How can I exclude an IP address, range of IP addresses or group of IP addresses?

10/14/2021 202 People found this article helpful 169,827 Views

Download

Print

Share

• LinkedIn
• Twitter
• Facebook
• Email
• Copy URL The link has been copied to clipboard

Description

At times network administrator would want to allow certain IP addresses to access any unrestricted access to websites on the Internet. In SonicWall you can add an IP address or range of IP addresses or Group of IP addresses in the exclusion list of the CFS policy. These address ranges would be  treated as trusted domains.

Resolution

Resolution for SonicOS 7.X

This release includes significant user interface changes and many new features that are different from the SonicOS 6.5 and earlier firmware. The below resolution is for customers using SonicOS 7.X firmware.

CFS Exclusion for only one IP Address

Let us consider your local LAN network is 192.168.168.0/24 and you applied CFS for LAN zone and you would like to Exclude only one IP address 192.168.168.20 from CFS policy to allow unrestricted Internet access.

• Creating Address object for exclusion IP Address

1. Please login to your SonicWall Management Interface.
2. Navigate to OBJECT | Match Objects | Addresses page.
3. Click Add button under Address Objects, to get Add Address Object Window. Create address object for one IP as below

• Name: CFS Exclusion IP (Any Friendly Name as you wish but need to select that while configuring CFS Exclusion )
• Zone : LAN
• Type : Host
• IP Address: 192.168.168.20 (IP Address which you would like to exclude from CFS)
• Click Save button after typing the information to create object.
  
  
  
  

• Configuring CFS Exclusion with Address Object

1. Please login to your SonicWall management interface.
2. Navigate to POLICY | Security Services | Content Filter.
3. Under Excluded Address , by default None is selected .
4. Under Excluded Address Drop Down List , select the IP Address Object which we created in previous step (Named as CFS Exclusion IP).
5. Click Accept.
   
   

CFS Exclusion for Range of IP

Let us consider your local LAN network is 192.168.168.0/24 and you applied CFS for LAN zone. You would like to exclude range of IP (192.168.168.50 to 192.168.168.60) from CFS for full Internet access without any block. Please follow below steps for CFS exclusion. 

• Creating Address object for Exclusion Range of IP Address

1. Please login to your SonicWall Management Interface.
2. Navigate to OBJECT | Match Objects | Addresses page.
3. Click Add button under Address Objects, to get Add Address Object Window.

• Name: CFS Exclusion IP (Any Friendly Name as you wish but need to select that while configuring CFS Exclusion )
• Zone : LAN
• Type : Range
• Starting Ip Address: 192.168.168.50 
• Ending Ip Address: 192.168.168.60
• Click Save
  
  
  
  

• Configuring CFS Exclusion with Address Object

1. Please login to your SonicWall Management Interface.
2. Navigate to POLICY | Security Services | Content Filter.
3. Under Excluded Address , by default None is selected .
4. Under Excluded Address Drop Down list , select the IP Address Object.
5.  Click Accept.
   
   

CFS Exclusion for Group of IP Address 

• Creating Address Group for Group of IP Address 
  
  

1. Please login to your SonicWall management page.
2. Please create address object for IP (192.168.168.25, 192.168.168.35 & 192.168.168.45) as shown in previous steps.
3. Click  Add button under Address Groups, to get Add Address Object Group Window. Add the object which you created (For 192.168.168.25, 192.168.168.35 & 192.168.168.45) from left to right side box.
4. Click Save.
   
   
   
   

• Configuring CFS Exclusion with Address Object

1. Please login to your SonicWall Management Interface.
2. Navigate to POLICY | Security Services | Content Filter.
3. Under Excluded Address , by default None is selected .
4. Under Excluded Address Drop Down list , select the Address Group .
5. Click Accept.
   
   
   
   
   
   
   
   

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

CFS Exclusion for only one IP Address

Let us consider your local LAN network is 192.168.168.0/24 and you applied CFS for LAN zone and you would like to Exclude only one IP address 192.168.168.20 from CFS policy to allow unrestricted Internet access.

• Creating Address object for exclusion IP Address

1. Please login to your SonicWall and click MANAGE.
2. Navigate to POLICIES | Objects and click on Address objects.
3. Click Add button under Address Objects, to get Add Address Object Window. Create address object for one IP as below

• Name: CFS Exclusion IP (Any Friendly Name as you wish but need to select that while configuring CFS Exclusion )
• Zone : LAN
• Type : Host
• IP Address: 192.168.168.20 (IP Address which you would like to exclude from CFS)
• Click Add button after typing the information to create object.
  

• Configuring CFS Exclusion with Address Object

1. Please login to your SonicWall management page, click MANAGE.
2. Navigate to Security Services | Content Filter .
3. Under Excluded Address , by default None is selected .
4. Under Excluded Address Drop Down List , select the ip Address Object which we created in (Named as CFS Exclusion IP).
5. Then Click ACCEPT button at the bottom of the page .
   

CFS Exclusion for Range of IP

 Let us consider your local LAN network is 192.168.168.0/24 and you applied CFS for LAN zone. You would like to exclude range of IP (192.168.168.50 to 192.168.168.60) from CFS for full Internet access without any block. Please follow below steps for CFS exclusion. 

• Creating Address object for Exclusion Range of IP Address

1. Please login to your SonicWall and click MANAGE .
2. Navigate to POLICIES | Objects and click on Address objects.
3. Click Add button under Address Objects, to get Add Address Object Window. Create address object for one IP as below.

• Name: CFS Exclusion IP (Any Friendly Name as you wish but need to select that while configuring CFS Exclusion )
• Zone : LAN
• Type : Range
• Starting Ip Address: 192.168.168.50 
• Ending Ip Address: 192.168.168.60
• Click Add button after typing the information to create object.
  

• Configuring CFS Exclusion with Address Object

1. Please login to your SonicWall management page, click MANAGE.
2. Navigate to Security Services | Content Filter .
3. Under Excluded Address , by default None is selected .
4. Under Excluded Address Drop Down list , select the ip Address Object.
5.  Click ACCEPT .
   
   
   
   

 CFS Exclusion for Group of IP Address 

• Creating Address Group for Group of IP Address 
  
  

1. Please login to your SonicWall management page.
2. Please create address object for IP (192.168.168.25, 192.168.168.35 & 192.168.168.45) under POLICIES | Objects and click on Address objects.
3. Click  Add button under Address Groups, to get Add Address Object Group Window. Add the object which you created (For 192.168.168.25, 192.168.168.35 & 192.168.168.45) from left to right side box.
4.   Click OK.
   

• Configuring CFS Exclusion with Address Object

1. Please login to your SonicWall management page, click MANAGE.
2. Navigate to Security Services | Content Filter .
3. Under Excluded Address , by default None is selected .
4. Under Excluded Address Drop Down list , select the Address Group .
5. Click ACCEPT .
   

Related Articles

• Troubleshooting Network throughput, Latency, and Bandwidth Issues with a SonicWall UTM
• DHCP server packet dropped, RPF check failed
• How to Block Facebook Apps using Application Control

Categories

• Firewalls > NSa Series > Content Filtering Service
• Firewalls > NSv Series > Content Filtering Service
• Firewalls > TZ Series > Content Filtering Service