SonicOS 7.1 Rules and Policies for Classic Mode
- SonicOS 7.1 Rules and Policies
- Overview
- Access Rules
- Setting Firewall Access Rules
- About Connection Limiting
- Using Bandwidth Management with Access Rules
- Creating Access Rules
- Configuring Access Rules for IPv6
- Enabling and Disabling Access Rules
- Editing Access Rules
- Deleting Access Rules
- Restoring Access Rules to Default Settings
- Displaying Access Rules
- Displaying Access Rule Traffic Statistics
- Configuring Access Rules for NAT64
- Configuring Access Rules for a Zone
- Access Rules for DNS Proxy
- User Priority for Access Rules
- Access Rule Configuration Examples
- Setting Firewall Access Rules
- NAT Rules
- About NAT in SonicOS
- About NAT Load Balancing
- About NAT64
- About FQDN-based NAT
- About Source MAC Address Override
- Viewing NAT Policy Entries
- Adding or Editing NAT or NAT64 Rule Policies
- Deleting NAT Policies
- Creating NAT Rule Policies: Examples
- Creating a One-to-One NAT Policy for Inbound Traffic
- Creating a One-to-One NAT Policy for Outbound Traffic
- Inbound Port Address Translation via One-to-One NAT Policy
- Inbound Port Address Translation via WAN IP Address
- Creating a Many-to-One NAT Policy
- Creating a Many-to-Many NAT Policy
- Creating a One-to-Many NAT Load Balancing Policy
- Creating a NAT Load Balancing Policy for Two Web Servers
- Creating a WAN-to-WAN Access Rule for a NAT64 Policy
- DNS Doctoring
- Routing
- DNS Rules
- Content Filter Rules
- App Rules
- About App Rules
- Rules and Policies > App Rules
- Verifying App Rules Configuration
- App Rules Use Cases
- Creating a Regular Expression in a Match Object
- Policy-based Application Rules
- Logging Application Signature-based Policies
- Compliance Enforcement
- Server Protection
- Hosted Email Environments
- Email Control
- Web Browser Control
- HTTP Post Control
- Forbidden File Type Control
- ActiveX Control
- FTP Control
- Bandwidth Management
- Bypass DPI
- Custom Signature
- Reverse Shell Exploit Prevention
- Endpoint Rules
- SonicWall Support
Creating DNS Policy Rules
You need to define DNS Policy Rules in order to enable DNS Filtering.
To create a DNS Policy Rules
- Navigate to POLICY | Rules and Policies > DNS
-
Click Add Top at the bottom left of the screen. The Adding DNS Policy dialog displays.
- In the Name field, enter a name for the policy.
- In the Tags field, enter any tags you want associated with the policy. (This field is optional.)
- In the Description field, enter a brief description of the policy. (This field is optional.)
- For the Action, select Filter. SonicOS proxies connections matching this rule using the 4 to 4 mode and completes any action specified in the profile. Actions are Allow/Block/Negative/Forged IP.
- From the Schedule list, select when you want the policy to be active.
- Select Enable to enable the policy.
- From the Profile list, select the DNS profile you want associated with the policy.
- On the Source/Service tab:
- From the Zone/Interface list, select the zone affected by the policy.
- From the Address list, select an IP address for the policy.
- From the Service list, select the service to be used by the policy.
- On the Optional Settings tab:
In the Number of Connections allowed (% of max connections) field, enter the maximum number of connection (as a percentage of the number of allowed connections).
Select Enable Connection Threshold for each Source IP to set the maximum number of connections for each source IP address. Enter the number of connections allowed in the field to the right.
- Select Show Diagram to display the diagram that shows where the policy operates between the source and the service.
- Click Add.
Was This Article Helpful?
Help us to improve our support portal