SonicWALL NSA 240 - Enabling Content Filtering Service

Page 44 Enabling Security Services in SonicOS
3. To log all spyware attacks, leave the Log Redundancy
Filter field set to zero. To enforce a delay between log
entries for detections of the same attack, enter the
number of seconds to delay.
4. Click Configure Anti-Spyware Settings to configure
clientless notification alerts and create a SonicWALL Anti-
Spyware exclusion list.
5. Select the Disable SMTP Responses box to suppress the
sending of email messages to clients from SonicWALL
Anti-Spyware when spyware is detected in an email or
attachment.
6. Select Enable HTTP Clientless Notification Alerts and
customize the message to be displayed in the browser
when SonicWALL Anti-Spyware detects a threat from the
HTTP server.
7. Select Enable Anti-Spyware Exclusion List and then
click Add to define a range of IP addresses whose traffic
will be excluded from SonicWALL Anti-Spyware scanning.
8. When finished in the Add Anti-Spyware Range dialog box,
click OK.
9. In the Anti-Spyware Config View window, click OK.
10. Select the Enable Inbound Inspection checkboxes for the
protocols to inspect. By default, SonicWALL GAV inspects
all inbound HTTP, FTP, IMAP, SMTP, and POP3 traffic.
11. Select the Enable Inspection of Outbound
Communication checkbox to enable scanning of traffic
that originates internally.
12. On the Security Services > Anti-Spyware page, click
Accept.
Enabling Content Filtering Service
Content Filtering Service (CFS) Bypass for Administrators
The Do not bypass CFS blocking for the administrator
checkbox controls content filtering for administrators. By
default, when the administrator (“admin” user) is logged into the
SonicOS management interface from a system, CFS blocking is
suspended for that system’s IP address for the duration of the
authenticated session. If you prefer to provide content filtering
and apply CFS policies to the IP address of the administrator’s
system, perform the following steps:
1. Select the Do not bypass CFS blocking for the
Administrator checkbox.
2. Click Accept.
Enabling and Adding to the CFS Exclusion List
To enable the CFS Exclusion List and add a range of IP
addresses to it, perform the following steps:
1. Select the Enable CFS Exclusion List checkbox.
2. Click Add. The Add CFS Range Entry window is
displayed.
3. Enter the first IP address in the excluded range into the IP
Address From: field and the last address into the IP
Address To: field.
4. Click OK. The IP address range is added to the CFS
Exclusion List.
5. On the Security Services > Content Filter page, click
Accept.