Updating Firmware Manually	118
Upgrade Features	119
Diagnostic Tools	120
DNS Name Lookup	120

Contents Page 3

Image 4

SonicWALL Internet Security Appliances Restrict Web Features 100, 101, 103, 105, Mandatory Filtered IP Addresses 106

Contents

ADMINISTRATOR’S Guide Contents NAT with PPPoE Configuration Restarting the SonicWALL Status CLI Support and Remote ManagementRestrict Web Features 100 100101 103Viewing Network Access Rules 127 Services 128 Add a Known Service 130 Add a Custom ServiceDelete a Service 131 Rules Network Access Rule Logic List 133Intranet Settings 151 Proxy Relay 148 Web Proxy Forwarding149 Bypass Proxy Servers Upon Proxy Failure 149 Intranet 150Allow Dhcp Pass Through in Standard Mode 166 Allow Dhcp Pass Through in Standard Mode 173Configure Tab 181 Add/Modify IPSec Security Associations 166Advanced Settings for VPN Configurations 191 Configuration Changes 228Configuration Notes 233 190SonicWALL Authentication Service 235 234235 236Limited Warranty About this Guide Organization of this GuideSonicWALL Technical Support Firmware Version Icons Used in this ManualIntroduction Your SonicWALL Internet Security ApplianceInternet Security Content Filtering Logging and ReportingEasy Installation and Configuration Dynamic Host Configuration Protocol DhcpIPSec VPN Configuring the Network Mode on the SonicWALL Standard ModeNetwork Address Translation NAT Enabled NAT with PPPoE ClientSelect Standard from the Network Addressing Mode menu NAT with Dhcp ClientNAT with L2TP Client NAT with Pptp ClientConfiguring the SonicWALL in NAT Enabled Mode Accessing the WizardSetting the Password Connecting to the Internet Selecting Your Internet ConnectionConfirming Network Address Translation NAT Mode Selecting NAT Enabled ModeConfiguring WAN Network Settings Configuring LAN Network SettingsConfiguration Summary CongratulationsConfiguring NAT with PPPoE Client RestartingSetting the Password Connecting to the Internet Setting the User Name and Password for PPPoE Configuring the SonicWALL Dhcp Server Congratulations Configuring NAT with Dhcp Client Accessing the Installation WizardSetting the Time and Date Selecting Your Internet Connection Configuring LAN Network Settings Configuration Summary Configuring NAT with L2TP Client Configuring NAT with Pptp Client Setting the Time and Date Connecting to the Internet Setting the User Name and Password for Pptp Configuring the SonicWALL Dhcp Server Congratulations Logging into the SonicWALL Management Interface Configuring the Network Mode on the SonicWALL Registering at mySonicWALL.com Creating a New User AccountAccount Information Personal Information Registering at mySonicWALL.com Page Click Here Registration Quick Registration Status and Options Managing Your SonicWALL Renaming Your SonicWALLTransferring a SonicWALL Product Delete Product Managing Services for SonicWALL Internet Security Appliances Activating Services Using mySonicWALL.com Registering at mySonicWALL.com Configuring the TELE3 SP Modem Connection Configuring the TELE3 SP WAN Failover FeatureConfiguring Modem Profiles Dial-Up ConfigurationISP Settings Location SettingsConfiguring the TELE3 SP Modem Connection TELE3 SP Modem Configuration Modem SettingsFailover Settings Preempt ModeSelect Enable WAN Failover Select Enable Probing Primary InterfaceConfiguring a Modem Profile for Manual Dial-Up Configure Modem Settings Select None as the Secondary ProfileConfiguring the Modem Settings Tested Internet Service ProvidersStatus Modem StatusChat Scripts Custom Chat Scripts Managing Your SonicWALL Internet Security Appliance Https ManagementManaging Your SonicWALL Internet Security Appliance 74 SonicWALL Internet Security Appliance User’s Guide CLI Support and Remote Management 9600 bps Bits No parity No hand-shakingGeneral and Network Settings Network SettingsNetwork Addressing Mode Network Time AdministratorLAN Settings Multiple LAN Subnet Mask SupportSonicWALL LAN IP Address LAN Subnet MaskWAN Settings DNS SettingsWAN Gateway Router Address WAN/LAN Subnet MaskStandard Configuration NAT Enabled ConfigurationSonicWALL WAN Gateway Router Address is NAT with Dhcp Client Configuration NAT with PPPoE Configuration Select NAT with PPPoE from the Network Addressing Mode menuRestarting the SonicWALL NAT with L2TP Client Configuration Restarting the SonicWALL NAT with Pptp Client Configuration Restarting the SonicWALL Setting the Time and Date NTP SettingsAdministrator Name Configuring the Administrator SettingsChange the Administrator Password Setting the Administrator Inactivity Timeout Login Failure HandlingLogging and Alerts View Log Log Settings ReportsView Log SonicWALL Log Messages TCP, UDP, or Icmp packets droppedWeb, FTP, Gopher, or Newsgroup blocked ActiveX, Java, Cookie or Code Archive blockedLog Settings Configure the following settingsPage Log Categories Reports Alerts/SNMP TrapsVPN Tunnel Status Web Site Hits Bandwidth Usage by ServiceBandwidth Usage by IP Address SonicWALL ViewPoint Content Filtering and Blocking Configure URL List Customize ConsentRestrict Web Features Configuring SonicWALL Content FilteringBlock Message to display when a site is blocked List UpdatesURL List Trusted DomainsDownload Automatically every SettingsSelect Categories to Block Customizing the Content Filtering List Custom FilterTime of Day Filter Block ActionUser Idle Timeout is 5 minutes configure here ConsentMaximum Web usage Consent page URL Optional FilteringMandatory Filtered IP Addresses Consent Accepted URL Filtering OffConsent Accepted URL Filtering On Consent page URL Mandatory FilteringConfiguring N2H2 Internet Filtering Trusted Domains Settings Server Host Name or IP Address N2H2 Server StatusListen Port Reply PortConfiguring the Websense Enterprise Content Filter Trusted Domains Configuring the Websense Content Filter List SettingsWebsense Server Status Server PortURL Cache Restart Preferences Firmware Diagnostic Web Management ToolsExporting the Settings File PreferencesRestoring Factory Default Settings Importing the Settings FileClick Import in the Preferences tab Updating Firmware Updating Firmware Manually Upgrade Features Diagnostic Tools DNS Name LookupFind Network Path Select Ping from the Choose a diagnostic tool menu PingPacket Trace Select Packet Trace from the Choose a diagnostic tool menu Tech Support ReportGenerating a Tech Support Report Trace Route Network Access Rules Viewing Network Access RulesServices LAN OutWindows Networking NetBIOS Broadcast Pass Through Network Connection Inactivity TimeoutPublic LAN Server Windows Messenger SupportAdd a Known Service Add ServiceAdd a Custom Service Delete a Service Enable LoggingRules Maximum Number of Rules by Product Product Maximum RulesNetwork Access Rule Logic List Bandwidth ManagementAdd a New Rule Select always from the Apply this rule menu Blocking LAN Access for Specific Services Add New Rule ExamplesEnabling Ping Select WAN from the Destination Ethernet menuCurrent Network Access Rules Table Enable/Disable a RuleRestore the Default Network Access Rules Edit a RuleUnderstanding the Access Rule Hierarchy Global User Settings UsersAdding and Removing a User Highlight -Add New User- in the Current User list boxUsers Currently Locked Out After Login Failures Current UsersUser Login Radius Radius ServersRadius Users Radius Client TestManagement SonicWALL Snmp Support Configuration of the Log/Log Settings for Snmp Configuration of the Service and Rules PagesSonicWALL Management Protocol Additional ManagementNetwork Access Rules Advanced Features Proxy Relay Web Proxy ForwardingConfiguring Web Proxy Relay Bypass Proxy Servers Upon Proxy FailureInstallation IntranetIntranet Configuration Intranet SettingsVPN Single-Armed Mode stand-alone VPN gateway VPN Single Armed Mode SonicWALL Configuring a SonicWALL for VPN Single Armed ModeRemote SonicWALL Corporate SonicWALL Routes LAN Route Advertisement Tip There is no route advertisement on the WANDMZ Route Advertisement RIPv2 AuthenticationDMZ Addresses DMZ in Standard Mode DMZ in NAT ModeHomePort in Standard Mode HomePort ConfigurationDelete a DMZ Address Range HomePort in NAT Mode Delete a HomePort Address RangeSelect the Enable One-to-One NAT check box One-to-One NATOne-to-One NAT Configuration Example Select Enable One-to-One NAT and click UpdateEnable Bandwidth Management WAN Link SettingsEthernet DMZ/WorkPort Link Settings LAN/HomePort Link SettingsMTU Settings Proxy Management workstation ethernet address on WANSonicWALL Bandwidth Management How SonicWALL Bandwidth Management WorksRule Service Priority Guaranteed Maximum Examples of Bandwidth Management RulesSetup Allow Dhcp Pass Through in Standard ModeSetup Dhcp over VPN Status Dhcp ServerConfiguring the SonicWALL Dhcp Server Select the Enable Dhcp ServerDeleting Dynamic Ranges and Static Entries Dhcp Relay ModeDhcp over VPN Configuring the Remote Gateway for VPN over Dhcp Configuring the Central Gateway for VPN over DhcpSelect Central Gateway from the Dhcp Relay Mode menu Select Remote Gateway from the Dhcp Relay Mode menu LAN IP AddressesLAN Device Configuration Dhcp Status Dhcp Server on the SonicWALL TELE3 TZ and TZX Configuring the SonicWALL Dhcp Server Deleting Dynamic Ranges and Static Entries Dhcp Status SonicWALL VPN Global VPN Settings VPN Management Interface Summary TabVPN Policies VPN Bandwidth ManagementCurrently Active VPN Tunnels SonicWALL NAT Traversal Support AES Advanced Encryption Standard SupportConfigure Tab Add/Modify IPSec Security Associations Disabling Security AssociationsSecurity Policy Settings Security Policy Settings for Group VPNSecurity Policy Settings for IKE using Pre-shared Secret AES support is available only on the PRO 230 and PRO Security Policy Settings using Manual Key Accessing Remote Resources across a Virtual Private Network Destination NetworksAdding Destination Networks Modifying and Deleting Existing Security AssociationsEnable Keep Alive Advanced SettingsTry to bring up all possible SAs Require authentication of local users Require authentication of remote usersEnable Windows Networking NetBIOS broadcast Apply NAT and firewall rulesEnable Perfect Forward Secrecy Phase 2 DH GroupDefault LAN Gateway Route all internet traffic through this SAVPN Terminated at the LAN, DMZ, or LAN/DMZ Advanced Settings for VPN Configurations IKE usingConfiguring SonicWALL VPN SonicWALL VPN Page Installing the VPN Client Software Group VPN Client SetupGroup VPN Client Configuration Page SonicWALL VPN Verifying the VPN Tunnel as Active SonicWALL VPN Configuring the VPN Client Select the Connect using Secure Gateway Tunnel check box Configuring VPN Security and Remote IdentityLaunching the SonicWALL VPN Client Configuring VPN Client Security Policy Configuring VPN Client IdentitySelect None from the Select Certificate menu Configuring VPN Client Key Exchange Proposal Select the Encapsulation Protocol ESP check boxConfiguring Inbound VPN Client Keys Configuring Outbound VPN Client KeysSaving SonicWALL VPN Client Settings Click Inbound Keys. The Inbound Keying Material box appearsVerifying the VPN Client Icon in the System Tray IKE and Manual Key Configuration for Two SonicWALLs Manual Key for Two SonicWALLsSonicWALL VPN Example of Manual Key Configuration for Two SonicWALLs Configuring the Second SonicWALL ApplianceSelect Strong Encrypt ESP 3DES as the Encryption Method Configuring the Remote SonicWALL Enter the Encryption Key from the Main Office configurationPage IKE Configuration for Two SonicWALLs Select Group 1 from the Phase 1 DH Group menuPage Configuring a SonicWALL PRO 200 in Chicago Example of IKE Configuration for Two SonicWALLsSelect 3DES & SHA1 from the Phase 1 DH Group menu Configuring a SonicWALL TELE3 in San Francisco Select Group 2 from the Phase 1 DH Group menu SonicWALL Third Party Digital Certificate Support VeriSign EntrustOverview of Third Party Digital Certificate Support Version 3 Certificate StandardImporting CA Certificates into the SonicWALL Certificate DetailsImporting Certificate with private key Certificate Revocation List CRLCreating a Certificate Signing Request Importing a Signed Local CertificateClick VPN, then Local Certificates Click Import CertificateSonicWALL Enhanced VPN Logging Testing a VPN Tunnel Connection Using Ping Configuring Windows Networking SonicWALL VPN Page Network Configuration for High Availability Pair Before Configuring High AvailabilityHigh Availability Configuring High Availability on the Primary SonicWALL High Availability Configuration Changes High Availability Status High Availability Status Window Mail Alerts Indicating Status Change Forcing Transitions Configuration Notes SonicWALL VPN Client SonicWALL Options and UpgradesSonicWALL Network Anti-Virus Vulnerability Scanning Service Content Filter List SubscriptionSonicWALL Authentication Service SonicWALL Global Management System SonicWALL ViewPoint ReportingContact Your Reseller or SonicWALL SonicWALL PRO 230 and PRO 330 Front Panel Hardware DescriptionsSonicWALL PRO 230 and PRO 330 Front Panel Description Reset Switch Power SwitchesPower Inputs SonicWALL PRO 230 and PRO 330 Rear Panel DescriptionSonicWALL PRO 200 and PRO 300 Front Panel SonicWALL PRO 200 and PRO 300 Front Panel DescriptionPower Input Power SwitchSonicWALL PRO 200 and PRO 300 Back Panel SonicWALL PRO 200 and PRO 300 Back Panel DescriptionSonicWALL PRO 100 Front Panel Description SonicWALL PRO 100 Front Panel100 SonicWALL PRO 100 Back Panel SonicWALL PRO 100 Back Panel DescriptionSonicWALL TELE3 SP Front Panel Description SonicWALL TELE3 SP Front PanelModem CLI Command Line Interface Port SonicWALL TELE3 SP Back PanelSonicWALL TELE3 SP Back Panel Description TELE3 SP Modem PortSonicWALL TELE3 TZ Front Panel SonicWALL TELE3 TZ Front Panel DescriptionSonicWALL TELE3 TZ Back Panel SonicWALL TELE3 TZ Back Panel DescriptionSonicWALL TELE3 TZX Front Panel SonicWALL TELE3 TZX Front Panel DescriptionSonicWALL TELE3 TZX Back Panel l SonicWALL TELE3 TZX Back Panel DescriptionSonicWALL SOHO3 and TELE3 Front Panel SonicWALL SOHO3 and TELE3 Front Panel DescriptionSonicWALL SOHO3 and TELE3 Back Panel SonicWALL SOHO3 and TELE3 Back Panel DescriptionSonicWALL GX 250 and GX 650 Front Panel SonicWALL GX250 and GX 650 Front Panel DescriptionSonicWALL GX250 Front Panel SonicWALL GX 650 Front PanelAlarm Reset Button SonicWALL GX 250 and GX 650 Back Panel DescriptionTroubleshooting Guide Computer on the LAN cannot access the InternetSonicWALL does not establish authenticated sessions Link LED is offDuplicate IP address errors VPN tunnel problemsSonicWALL does not save changes that you have made Machines on the WAN are not reachableAppendix a Technical Specifications AppendicesAppendix B SonicWALL Support Solutions Knowledge BaseInternet Security Expertise SonicWALL SupportSonicWALL Support Services Features and Benefits SonicWALL Super SonicWALL Warranty SupportWarranty Support North America Warranty Support International SonicWALL Support SonicWALL Support Appendix C Introduction to Networking Network Hardware ComponentsNetwork Types FirewallsNetwork Protocols IP Addressing IP address Subnet mask Default gatewayIP Address Default Gateway Network Address Translation NATNodes Subnet MaskAppendices Well Known Port Numbers Appendix D IP Port NumbersRegistered Port Numbers Click DNS Configuration Appendix E Configuring TCP/IP SettingsWindows Windows NT Windows Windows XP Open the Local Area Connection Properties windowMacintosh OS Appendix F Basic VPN Terms and Concepts Authentication Header AH Internet Key Exchange IKEManual Key Shared SecretPage Data Encryption Standard DES ARCFourStrong Encryption Triple DES Security Parameter Index SPIAppendix G- Erasing the Firmware Locating the Reset button on your SonicWALLErasing the Firmware for all Models Appendix H- Mounting the SonicWALL PRO 200 and PRO Appendix I Configuring Radius and ACE Servers Steel Belted Radius Funk SoftwareOpen the ACE Server Database Administrator program Configuring User PrivilegesACE Server RSA Open IAS, and select Remote Access Policies Internet Authentication Service Windows NT/2000 ServerACS Server Cisco Radius Attributes Dictionary Page Appendices Page Appendices Page Appendices Index Dynamic Host Configuration Protocol Dhcp Dynamic Ranges 167 Page Index 232- 000291 Rev a 11