SonicWALL 4.5 Manuale Utente

116

Enforced Client Product Guide

Using the Firewall Protection Service

5

Specify a connection type 

The connection type defines the environment where client computers are used and determines 
which IP addresses and ports the firewall protection service allows to communicate with them. 
This option defines what the firewall protection service considers to be suspicious activity. The 
default setting is 

. 

Select from three connection environments: 

Is connected directly to the Internet.

 

 
For example: through a dial-up 
connection, a DSL line, or a cable modem; 
through any type of connection in a coffee 
shop, hotel, or airport. 

Blocks communications with all other 
computers, including those on the same 
subnet. 

Is connected indirectly to a network that is 
separated from the Internet by a hardware 
router or firewall. 

 

 
For example: in a home or office network. 

Allows communications with other 
computers on the same subnet, but 
blocks all other network 
communications. 

Should communicate only through 
specific ports or with a specific range of 
IP addresses, or the computer is a server 
providing system services.

 

 
You also need to configure additional 
options (see 

). 

Allows communications only with the 
ports and IP addresses you specify, and 
blocks all other network 
communications. 

To specify a connection type: 
1 On the 

 page, click 

 (or click 

 to modify an existing policy). 

2 Click the 

tab, select a 

, then click 

. 

Configure a custom connection 

Configure a custom connection type to designate: 

„

Ports through which your computer can receive communications. This is required to set up 
your computer as a server that provides system services. Your computer will accept 
communications through any open port from any computer. 

„

IP addresses from which your computer can receive communications. This allows you to 
limit communications to specific IP addresses. 

From the 

 page, you can define exactly which communications the 

firewall protection service allows: 

„

For client computers used in multiple environments, it is important to update the connection 
type whenever the working environment changes. For example, mobile users who connect to 
both secure (trusted) and unsecure (untrusted) networks must be able to change their setting 
accordingly. 

This feature does not affect Internet applications running on client computers. To configure 
Internet applications, see