SonicWALL TZ 180 manual Setting Up SonicWALL Anti-SpywareProtection, Enable SonicWALL Anti-Spyware

TotalSecure Configuration Task List

•Use the IPS Global Setting to enable the option Prevent All for all three IPS Signature Groups.

Now all three IPS Signature Groups [High, Medium resp. Low Priority] will be Prevented, which will Prevent quite a lot flowing in the network, for example:

•MSN Messenger, Yahoo Messenger, AIM, IRC and other Instant Messaging application will not work as will not any Peer-to-Peer applications.

•A Terminal Service client will not be able to connect.

•The VoIP Skype-application will not be able to connect

•Zone Transfers will be Prevented

After these settings are implemented, the network administrator must keep a very close eye on the logs of the SonicWALL appliance for some time and there possibly could be some enraged users for a brief period of time.

As soon as traffic is Prevented by the IPS, a log-entry will be written to the logs. Depending whether the prevented traffic is valid or not, the network administrator has the option to disable the Prevention of that particular IPS-event, directly from the log viewer.

If the user tries to log in to a blocked site, an error message will appear.

Setting Up SonicWALL Anti-Spyware Protection

The SonicWALL Anti-Spyware license provided on your SonicWALL security appliance does not automatically enable the protection. To configure SonicWALL Anti-Spyware to begin protecting your network, you need to perform the following steps:

1.Enable SonicWALL Anti-Spyware

2.Specify Spyware Danger Level Protection

3.Apply SonicWALL Anti-Spyware Protection to Zones

Note: For complete instructions on setting up SonicWALL Anti-Spyware Service, refer to the SonicWALL Anti-Spyware Service Administrator’s Guide available on the SonicWALL Web site <http://www.sonicwall.com/us/3396.html>

Once you configure these basic anti-spyware protection settings, you can perform additional configuration options to tailor SonicWALL Spyware protection for your network environment.

Selecting Threat Protection > Anti-Spywaredisplays the configuration settings for SonicWALL Anti-Spyware on your SonicWALL security appliance. The Anti-Spywarepage is divided into three sections:

•Anti-Spyware Status - displays status information on the state of the signature database, your SonicWALL Anti-Spyware license, and other information.

34 SonicWALL TZ 180 TotalSecure