How to configure Local CFS Server

03/26/2020 785 12358

DESCRIPTION:

This guide shows the steps to configure the Local (on-premises) CFS Server.

The CFS Local Responder Service is a Virtual Machine (VM) running CFS Services and it can be installled locally on a network. The firewall will point to this VM for ratings lookup.

It will also include Proxy Support with authentication.

NOTE: This service will require an additional license to be installed and configured.

CAUSE:

The Local CFS Responder Service is a new feature developed to extend and enhance CFS service availability. In depth, it improves CFS performances in some cases:

• Networks behind proxies, because it uses UDP for ratings.
• Schools, high performance environments need dedicated on-premises appliances.
• CFS rating queries from some countries will take a considerable amount of time.

RESOLUTION:

Configure the Local CFS Server

1. Install the Local CFS Responder Service onto a local machine/VM: it can be downloaded from you download center on MySonicWall.com
   
   

   NOTE: Please, make sure to follow the suggested VM Specs: ESX/ESXi / Hyper-V, 50GB Hard Disk; Quad-Core CPU; 16GB RAM.

2. Configure an IP Address for the Local CFS Server (including subnet mask, gateway and DNS).
   
   • If using a Proxy Server, you will have to enable "Connecting to backend Server with proxy" and type the Proxy Server details:
     
3. The Backend Server is the server we will use to obtain the ratings. This is automatically populated.
4. The UTMs Allowed section is to specify the Serial Number of the appliances allowed to contact the Local CFS Server for rating queries
   

Configure the SonicWall to contact the Local CFS Server for rating requests

1. Go to the Manage tab
2. Click Security Services | Content Filtering
3. Check "Enable Local CFS Server"
4. Type the Local CFS Server IP address

CAUTION: This section will only be displayed if there is a valid license for the Local CFS Server.

Configuring Blacklist or Whitelist

You can now import a blacklist or add blacklisted URLs one by one by clicking the Blacklist/Whitelist tab:

Configuring Custom Categories

You can also overwrite our CFS Servers ratings by locally rating a domain:

1. Go to the Custom Category tab
2. Click Add
3. Type a Domain and select the categories you wish to assign to the domain.

Local CFS Server Administration

From the Administration tab you can manage your Local CFS Server:

1. Change the password
2. Apply firmware upgrade
3. Restart the appliance
4. Import/Export Settings
   
   

Status Page

The Status page shows the Serial Number of the appliance and the version, the licenses information and the latest logs so you can troubleshoot your local CFS server if any issue.

NOTE: The message "There is no rating update from Cloud DB" indicate that the Cloud DB is still the same as the one previously downloaded and locally stored. The local CFS Server will attempt to download the database every hour but if there is no update, it will not be downloaded.