Configuring Rules in SonicOS Standard

To configure rules for SonicOS Standard, complete the following steps:

1	Determine whether the service for which you want to create a rule is defined. If not, define the service. Refer to Adding a Service .

2	Create one or more rules for the service. Refer to Creating Rules .

3	Repeat this procedure for each service for which you would like to define rules.

Adding a Service

By default, a large number of services are pre-defined. This section describes how to add a new or custom service.

To add a service, complete the following steps:

1	Select the global icon, a group, or a SonicWALL appliance.

2	Expand the Firewall tree and click Services. The Services page displays.

 

3	To add a known service (e.g., HTTP, FTP, News), select the service from the Service Name list box and click Add Known Service. Repeat this step for each service that you would like to add. A task is scheduled for each service for each selected SonicWALL appliance.

NOTE: Features and services vary widely depending on the managed appliance’s firmware type and version. Some options, including Add Known Service are only available when managing a Non-SonicOS device (such as a SonicWALL TELE3 TZX).

4

To add a custom service, enter its name in the Service Name field, enter the port range it uses in the Port Begin and Port End fields, select the appropriate protocol check boxes, and click Add Custom Service. Repeat this step for each service that you would like to add. A task gets scheduled for each service for each selected SonicWALL appliance.

5	To remove a service from the list, select its trash can check box and click Update. A task gets scheduled to update the services page for each selected SonicWALL appliance.

6	To clear all screen settings and start over, click Reset.

Creating Rules

This section describes how to define rules for defined services in SonicOS Standard.

To create a rule, complete the following steps:

1	Select the global icon, a group, or a SonicWALL appliance.

2	Expand the Firewall tree and click Rules. The Rules page displays.

 

3	Click Add Rule. The Add Rule dialog box displays.

4	Select a service from the from the Service Name list box. If the service does not exist, refer to Adding a Service .

5	Select whether access to this service is allowed or denied.

6	Select the SonicWALL interface to which this rule applies from the Source list box.

7	To apply the rule to a range of IP addresses, enter the first and last IP addresses of the range in the Addr. begin field and Addr. End fields, respectively. The rule applies to requests originating from IP addresses within this range. For all IP addresses, enter an asterisk (*).

8	Specify when the rule will be applied. By default, it is Always. To specify a time, enter the time of day (in 24-hour format) to begin and end enforcement. Then, enter the days of the week to begin and end rule enforcement.

9	Specify how long (in minutes) the connection might remain idle before the connection is terminated in the Inactivity Timeout field.

CAUTION: Fragmented packets are used in certain types of Denial of Service attacks and, by default, are blocked. You should only enable Allow Fragmented Packets if users are experiencing problems accessing certain applications and the SonicWALL logs show many dropped fragmented packets.

10	SonicWALL appliances can manage outbound traffic using bandwidth management. To enable bandwidth management for this service, select Enable Outbound Bandwidth Management.

a	Enter the amount of bandwidth that is always be available to this service in the Guaranteed Bandwidth field. Keep in mind that this bandwidth is permanently assigned to this service and not available to other services, regardless of the amount of bandwidth this service does or does not use.

b	Enter the maximum amount of bandwidth that is available to this service in the Maximum Bandwidth field.

c	Select the priority of this service from the Bandwidth Priority list box. Select a priority from 0 (highest) to 7 (lowest).

NOTE: In order to configure bandwidth management for this service, bandwidth management must be enabled on the SonicWALL appliance. To configure bandwidth management in SonicOS Standard, refer to Configuring Ethernet Settings on page 234. For SonicOS Enhanced, refer to Overview of Interfaces on page 155.

11	To add this rule to the rule list, click Update. Repeat Step 3 through Step 11 for each rule that you want to add.

12

If the network access rules have been modified or deleted, you can restore the Default Rules. The Default Rules prevent malicious intrusions and attacks, block all inbound IP traffic and allow all outbound IP traffic. To restore the network access rules to their default settings, click Restore Rules to Defaults and click Update. A task is scheduled to update the rules page for each selected SonicWALL appliance.

13

If the network access rules for a SonicWALL appliance need to be uniform with access rules for other SonicWALL appliances in the same group, you can restore the group rules. To do this, click Restore Rules to Group Settings and click Update. A task is scheduled to overwrite the rules page for each selected SonicWALL appliance. If you want to append the group rules to the current rules, make sure Append Services and Rules inherited from group is selected on the GMS Settings page of the Console Panel.

NOTE: This option is not available at the group or global level.

14	To modify a rule, select its notepad icon. The Add/Modify Rule dialog box displays. When you are finished making changes, click Update. Dell SonicWALL GMS creates a task that modifies the rule for each selected SonicWALL appliance.

15	To disable a rule without deleting it, deselect Enable Rule.

16	To delete a rule, select its trash can icon and click Update. Dell SonicWALL GMS creates a task that deletes the rule for each selected SonicWALL appliance.