SonicWall General rules configuration

Through the preliminary configuration of the SonicWall firewall yesterday, we can now access the external network, but for our enterprise, if one or more firewalls are used in this way, it does not meet the requirements of our enterprise, so it is necessary to implement some rules or policies for our internal personnel to access the Internet.

In order to better meet our company's corporate network requirements and network access policy, today I will complete the general rule configuration of the policy. Here is an example of open HTTP.

First, we choose firewall- > access rules, and choose from LAN to WAN

We see that there is a default policy that allows LAN machines to access any service outside WAN.

We modify the policy, first change this policy to forbidden, click the edit icon of this rule, pop up the following interface, select Deny, click OK, we can see that all access has been banned.

Next, we add services that are allowed to be accessed, which can be controlled according to IP, protocol, time, user, bandwidth, etc. We allow an IP192.168.168.99 in the private network to access the http service of the external network as an example, click add, select the service as http, and select the source network IP. If it is not in the example table, we can add it, or create it in advance, and then select it.

Select the destination network as any, select time, etc., or click OK according to the default setting.

We can see that the rules are in force, and through testing, we find that they can be accessed.