SonicWALL 2100 CF User manual

COMPREHENSIVE INTERNET SECURITY™
SSSonicWALL Content Security Manager 2100 CF
Getting Started Guide

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 1
SonicWALL Content Security Manager 2100 CF
Getting Started Guide
Thank you for purchasing the SonicWALL Content Security Manager 2100 Content Filter
(hereafter referred to as the Content Security Manager). The Content Security Manager is an
Internet content and application filtering solution that enhances security and employee
productivity, optimizes network bandwidth and mitigates legal liabilities.
The Content Security Manager integrates into virtually any network topography to provide
powerful, scalable, cost-effective Internet content filtering. It is easy to implement, requiring no
change to your network clients. The Content Security Manager filters all HTTP traffic on any port,
regardless of whether the network clients use external proxy servers.
This Getting Started Guide provides basic installation and configuration instructions for the
Content Security Manager. After you complete the configuration steps in this guide, you may need
to further configure your Content Security Manager to fit the complexities of your network.
Note: For complete configuration instructions, refer to the SonicWALL Content Security Manager
2100 CF Administrator’s Guide available on the SonicWALL Content Security Manager Resource
CD and on the SonicWALL Documentation Web site at:
<http://www.sonicwall.com/services/documentation.html>
Before You Begin
Check Package Contents
• One SonicWALL Content Security Manager
2100 CF
• One SonicWALL Content Security Manager
2100 CF Getting Started Guide
• One SonicOS CF 1.0 Release Notes
• One SonicWALL Regulatory Statement
• Two straight-through Ethernet cables
• One red crossover Ethernet cable
• One power cord*
• One SonicWALL Content Security Manager Resource CD, which contains:
•The Content Security Manager 2100 CF Administrator’s Guide
•TheContent Security Manager 2100 CF Getting Started Guide
•TheSonicWALL ViewPoint User’s Guide
•TheSonicOS Log Events Reference Guide
*A power cord is included only with units shipped to North America.
Note: SonicWALL ADConnector and SonicWALL ViewPoint software for the SonicWALL
Content Security Manager are available for download from <https://www.mysonicwall.com>.
Any Items Missing?
If any items are missing from your package,
contact:
SonicWALL Support
Web: <http://www.sonicwall.com/support/>
E-mail: [email protected]

Page 2
What You Need to Provide
• A firewall or security appliance protecting your LAN
• PC or Macintosh computer to act as an offline management station for initial configuration of
the Content Security Manager
• Web browser for accessing the Content Security Manager’s Web-based management
interface. The Web browser must support Java and HTTP uploads. Internet Explorer 5.0 or
higher or Netscape Navigator 4.7 or higher are recommended.
Important Information You Need
LAN
LAN IP address range:
LAN netmask:
DNS server:
Firewall or Security Appliance
Firewall or router gateway IP address:
Firewall or security appliance management IP address:
mySonicWALL.com Account
This is sensitive information. Store this information carefully.
Username:
Password:
Content Security Manager Management Account
This is sensitive information. Store this information carefully.
Username: (default: admin)
Password: (default: password)
Content Security Manager Configuration Steps
Getting started with your Content Security Manager comprises the following steps:
“Applying Power to the Content Security Manager” on page 3
“Accessing the SonicWALL Management Interface” on page 3
“Configuring the Network Interfaces” on page 5
“Configuring the Time Zone” on page 6
“Setting the Administrator Name and Password” on page 6
“Connecting the Content Security Manager to Your Network” on page 7
“Registering Your Content Security Manager” on page 9
“Modifying the *Default Policy Group” on page 11
“Applying Application Filters” on page 13
“Integrating the Content Security Manager with Microsoft Active Directory” on page 14
Note: After step 6, the Content Security Manager is fully functional, using the built-in default policy
group to filter content for all users, blocking Adult Content, Drugs/Alcohol/Tobacco, and Racism/
Hate/Violence/Weapons. Follow steps 7, 8, and 9 to further customize your installation.
1
2
3
4
5
6
7
8
9
10

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 3
Applying Power to the Content Security Manager
1. Plug the power cord into the Content Security Manager and into an appropriate power outlet.
2. Turn on the Content Security Manager appliance using the On/Off switch located on the back
of the appliance.
The Power LED shines green when you activate the power switch. The Test LED lights up and
may blink while the appliance performs a series of diagnostic tests. When the Test light is no
longer lit, the Content Security Manager is ready for configuration.
Accessing the SonicWALL Management Interface
To access the Web-based management interface of the Content Security Manager:
1. Configure the computer you are using to manage the Content Security Manager (the offline
management station) with the following TCP/IP address properties:
• Address Type: Static
• IP Address: 192.168.168.20
• Subnet Mask: 255.255.255.0
Note: You do not need to configure the default gateway or DNS settings.
2. Connect one end of the red crossover Ethernet cable to the Ethernet port
of the offline management station. Connect the other end of the red
crossover cable to the X2 port on the Content Security Manager.
Note: The X2 port is for offline management only, and has no network
connection.
3. Start your Web browser.
Alert: Your Web browser must support Java and HTTP uploads. Internet Explorer 5.0 or
higher or Netscape Navigator 4.0 or higher are recommended.
1
2

Page 4
4. Enter http://192.168.168.168 in the Location or Address field and press Enter.
Unable to Connect?
If you cannot connect to the Content Security Manager, verify the following configurations:
• Did you correctly enter the Content Security Manager X2 management IP address,
http://192.168.168.168, in your Web browser?
• Did you change the TCP/IP network settings on your computer?
• Do you have the Ethernet cable connected to your computer and to the X2 (offline
management) port on your Content Security Manager?
• Did you use a crossover cable to connect your offline management station to the
Content Security Manager?
5. In the Content Security Manager authentication page, enter admin in the Name field and
password in the Password field and click Login. The System > Status page is displayed.

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 5
Configuring the Network Interfaces
Configure the Content Security Manager’s X0 Internal and X1 External interfaces to use an IP
address in the same range as your LAN. When you configure the X1 External interface, the
X0 Internal interface is automatically configured.
Alert: You must configure the network interfaces before connecting the Content Security Manager
to your network. If you have already connected cables to the X0 and X1 interfaces, disconnect
them before continuing this step.
Set the X2 Management interface to an use IP Address that does not conflict with any device on
your LAN:
Configuring the X0 Internal and X1 External Interfaces
1. In the left-navigation menu, click Network and then click Interfaces.
2. From the Network > Interfaces page, select the edit icon for the X1 External interface,
and enter the following IP addressing information in the Edit Interface window:
•IP Address - a static IP address in the correct range for your LAN. Make sure this address
will not be assigned to any other device
•Subnet Mask - the network subnet for your LAN
•Default Gateway - the default gateway of your network
•DNS Server - the DNS server address for your network
3. By default, HTTP, HTTPS and Ping management options are enabled on X0, X1, and X2
interfaces. You may login to the management interface and configure appliance from your LAN
or WAN by using the IP address of X0/X1 interfaces.
4. Click OK.
Configuring the Offline Management Interface
If a device on your network uses 192.168.168.168 (such as the LAN IP address of your firewall or
Internet gateway), you must change the default IP address of the offline management interface on
your Content Security Manager:
1. From the Network > Interfaces page, select the edit icon for the X2 Management
interface, and configure the IP address, network mask, default gateway and DNS servers in
the Edit Interface window.
2. Write the new offline management IP address and store it: ____________________________
3. Click OK.
Note: The X2 port is used for management only and does not have any access to the network or
the Internet. The Content Security Manager online help is not available from this port when you
click on the help button on any management interface page.
3

Page 6
Configuring the Time Zone
Before you register your Content Security Manager or use the content filtering database and
dynamic rating feature, you must set the time zone on the content security appliance to the correct
time zone for your location:
1. In the left-navigation menu, click System, and then click Time.
2. In the Time Zone list, select the correct time zone for your location.
3. Set the time correctly, or check the box for Set time automatically using NTP.
4. Check the box next to Automatically adjust clock for daylight saving time.
5. Click Apply in the top-right corner of the System > Time page.
Setting the Administrator Name and Password
For security reasons, you should set the administrative user name and password:
1. In the management interface, in the left-navigation menu, click System and then click
Administration.
2. In the System > Administration page, enter a new user name in the Administrator Name field.
The default name is admin.
3. Enter password in the Old Password field.
4. Enter a new administrative password in New Password field and enter it again in the Confirm
Password field.
5. Click Apply in the top-right corner of the page for your changes to take effect.
4
5

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 7
Connecting the Content Security Manager to Your Network
Connect the Content Security Manager between your LAN and your firewall/security appliance,
allowing it to filter content requests from the LAN before they pass through the firewall/security
appliance to the Internet.
Alert: Do not connect the Content Security Manager to your network until you have configured the
X0 and X1 interfaces. See Step 3, “Configuring the Network Interfaces” on page 5.
Connecting the Ethernet Cables
1. Connect one end of the Ethernet cable connected to your internal network (your LAN hub,
switch, or router) to the X0 (Internal) port of the Content Security Manager.
The LEDs on the X0 port light up indicating an active connection.
2. Connect one end of an Ethernet cable connected to your firewall or internet connection to the
X1 (External) port of the Content Security Manager.
The LEDs on the X1 port light up indicating an active connection.
Test Your Connectivity
1. Log into the Content Security Manager management interface.
2. In the left-navigation menu, click System and then click Diagnostics.
3. In the System > Diagnostics page, Select Ping from the Diagnostic Tool list.
4. In the Ping host or IP address field, enter your firewall or router gateway IP address and click
Go. Note the result.
5. Enter an address outside your firewall, such as www.sonicwall.com and click Go. Note the
result.
6
X0
Internal
X1
External
X2
Offline
Management
Firewall
Internet
Offline
Management
Station
LAN

Page 8
6. Enter the IP address of your DNS server and click Go. Note the result.
7. If any of the addresses you tried to ping did not respond or responded with a slow Ping time
(greater than 50 milliseconds), you may need to create static routes from your
Content Security Manager to the firewall or router gateway and to your DNS server.
Add Static Routes
If you cannot connect to the firewall or router gateway or to URLs outside your firewall, and your
network consists of multiple subnets, you may need to add static routes to your company routers,
internal DNS servers, and your ADConnector.
To add static routes in the Content Security Manager management interface, perform the following
steps:
1. In the Content Security Manager management interface, in the left-navigation menu, click
Network and then click Interfaces.
2. In the Network > Interfaces page, click Add below the Routing Table.
3. Click Add in the Routing Table section. The Add Route window is displayed.
4. Enter the beginning IP address of the IP address range to which the DNS server or Internet
gateway belongs in the IP Address From field.
5. Enter the ending IP address of the IP address in the IP Address To field.
6. Enter the IP address of the gateway device to which the DNS server or Internet gateway are
attached in the Gateway IP field.
7. Select Internal (X0) or External (X1) from the Interface menu.
8. Click OK. The static route entry is added to the Routing Table.
The Routing Table displays the list of destinations that the IP software maintains on each host
and router.

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 9
Registering Your Content Security Manager
Once you have established an Internet connection for your Content Security Manager, you must
register the Content Security Manager to activate:
• Allowed Nodes/Users license
• SonicWALL Content Filtering Service subscription
• Dynamic Rating Update Service
• Application Filter Service subscription
Registering your Content Security Manager also allows you to:
• Download related software:
• SonicWALL ADConnector
• SonicWALL ViewPoint
• Receive firmware updates
• Access to SonicWALL technical support
• Get subscription renewals
• Upgrade node/user licenses
Before You Register
You need a mySonicWALL.com account to register your Content Security Manager. You can
create a new mySonicWALL.com account directly from the SonicWALL management interface.
Alert: Verify that the DNS and Time settings on your Content Security Manager are correct when
you register the device. Configure Time settings in the System > Time page. Configure DNS
settings in the Edit Interface window from the Network > Interfaces page.
Note: mySonicWALL.com registration information is not sold or shared with any other company.
Creating a mySonicWALL.com Account
Creating a mySonicWALL.com account is fast, simple, and FREE. Simply complete an online
registration form in the Content Security Manager management interface.
If you already have a mysonicWALL.com account, go to “Registering Your
Content Security Manager Using the Management Interface” on page 10 to register your
appliance.
1. If you are not logged into the Content Security Manager management interface log in with the
Content Security Manager administrative user name and password.
2. If the System > Status page is not displaying in the management interface, click System in
the left-navigation menu, and then click Status.
7

Page 10
3. On the System > Status page, in the Security Services section, click the Register link in
Your SonicWALL is not registered. Click here to Register your SonicWALL.
4. In the mySonicWALL.com Login page, click the here link in “If you do not have a
mySonicWALL account, please click here to create one.” The mySonicWALL.com account
form is displayed.
5. In the MySonicWall Account page, enter in your information in the Account Information,
Personal Information and Preferences fields. All fields marked with an asterisk (*) are
required fields.
Note: Remember your username and password to access your mySonicWALL.com account.
6. Click Submit after completing the MySonicWALL Account form.
7. When the mySonicWALL.com server has finished processing your account, you will see a
page saying that your account has been created. Click Continue.
Congratulations. Your mySonicWALL.com account is activated.
Now you need to log into mySonicWALL.com to register your Content Security Manager.
Registering Your Content Security Manager
Using the Management Interface
1. Log in to the Content Security Manager management interface if you are not logged in.
2. If the System > Status page is not displaying in the management interface, click System in
the left-navigation menu, and then click Status.
3. On the System > Status page, in the Security Services section, click the Register link. The
mySonicWALL.com Login page is displayed.
4. Enter your mySonicWALL.com account username and password in the User Name and
Password fields, then click Submit.
5. At the top of the Product Survey page, Enter a “friendly name” for your SonicWALL content
security appliance in the Friendly Name field. The friendly name allows you to easily identify
your SonicWALL content security appliance in your mySonicWALL.com account.

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 11
6. Please complete the Product Survey. SonicWALL uses this information to further tailor
services to fit your needs.
7. Click Submit.
8. When the mySonicWALL.com server has finished processing your registration, you will see a
page informing you that your Content Security Manager appliance is registered. Click
Continue, and the System > Licenses page is displayed showing you all your activated
services.
Congratulations
Your Content Security Manager is now fully operational, filtering HTTP content for all users. At this
point, all network user traffic on the network segment is filtered using the preconfigured *Default
policy group, which applies the Adult Content, Drugs/Alcohol/Tobacco, and Racism/Hate/
violence/Weapons Web filter policies.
Note: You can modify the *Default policy group to block more objectionable content categories.
Refer to “Modifying the *Default Policy Group” on page 11 for instructions.
Continue with steps 7, 8, and 9 to further customize your installation.
Modifying the *Default Policy Group
The Content Security Manager includes a preconfigured *Default policy group that automatically
applies to all users on the network segment protected by the Content Security Manager, unless
you apply a specific filtering policy.
You can use the *Default policy group acts as a base-line defense, providing the highest level of
content filtering to all users and user groups you do not explicitly assign a more permissive filtering
policy.
The *Default policy group is initially configured to block the most common objectionable content
categories. It contains the default policies:
• *Adult Content
• *Drugs/Alcohol/Tobacco
• *Racism/Hate/Violence/Weapons
Depending on your organization’s content filtering needs, you can modify the *Default policy
group to include any combination of the 12 default policies included with the
Content Security Manager, and any custom content filtering policies.
Note: Refer to the appendix of the SonicWALL Content Security Manager 2100 CF
Administrator’s Guide for a detailed description of all SonicWALL Content Filtering Service default
policy categories.
8

Page 12
Adding Policies to the *Default Policy Group
1. In the Content Security Manager management interface, click on Web Filters, and then click
on Policy Groups. The Policy Group table lists the *Default policy group.
2. In the list of policy groups, click the edit icon in the same line as the *Default policy. The
Edit Policy Group window is displayed.
3. Click the Policies tab.
4. Select the policy categories you want to add to the *Default policy group. Select the Name
column to select all the categories. If you want to remove any policies, uncheck the policy.
Uncheck the Name column to unselect all the policies.
Alert: If you select all the categories, make sure you unselect the *Block Nothing policy.
Otherwise, nothing is blocked in the *Default policy.
5. Click OK.

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 13
Applying Application Filters
The Content Security Manager provides the ability to block application traffic from the following:
• IM (Instant Messaging) applications
• P2P (Peer-to-Peer) applications
• Multimedia applications
Application filters close a potential backdoor that can be used to compromise your network while
also improving employee productivity and conserving Internet bandwidth.
Note: Content Security Manager application filtering applies to all network users.
1. In the Content Security Manager management interface, click on Application Filters. The
Settings page is displayed.
2. Click Enable Application Filtering to enable Application Filtering.
3. If you want to block all Instant Messaging applications, click the Prevent All check box in the
row labeled IM (Instant Messaging) Applications.
4. If you want to block all Peer-to-Peer applications, click the Prevent All check box in the row
labeled P2P (Peer-to-Peer) Applications.
5. If you want to block all Multimedia applications, click the Prevent All check box in the row
labeled Multimedia Applications.
6. Click Apply.
9

Page 14
Integrating the Content Security Manager with
Microsoft Active Directory
To provide direct, single-sign-on integration with Microsoft’s Active Directory for applying filtering
properties, the Content Security Manager includes the SonicWALL ADConnector application to
provide an interface between the Content Security Manager filtering policies and Active Directory.
Note: Refer to the SonicWALL Content Security Manager 2100 CF Administrator’s Guide for
complete instructions on installing, configuring and using the SonicWALL ADConnector
application.
Alert: The following instructions assume Active Directory is fully operational on your network.
Note: If you are not using Active Directory, the Content Security Manager includes a built-in user
and group authentication database. Refer to the SonicWALL Content Security Manager 2100 CF
Administrator’s Guide,located on your SonicWALL Resource CD or available at the SonicWALL
documentation Web site: <http://www.sonicwall.com/services/documentation.html>.
10
LAN
Internet
Firewall
ADConnector
AD Domain
Controller
Content Security Manager

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 15
ADConnector Requirements
The Windows PC on which you install the SonicWALL ADConnector must meet the following
requirements:
• A direct or routable access to both the Active Directory Domain Controller and the
Content Security Manager
• An always on computer, so that the Content Security Manager can communicate with the
Windows computer as needed
• A computer that belongs to the domain against which the authentication occurs
Information You Need to Install and Configure ADConnector
Use the following information to install and configure the SonicWALL ADConnector:
• Content Security Manager X0/X1 interface IP address: ______________________
• Content Security ManagerADConnector Configuration Port Number: ___________________
• Content Security Manager ADConnector Configuration shared secret: __________________
The shared secret must be a 16-digit hexadecimal number, for example: 0123456789abcdef
• IP address of the ADConnector workstation: ______________________
• Workstation administrator account name: ______________________
• AD Domain administrator account name: ______________________
• AD Domain administrator account password.
Installing the SonicWALL ADConnector
The SonicWALL ADConnector installation wizard installs both the SonicWALL AD Configuration
Tool and the SonicWALL Agent Service.
Note: You must have administrative privileges on the computer where you are installing the
ADConnector.
Download SonicWALL ADConnector Software
Note: You must register your Content Security Manager before you can download the SonicWALL
ADConnector Software. For instructions registering, see Step 7: “Registering Your
Content Security Manager” on page 9.
1. Go to https://www.mySonicWALL.com and log in.
2. Click Download Center under Support in the left-hand column.
3. In the Type drop-down list, select Content Security Manager.
4. In the Available Software list, download the SonicWALL ADConnector.
Install the SonicWALL ADConnector
1. Launch the ADConnector setup program you downloaded from mySonicWALL.com.
2. You may be prompted to install the Microsoft.NET 1.1 Framework. Click Yes.
3. You may see a Security Warning dialog box asking if you want to accept a certificate from
InstallShield Software Corporation. SonicWALL uses InstallShield®to install the ADConnector
software. Click Yes.
4. If you are installing the Microsoft.NET framework, select I Agree in the Microsoft.NET
License Agreement dialog box, then click Install. When Microsoft.NET installation is
complete, the SonicWALL ADConnector installation wizard starts.

Page 16
5. The Welcome page is displayed for the SonicWALL ADConnector. Click Next.
6. In the License Agreement page, click I accept the terms in the license agreement if you
want to continue with the installation. Click Next.
7. On the Customer Information page, enter your name and organization. Click Next
8. On the Destination Folder page, use the default directory or click on the Change button to
specify another directory to install the program files. Click Next.
9. On the Ready to Install the Program page, click Install.
10. On the ADConnector Configuration page, enter:
•CSM Appliance IP - the IP address of the Content Security Manager
•CSM Appliance Port - the UDP port that will be used for communication between the two
devices. The default is 2258. This value will also be specified in ADConnector
Configuration window in the Content Security Manager management interface.
•Shared Key - the DES passphrase used to encrypt the communication between the
devices. The Shared Key must be a 16-digit hexadecimal number, for example:
0123456789abcdef.
11. Click Next.
12. On the CFA User Configuration page, enter information for the domain user account the
ADConnector will use to log into the AD Domain Controller. The account must have AD
administrator privileges. Enter the ADConnector Username, ADConnector Password, and
Domain Name.
13. Click Next.
14. On the Wizard Completed page, select Launch AD Connector if you want to start the
program immediately.
15. Click Finish.
Starting the SonicWALL ADConnector
After installing the SonicWALL ADConnector, start the service. The agent service must be running
at all times for the Content Security Manager to communicate with Active Directory.
1. On your Windows desktop, double click the ADConnector Configuration Tool icon, or from
the Windows Start menu, select Programs > SonicWALL > SonicWALL ADConnector >
ADConnector Configuration Tool. The ADConnector Configuration Tool launches. This is
part of the Microsoft Management Console (MMC).
2. In the Console Root window, click the expand (+) icon next to SonicWALL ADConnector in
the left column to display its contents in the right column.
3. Click the SonicWALL CSM Appliance icon.

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 17
4. Select the entry in the right window, and click the start button in the toolbar above the entry.
Preparing the ADConnector Configuration Tool for First Use
1. Expand the Users list to view the users.
2. The first time you click on a user, the ADConnector prompts you for the Active Directory
Attributes for the SonicWALL ADConnector. Click OK in the Warning dialog box.
3. In the Attribute Selection dialog box, select attributes that are otherwise unused in on the
system, for example, IP Phone. Select different attributes for Group Policy Attribute and User
Policy Attribute. Once the attributes have been selected, filtering policies for AD users and
groups can now be managed.
Configuring the Content Security Manager for Active Directory
1. In the Content Security Manager management interface, select Users > Settings.
2. In the Authentication Method section, select Use Windows Active Directory and click the
Configure button. The Active Directory Agent Configuration window is displayed.
3. Enter the IP address of the computer/server running the AD Agent in the IP Address field.
4. Enter a port number in the Port Number field.
5. In the Shared Secret field, enter the same as the shared key you configured for the
ADConnector when you installed it. The shared secret must be a sixteen-digit hexadecimal
number, for example, 0123456789abcdef.
6. Click OK to apply the configuration.
7. In the Users > Settings page, click Configure for Active Directory again.
8. Click Check. The Active Directory Agent Status window is displayed. If the AD Agent is
detected, the message AD agent is ready is displayed.
9. Click OK twice to exit.

Page 18
At the end of step 8, if you see the message, AD agent is not responding, test connectivity from
the Content Security Manager to the ADConnector:
1. In the management interface, click System and then click Diagnostics.
2. In the System > Diagnostics page, Select Ping from the Diagnostic Tool list.
3. In the Ping host or IP address field, enter the IP address of your ADConnector and click Go.
• If the ADConnector is not responding check that the computer with the ADConnector is
turned on and has internet connectivity. Then ping it again.
• If the ADConnector is not responding or is alive but has a very long Ping time (greater than
50 milliseconds), you should add a static route from the Content Security Manager to the
ADConnector.
• If the ADConnector is alive with a fast Ping time, your connectivity from the
Content Security Manager to the ADConnector is good. Verify that the service is running
and that the user you configured it with has sufficient privileges to communicate with the
Active Directory domain controller.
Adding a Static Route to the ADConnector
If the ADConnector is installed on a computer in a different subnet than the
Content Security Manager, you need to add a static route in the Content Security Manager to the
ADConnector station:
1. In the Content Security Manager management interface, in the left-navigation menu, click
Network and then click Interfaces.
2. In the Network > Interfaces page, click Add below the Route table.
3. Click Add in the Routing Table section. The Add Route window is displayed.
4. Enter the beginning IP address of the IP address range to which the ADConnector belongs in
the IP Address From field.
5. Enter the ending IP address of the IP address in the IP Address To field.
6. Enter the IP address of the gateway device to which the ADConnector is attached in the
Gateway IP field.
7. Select Internal (X0) from the Interface menu.
8. Click OK. The static route entry is added to the Routing Table.
Note: For instructions on assigning filter policies to users in Active Directory, see the SonicWALL
Content Security Manager 2100 CF Administrator’s Guide, located on your SonicWALL
Content Security Manager Resource CD or available at the SonicWALL documentation Web site:
<http://www.sonicwall.com/services/documentation.html>

SonicWALL Content Security Manager 2100 CF Getting Started Guide Page 19
Next Steps
After you initially set up and configure your Content Security Manager, these are the key steps you
take to provide content filtering to your LAN:
1. Organize your users and user groups and determine the content filtering needs for each
group. These can be local users, RADIUS users, or Active Directory Users.
2. Create content filtering policies using the default categories, custom categories and privacy
threats. You can create new policies or modify the twelve default policies.
3. Assemble the policies into policy groups to meet the needs of each user group.
4. Apply the appropriate policy group to each user group.
5. Determine if any of your users have content filtering needs different from the needs of the
group they belong to, and assign an appropriate policy or policy group to each exceptional
user.
6. Determine the application filtering needs of your LAN and configure application filters. For
example, do you want to block instant messaging or streaming video?
7. Create usage reports using the SonicWALL ViewPoint application (available for download
from <https://www.mysonicwall.com>).
8. If you are protecting multiple subnets, create static routes between the
Content Security Manager and servers in the different subnets.
Note: For more information on these procedures, refer to the SonicWALL
Content Security Manager 2100 CF Administrator’s Guide, located on your
Content Security Manager Resource CD or available at the SonicWALL documentation Web site:
<http://www.sonicwall.com/services/documentation.html>