- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
-
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
-
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
How to restrict web features in CFS 4.0
03/26/2020 
74 People found this article helpful
95,994 Views
Description
Restrict Web Features is available in CFS 3.0, but in CFS 4.0 this feature has been removed. This article will show you how to realize Restrict Web Features after upgrading to CFS 4.0.
Resolution
Restrict Web Features are included with SonicOS. In CFS 3.0 you can select any of the following applications to block:
• ActiveX • Java • Cookies • Access to HTTP Proxy Servers
When you upgrade to CFS 4.0, as these features are removed, you can follow below steps to block these applications.
- Block ActiveX
1. Go to Firewall | Content Filter Objects | Create an ActiveX URI Object.
Add an Active X URI Object "*.ocx" at URI List Objects area.
2. Add the Active X URI List Object to the Forbidden URI List of the CFS Profile Object at CFS Profile Objects area
3. Navigate to Security Services | Content Filter page, Create the CFS Policy with the Profile Object you created in step 2.
- Block Java
1. Go to Firewall | Content Filter Objects | Create an JAVA URI Object.
Add an JAVA URI Object "*.jar" and "*.class"at URI List Objects area.
2. Add the JAVA URI List Object to the Forbidden URI List of the CFS Profile Object at CFS Profile Objects area
3. Navigate to Security Services | Content Filter page, Create the CFS Policy with the Profile Object you created in step 2.
- Block Cookies
1. Go to Firewall | Content Filter Objects | Edit or Add a CFS Action Objects | Tick the box of option Wipe Cookies
2. Navigate to Security Services | Content Filter page, Create the CFS Policy with the Action Object you created in step 1.
- Block Access to HTTP Proxy Servers
Note: to block HTTP Proxy Servers, you should have your License for App Rules ready.
1. Navigate to Firewall | App Control Advanced page, Enable App Control at App Control Global Settings area.
2. Select PROXCY-ACCESS for Category and HTTP Proxy for Application at App Control Advanced area | Click Configure button for HTTP Proxy Application.
3. Select Enable for option Block in the pop-up App Control App Settings window | Click button OK.
Related Articles
- L2TP user to access the network across site to site vpn.
- Global VPN Client slowing down the internet speed
- App Control fails by schema error when editing VPN category
Categories
- Firewalls > TZ Series
- Firewalls > SonicWall SuperMassive E10000 Series
- Firewalls > SonicWall SuperMassive 9000 Series
- Firewalls > SonicWall NSA Series
YES
NO