SonicOS 7.0 Objects

Technical Documentation>  Security Action Profile>  Adding Security Action Profiles>  Content Filter>  General
Table of Contents

General

General action profile helps to enable the options listed below:

  • HTTPS content filtering solution to inspect the contents of secure websites in addition to regular websites.

  • Safe Search to filter explicit content from search results.

    You can lock Safe Search if you want to keep Safe Search turned on and prevent users from turning it off.

  • Wipe cookies.

To configure General action profile of the Content Filter

  1. Navigate to OBJECT | Action Profiles > Security Action Profile.

  2. Do one of the following:

    • Add a new Security Action Profile.

      1. Click the Add icon.
      2. Enter an Action Profile Name.

    • Edit an existing Security Action Profile.

      Hover over an existing Security Action Profile and click the Edit icon.

  3. Click the Content Filter tab.
  4. Enable Content Filtering to activate SonicWall's Content Filtering service.

  5. Select a Content Filter Action.

    • None
    • Confirm
    • Passphrase

    The content filter action is applied to your security rule using the profile that has the action set to CFS.

  6. Scroll to the General option.

  7. Set the General action profile options.

    Enable HTTPS Content Filtering

    To enable content filtering for HTTPS sites.

    HTTPS content filtering is IP based and does not inspect the URL, but uses other methods to obtain the URL rating. When this option is enabled, CFS performs URL rating lookup in this order:

    • Searches the client hello for the Server Name, which CFS uses to obtain the URL rating.
    • If the Server Name is not available, searches the SSL certificate for the Common Name, which CFS uses to obtain the URL rating.
    • If neither Server Name nor Common Name is available, CFS uses the IP address to obtain the URL rating.

    While HTTP content filtering can perform redirects to enforce authentication or provide a block page, HTTPS filtered pages are silently blocked.
    Enable Safe Search Enforcement

    To enforce Safe Search when searching on any of the following websites:

    • www.yahoo.com
    • www.ask.com
    • www.dogpile.com
    • www.lycos.com

    This enforcement cannot be configured at the policy level as the function employs DNS redirection to HTTPS sites. For HTTPS sites, client DPI-SSL with content filter must be enabled.
    Enable Google Force Safe Search

    To override the Safe Search option for Google inside each CFS Policy and its corresponding CFS Action.

    Typically, Safe Search happens automatically and is powered by Google, but when this option is enabled, SonicOS rewrites the Google domain in the DNS response to the Google Safe Search virtual IP address.

    This feature takes effect only after the DNS cache of the client host is refreshed.
    Enable YouTube Restrict Mode

    To access YouTube in Restrict (Safe Search) mode.

    YouTube provides a new feature to screen videos that may contain inappropriate content flagged by users and other signals. When this feature is enabled, SonicOS rewrites the DNS response for the YouTube domain to its Safe Search virtual IP address.

    This feature takes effect only after the DNS cache of the client host is refreshed.
    Enable Bing Force Safe Search

    To override the Safe Search option for Bing inside each CFS Policy and its corresponding CFS Action.

    When this feature is enabled, SonicOS rewrites the DNS response for the Bing domain to its Safe Search virtual IP address.

    This feature takes effect only after the DNS cache of the client host is refreshed.
    Wipe Cookies To remove cookie trace pages of visited websites.
  8. Click Save.
Chat