You are on page 1of 4

Blocking Internet Access while Allowing Local

Area Network (LAN) Access
You can configure Comodo Firewall to block Internet access while allowing free connections to an
internal network (Intranet or LAN).
Example scenarios:

In your network at home, you want your child's computer to connect to other computers at
home but disable Internet access to them for safety reasons

In your corporate network, you want your employee's computers to connect to your local
network machines but disable Internet access for them for bandwidth restrictions
To selectively block connection to Internet whilst allow connection to internal network you need to
create a Global Rule under Network Security Policy and password protect your configuration to prevent
others from altering it.

To create a Global Rule
1 Click 'Firewall' from the top navigation pane and click 'Network Security Policy' from the
Firewall Tasks interface
2 In the Network Security policy interface, click Global Rules tab...

7. Direction: Out. choose 'IPv4 Single Address' or 'IPv6 Single address' as per your network and enter the IP address of the computer in the IP text box. Click the 'Source Address' tab. 5. Protocol: IP. .… and click 'Add'. Click the 'Destination Address' tab. choose 'Network Zone' from the Type drop-down and choose your local area network from the 'Zone' drop-down. Choose the following options from the drop-down menus: Action: Block. 6. Enter a description for the new rule in the Description text box.    4. Click the 'IP Details' tab and choose 'Any' from the 'IP Protocol' drop-down. The 'Network Control Rule' interface will open for creating a new rule. 3.

2 Click 'Parental Control' tab from the 'Preferences' interface. Now you need to password protect this configuration to prevent others from changing it. 10. . The created policy will be listed in Network Security Policy > Global Rules. 3 Select the check box 'Enable password protection for the settings'. Your Firewall is now configured to allow access to internal network but to block Internet access. 4 Click the 'Change Password' button.8. Select the rule and click 'Move Up' repeatedly until the rule moves to the first position or drag the rule to the first position. Click 'OK' for your configuration to take effect. Click 'Apply'. 9. To password protect your configuration 1 Click More from the top navigation pane and click 'Preferences'.

. Enter a password of your choice in the Enter the password text box and re-enter the same in the Re-type the password text box. From the next attempt to change any configuration changes to CIS. The configuration is now password protected.5. Click 'Apply'. you will be prompted to enter the password to proceed. 6.