How can I block an IP address using access rules?

Answers

• TKWITS Community Legend ✭✭✭✭✭

  August 21

  Based on the screenshot they provided yes. A more thorough KB would be:

  https://www.sonicwall.com/support/knowledge-base/how-to-configure-access-rules/210531012212553

  0
• InTech97 Newbie ✭

  November 13

  My client has a similar need to block IP addresses. So, we created an Address Object Group (we named it WAN IP Blacklist) and then created as many individual Address Objects of Type=Host, Zone=WAN for the IP addresses you want to block. Then add the Host/WAN address objects to the previously created Address Object Group.

  Then we created two "Deny" Access Rules:

  WAN > LAN, Source=the Address Object Group created above, Destination=Any, Service=Any, Action=Deny

  WAN > WAN, same config as WAN > LAN.

  Make sure the priorities of the Access Rules are set so they are processed first for their respective zones.

  0
• blue Newbie ✭

  November 17

  couldn't a WAN to ANY cut on double entry? I also thought by default all traffic is dropped unless a rule is created?

  0
• TKWITS Community Legend ✭✭✭✭✭

  November 19

  "I also thought by default all traffic is dropped unless a rule is created?"

  Sonicwalls are implicit deny, so your statement is correct.

  0