SonicWALL NSA 240 - Applying Security Services to Network Zones

SonicWALL NSA 240 Getting Started Guide Page 45
Disabling, Editing, or Deleting Addresses from the CFS
Exclusion List
You can temporarily disable CFS exclusions without removing
all entries from the list. You can also delete some or all IP
address ranges from the CFS Exclusion List.
1. To keep the CFS Exclusion List entries, but temporarily
allow content filtering policies to be applied to these IP
addresses, uncheck the Enable CFS Exclusion List
checkbox. This disables CFS exclusions.
2. To edit a trusted domain entry, click the pencil icon in the
Configure column.
3. To delete an individual trusted domain from the CFS
Exclusion List, click the Delete icon for the entry in the
Configure column.
4. To delete all trusted domains from the CFS Exclusion List,
click Delete All.
5. On the Security Services > Content Filter page, click
Accept.
Applying Security Services to Network
Zones
A network zone is a logical group of one or more interfaces to
which you can apply security rules to regulate traffic passing
from one zone to another zone.
Security services such as Gateway Anti-Virus are automatically
applied to the LAN and WAN network zones. To protect other
zones such as the DMZ or Wireless LAN (WLAN), you must
apply the security services to the network zones. For example,
you can configure SonicWALL Intrusion Prevention Service for
incoming and outgoing traffic on the WLAN zone to add more
security for internal network traffic.
To apply services to network zones:
1. Navigate to the Network > Zones page.
2. In the Zone Settings table, click the Configure icon for the
zone where you want to apply security services.
3. In the Edit Zone dialog box on the General tab, select the
checkboxes for the security services to enable on this
zone.
4. On the Edit Zone page, select the checkboxes for the
security services that you want to enable.
5. Click OK.
6. To enable security services on other zones, repeat steps 2
through step 4 for each zone.