Firewall Access Rules Required to Restrict Internet Connectivity with User Level Authentication on
03/26/2020 119 People found this article helpful 397,192 Views
Description
Firewall Access Rules Required to Restrict Internet Connectivity with User Level Authentication on SonicOS Enhanced
Resolution
When running SonicOS Enhanced (any version), two special "LAN to WAN" access rules must be manually added and the default "LAN to WAN" outbound rule must be manually modified in order to automatically redirect LAN users to the SonicWall login page when attempting to access the Internet while user level authentication has been enabled. Select Firewall > Access Rules, choose LAN to WAN from the table and create the following rules in the priority order shown:
- Allow DNS for all users.
- Action: Allow
- Service: DNS
- Source: Any
- Destination: Any
- Users: All
- Allow HTTP access for a defined group of authenticated users. The predefined "Trusted Users" group is used as an example.
- Action: Allow
- Service: HTTP
- Source: Any
- Destination: Any
- Users: Trusted Users
- Change the Users field in the preexisting default LAN to WAN outbound rule from "All" to "Trusted Users" and make sure its priority is 3.
Related Articles
Categories
Was This Article Helpful?
YESNO