-
Products
-
SonicPlatform
SonicPlatform is the cybersecurity platform purpose-built for MSPs, making managing complex security environments among multiple tenants easy and streamlined.
Discover More
-
-
Solutions
-
Federal
Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn MoreFederalProtect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn More - Industries
- Use Cases
-
-
Partners
-
Partner Portal
Access to deal registration, MDF, sales and marketing tools, training and more
Learn MorePartner PortalAccess to deal registration, MDF, sales and marketing tools, training and more
Learn More - SonicWall Partners
- Partner Resources
-
-
Support
-
Support Portal
Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn MoreSupport PortalFind answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn More - Support
- Resources
- Capture Labs
-
- Company
- Contact Us
How to block websites based on reputation with CFS 5.0?
12/26/2023 
2 People found this article helpful
146,279 Views
Description
This articles explains how to block the websites based on the "Reputation" which is newly added to SonicOS 7.1.1 CFS 5.0.
Resolution
- In SonicOS 7.1.1 we have a new CFS version 5.0 that includes reputation-based content filtering.
In SonicOS 7.1.1 CFS 5.0 is added and it has 3 CFS filtering orders.
1. URL list.
2. Category.
3. Reputation.
- The CFS will first check the URL list, then the Category, and at last, it will check the reputation.
- Webroot is used for the URL reputation check.
- Reputation values are defined based on the contents of the URL.
- Threat reputation is categorized based on the score level.
- Reputation Global mode.
A new reputation Object can be added under the page "Object | Macth Objects | Reputation. - This article shows how to block the website www.cnn.com based on its reputation.
- The website www.cnn.com comes under the category of "General information" and the category of "News and Media".
- To check the category of a website in the firewall, Please navigate to Device | Diagnostics | URL Rating Request.
- Also, we can visit the website https://cfssupportapi.global.sonicwall.com to check the URL rating and reputation.
- Navigate to OBJECT | Profile Object | Content filter.
- Edit the CFS Profile object.
Note: We can always create custom CFS Profile objects based on requirements, In this article, we have selected the default CFS profile object. - Click on Reputation and Enable "Reputation" as shown below.
- In the below image, since we are blocking the cnn.com website based on reputation, we have allowed www.cnn.com in the category list "General information" and sub-category of "News and Media".
- Navigate to OBJECT | Macth Object | Reputation.
- Edit Reputation object.
- Since the reputation value for cnn.com is 81 it comes under the Reputation = Trustworthy.
- To block cnn.com based on reputation, enable block for Trustworthy objects, and click on save.
- Try to access the website www.cnn.com.
- Even though we have allowed the news and media category, the website will get blocked as shown below with the Block reason as "Trustworthy for Reputation".
NOTE: This block page for HTTPS websites will only appear if the DPI-SSL certificate is installed on the end-point.
Related Articles
- How to Block Google QUIC Protocol on SonicOSX 7.0?
- How to block certain Keywords on SonicOSX 7.0?
- How internal Interfaces can obtain Global IPv6 Addresses using DHCPv6 Prefix Delegation
Categories
- Firewalls > TZ Series > Content Filtering Service
- Firewalls > NSa Series > Content Filtering Service
YES
NO