How to block websites based on reputation with CFS 5.0?

This articles explains how to block the websites based on the "Reputation" which is newly added to SonicOS 7.1.1 CFS 5.0.

• In SonicOS 7.1.1 we have a new CFS version 5.0 that includes reputation-based content filtering.

• In SonicOS 7.1.1 CFS 5.0 is added and it has 3 CFS filtering orders.

  
  

  
  

  
  

  
  

            1. URL list.
            2. Category.
            3. Reputation.

• The CFS will first check the URL list, then the Category, and at last, it will check the reputation.
• Webroot is used for the URL reputation check.
• Reputation values are defined based on the contents of the URL.
• Threat reputation is categorized based on the score level.

• Reputation Global mode.
  A new reputation Object can be added under the page "Object | Macth Objects | Reputation.
• This article shows how to block the website www.cnn.com based on its reputation.
• The website www.cnn.com comes under the category of "General information" and the category of "News and Media".
• To check the category of a website in the firewall, Please navigate to Device | Diagnostics | URL Rating Request.
• Also, we can visit the website https://cfssupportapi.global.sonicwall.com to check the URL rating and reputation.
• Navigate to OBJECT | Profile Object | Content filter.
• Edit the CFS Profile object.
   Note: We can always create custom CFS Profile objects based on requirements, In this article, we have selected the default CFS profile object.
• Click on Reputation and Enable "Reputation" as shown below.
• In the below image, since we are blocking the cnn.com website based on reputation, we have allowed www.cnn.com in the category list "General information" and sub-category of "News and Media".

• Navigate to OBJECT | Macth Object | Reputation.
• Edit Reputation object.
• Since the reputation value for cnn.com is 81 it comes under the Reputation = Trustworthy.
  
• To block cnn.com based on reputation, enable block for Trustworthy objects, and click on save.
• Try to access the website www.cnn.com.
• Even though we have allowed the news and media category, the website will get blocked as shown below with the Block reason as "Trustworthy for Reputation".
  
  NOTE: This block page for HTTPS websites will only appear if the DPI-SSL certificate is installed on the end-point.