Filter
Top Products
Firewall > Access Rules
431
SonicOS Enhanced 4.0 Administrator Guide
Enabling Ping
This sections provides a configuration example for an access rule to allow devices on the DMZ
to send ping requests and receive ping responses from devices on the LAN. By default your
SonicWALL security appliance does not allow traffic initiated from the DMZ to reach the LAN.
Once you have placed one of your interfaces into the DMZ zone, then from the Firewall >
Access Rules window, perform the following steps to configure an access rule that allow
devices in the DMZ to send ping requests and receive ping responses from devices in the LAN.
Step 1 Click Add to launch the Add Rule window.
Step 2 Select the Allow radio button.
Step 3 From the Service menu, select Ping.
Step 4 From the Source menu, select DMZ Subnets.
Step 5 From the Destination menu, select LAN Subnets.
Step 6 Click OK.
Blocking LAN Access for Specific Services
This section provides a configuration example for an access rule blocking LAN access to NNTP
servers on the Internet during business hours.
Perform the following steps to configure an access rule blocking LAN access to NNTP servers
based on a schedule:
Step 1 Click Add to launch the Add window.
Step 2 Select Deny from the Action settings.
Step 3 Select NNTP from the Service menu. If the service is not listed in the list, you must to add it in
the Add Service window.
Step 4 Select Any from the Source menu.
Step 5 Select WAN from the Destination menu.
Step 6 Select the schedule from the Schedule menu.
Step 7 Enter any comments in the Comment field.
Step 8 Click OK.
Enabling Bandwidth Management on an Access Rule
Bandwidth management can be applied on both ingress and egress traffic using access rules.
Access rules displaying the Funnel icon are configured for bandwidth management.
Tip Tip: Do not configure bandwidth management on multiple interfaces on a zone, where the
configured guaranteed bandwidth for the zone is greater than the available bandwidth for
the bound interface.
For more information on Bandwidth Management see “Bandwidth Management” on page 479.