Content Filtering Service& Content Filtering Client
Powerful protection and productivity solution to block access to harmful
and unproductive web content

Educational institutions, businesses andgovernment agencies assume substantial
risks when they provide students andemployees IT-issued computers thatcan be used to access the Internet, evenwhen the device is behind the firewall
perimeter where organizational web use
policies are enforced. This is particularly
true when those connections are used
to access sites containing information or
images that are inappropriate, dangerous
or even illegal. These sites may also
be infected with malware that can be
inadvertently downloaded and then used
to steal confidential information.
Schools, in particular, have aresponsibility to protect students frominappropriate and harmful web content.
In addition, to receive eRate funding, bothschools and libraries are required by law
to install a content filtering solution incompliance with the Children’s Internet
Protection Act (CIPA). For businesses
and government agencies, providing
employees with uncontrolled web
access can result in non-productive web
surfing, creating tremendous losses inproductivity, not to mention the potential
for legal liability.
SonicWall Content Filtering Service(CFS) running on SonicWall Unified
Threat Management and nextgeneration firewalls (NGFWs) is a
powerful protection and productivity
solution that delivers unequaled content
filtering enforcement for educational
institutions, businesses, libraries andgovernment agencies. Using SonicWall
CFS, organizations have control over thewebsites students and employees canaccess using their IT-issued computer
behind the firewall.
SonicWall CFS compares requested
websites against a massive databasein the cloud containing millions of rated
URLs, IP addresses and websites. CFSprovides administrators with the tools
to create and apply policies that allow ordeny access to sites based on individual
or group identity, or by time of day, forover 56 pre-defined categories. CFS
also dynamically caches website ratings
locally on the SonicWall firewall for nearinstantaneous response times.
For laptops that are used outside thefirewall perimeter, the SonicWall Content
Filtering Client addresses safety, security
and productivity concerns by extending
the controls to block harmful andunproductive web content. The client iseither installed manually or automaticallydeployed and provisioned through a
SonicWall firewall. In addition to providing
IT administrators the tools to control webbased access for roaming devices, theContent Filtering Client can be configured
to automatically switch enforcement to theinternal policy once the device reconnects
to the network firewall. The client ismanaged and monitored using a powerfulpolicy and reporting engine in the cloudthat is accessed seamlessly from thefirewall interface. In the event an outdated
client attempts to connect to the internal
network to access the Internet, theconnection is denied and the user receives
a message with steps for remediation.

Benefits:• Best in-class protection• Granular content filtering controls• Dynamically updated
rating architecture• Application traffic analytics• Easy-to-use web-based management• High-performance web caching andrating architecture• IP-based HTTPS content filtering• Scalable, cost-effective solution• Content Filtering Client for
roaming devices

Features and benefits
Granular content filtering allows theadministrator to block or apply bandwidth
management to all pre-defined categories
or any combination of categories.
Administrators can apply User Level
Authentication (ULA) and Single Sign-On(SSO) to enforce username and password
logon. CFS can block potentially harmful
content such as Java™, ActiveX®, andCookies, as well as schedule filteringby time of day, such as during schoolor business hours. CFS also enhances
performance by filtering out IM, MP3s,
streaming media, freeware and other files
that drain bandwidth.
Dynamically updated rating architecture
cross-references all requested websites
against a highly accurate databasecategorizing millions of URLs, IPaddresses and domains. The SonicWall
firewall receives ratings in real time,
and then compares each rating to thelocal policy setting. The appliance willthen either allow or deny the request
based on the administrator’s locallyconfigured policy.
Application traffic analytics suite
includes SonicWall Capture Security
Center, SonicWall Global Management
System (GMS®), and SonicWall Analyzer,
each of which provides real-time andhistoric analysis of data transmitted
through the firewall, including websites
blocked and visited by user.

Easy-to-use web-based management
enables flexible policy configuration andcomplete control over Internet usage.
Administrators can enforce multiple
custom policies for individual users,
groups or specific category types. Local
URL filtering controls can allow or denyspecific domains or hosts. To blockobjectionable and unproductive material
more effectively, administrators can also
create or customize filtering lists.

and unproductive Internet content for
devices located outside the firewall
perimeter. The client enforces security andproductivity policies whenever the device
connects to the Internet regardless of
where the connection is established.

SonicWall Content Filteringsolutions architectureHigh-performance web caching and ratingarchitecture allows administrators to blocksites easily and automatically by category.
URL ratings are cached locally on theSonicWall firewall, so that response time
for subsequent access of frequently visited
sites is only a fraction of a second.
IP-based HTTPS content filtering allows
administrators to control user access towebsites over encrypted HTTPS. HTTPS
filtering is based on the categoricalrating of websites containing information
or images that are objectionable or
unproductive such as violence, hate, online
banking, shopping and others.
Scalable, cost-effective solution controls
content filtering from the SonicWall
firewall, eliminating the need for additional
hardware or deployment expenditures on
a separate dedicated filtering server.

Deployed and managed through aSonicWall firewall, SonicWall Content
Filtering Service enables IT administrators
to create and enforce Internet use policies
that block IT-issued endpoint devices
located behind the firewall from accessing
inappropriate and unproductive websites
over a LAN, wireless LAN or VPN.
For roaming devices located outside thefirewall perimeter, SonicWall Content
Filtering Client extends security andproductivity policies whenever the device
connects to the Internet regardless of
where the connection is established.
Deployment is simplified using theenforcement capability of a SonicWall
firewall and the client is managed andmonitored using a powerful policy andreporting engine.
Using SonicWall Analyzer, SonicWall
Capture Security Center or GMS, IT
administrators can create real-time andhistorical reports on web usage.

Content Filtering Client for roaming
devices extends enforcement of internal
web use policies to block objectionable

53
SonicWall cloud-based ratings database
Contains tens of millions of URLs, IPs and domains

4

CFS cache

Approved sites

Internet1

6

2

2

Blocked sites
Gambling,
pornography,
violence, etc.

1.

SonicWall CFS user behindthe firewall

2.

Roaming CF Client user
outside the firewall
perimeter

3.

Distributed SonicWall CFS
ratings database4.

Local ratings cache ofacceptable sites

5.

Set URL polices to blockobjectionable or counterproductive websites

6.

Real-time and historical
reports using SonicWall
Analyzer, Capture Security
Center or GMS

CONTENT FILTERINGSERVICECONTENT FILTERINGCLIENT

Categories

56+56+

User / group policies

Analyzer*, Capture Security
Center* and GMS*





SONICWALL CONTENT FILTERING SERVICENSsp 12800 (1-year)

01-SSC-7850

NSsp 12400 (1-year)

01-SSC-7698

NSa 9650 (1-year)

01-SSC-2136

NSa 9450 (1-year)

01-SSC-1158

NSa 9250 (1-year)

01-SSC-0331

ReportingNSa 6650 (1-year)

01-SSC-8972

Website cachingNSa 5650 (1-year)

01-SSC-3692

Safe search enforcement

NSa 4650 (1-year)

01-SSC-3583

CFS policy enforcement per IP range

NSa 3650 (1-year)

01-SSC-3469

NSa 2650 (1-year)

01-SSC-1970

TZ600 Series (1-year)

01-SSC-0234

TZ500 Series (1-year)

01-SSC-0464

Available on:• TZ Series• NSa Series• NSsp Series

TZ400 Series (1-year)

01-SSC-0540

YouTube Restricted Mode Support

TZ350 Series (1-year)

02-SSC-1744

HTTPS content filtering

TZ300 Series (1-year)

01-SSC-0608

Filter by schedule

SOHO 250 Series (1-year)

02-SSC-1791

Content filtering database

SOHO Series (1-year)

01-SSC-0676

NSv 1600 (1-year)

01-SSC-5801

NSv 800 (1-year)

01-SSC-5774

NSv 400 (1-year)

01-SSC-5690

NSv 300 (1-year)

01-SSC-5649

NSv 200 (1-year)

01-SSC-5335

NSv 100 (1-year)

01-SSC-5238

NSv 50 (1-year)

01-SSC-5203

NSv 25 (1-year)

01-SSC-5177

NSv 10 (1-year)

01-SSC-5129

SONICWALL CONTENT FILTERING CLIENT
5 Users (1-year)

01-SSC-1222

10 Users (1-year)

01-SSC-1252

25 Users (1-year)

01-SSC-1225

50 Users (1-year)

01-SSC-1228

100 Users (1-year)

01-SSC-1231

250 Users (1-year)

01-SSC-1255

500 Users (1-year)

01-SSC-1237

750 Users (1-year)

01-SSC-1240

1,000 Users (1-year)

01-SSC-12432,000 Users (1-year)

01-SSC-1246

5,000 Users (1-year)

01-SSC-1249

Dynamic rating





Endpoint devices running
Windows, Chrome OS orMac OSDynamically updated base containing over 20 million URLs,
IPs and domains
Firewall – Gen5: SonicOS
5.9.0.4 and later, Gen6:
SonicOS 6.1.1.6 and later

Supported firmware versions/operating systems

SonicOS 5.x and later

Laptop – Microsoft Windows
7/8/10/ Windows Server 3/
Server 8/Server 12,
Chrome OS,
Mac OS 10.8 and later*Analyzer, Capture Security Center and GMS are optional and sold separately.

Multi-year Content Filtering Service and Content Filtering Client SKUs are available.
For more information on SonicWall Content Filtering solutions and our complete line ofsecurity offerings, please visit our website at www.sonicwall.com.

About SonicWall
SonicWall has been fighting the cybercriminal industry for over 27 years defending small and medium businesses, enterprises andgovernment agencies worldwide. Backed by research from SonicWall Capture Labs, our award- winning, real-time breach detection
and prevention solutions secure more than a million networks, and their emails, applications and data, in over 215 countries andterritories. These organizations run more effectively and fear less about security. For more information, visit www.sonicwall.com orfollow us on Twitter, LinkedIn, Facebook and Instagram.
SonicWall, Inc.
1033 McCarthy Boulevard | Milpitas, CA 95035
Refer to our website for additional information.
www.sonicwall.com© 2019 SonicWall Inc. ALL RIGHTS RESERVED. SonicWall is atrademark or registered trademark of SonicWall Inc. and/or its
affiliates in the U.S.A. and/or other countries. All other trademarks andregistered trademarks are property of their respective owners.
Datasheet-ContentFilteringService-US-VG-639