How to Configure Botnet Filtering with Firewall Access Rules

03/26/2020 125 16332

DESCRIPTION:

RESOLUTION:

Step 1: Create an Address Object for the Mail Server.

Step 2: Enable Botnet Filter Blocking based on the Firewall Access Rules and Enable Logging.

Step 3: Create an Access Rule that we want to apply the Botnet Filter service to. Enable the Botnet Filtering Checkbox on the Access Rule.

In our example we will create an access rule from the LAN>WAN to enable Botnet Filtering from the Mail Server.

Any traffic going to the Internet from the Mail Server will be scanned via the Botnet Filter Security Service, all other network traffic will not be scanned.

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

Step 1: Create an Address Object for the Mail Server.

1. Click Manage in the top navigation menu
2. Navigate to Objects | Address Objects
3. Click on Add
4. Enter the Mail Server IP address
5. Click on OK to Save

Step 2: .

1. Click Manage in the top navigation menu
2. Navigate to Security Services | Botnet filter
3. Enable Botnet Filter Blocking based on the Firewall Access Rules and Enable Logging
   
4. Click on ACCEPT to Save

Step 3: Create an Access Rule that we want to apply the Botnet Filter service to.

1. Click Manage in the top navigation menu
2. Navigate to Rules | Access Rules
   
3. Click on Add
4. In our example we will create an access rule from the LAN>WAN to enable Botnet Filtering from the Mail Server.
5. Enable Botnet filter
6. Click on OK to Save

Any traffic going to the Internet from the Mail Server will be scanned via the Botnet Filter Security Service, all other network traffic will not be scanned.