SonicWALL TZ 190 - page 177

PortShield Deployment Scenario
177
SonicOS Enhanced 4.0 Administrator Guide
– Name: Residents
– Security Type: Wireless. Select Wireless so you can use the same context for the both
the individual wired connections and the SonicPoints.
– Allow Interface Trust: Checked
– Enforce Content Filtering Service: Checked
– Enforce Client Anti-Virus Service: Checked
– Enable Gateway Anti-Virus Service: Checked
– Enable IPS: Checked
– Enforce Global Security Clients: Only check if you want to require SonicWALL Global
Security Client for your residents to log into the network
– Create Group VPN: Only Check if you want to enforce WiFiSec security, requiring your
residents to use a VPN client to connect.
• Wireless tab settings:
– Only allow traffic generated by a SonicPoint: Leave this option unchecked. This
disables SonicPoint enforcement, allowing both wired and wireless connections
through this zone.
– SSL-VPN Enforcement: Only check this option if you want to enforce SSL-VPN
security, requiring your residents to use an SSL-VPN client to connect.
– WiFiSec Enforcement: Only check this option if you want to enforce WiFiSec security,
requiring your residents to use a VPN client to connect.