Search help
Find the desired product help
Comodo Internet Security
Appendix 1 CIS - How To... Tutorials > Blocking Internet Access While Allowing Local Area Network (LAN) Access
Introduction To Comodo
Internet Security
Antivirus Tasks-Introduction
Firewall Tasks-Introduction
Defense+ Tasks - Introduction
More Options-Introduction
Comodo GeekBuddy
TrustConnect Overview
Comodo Dragon
Appendix 1 CIS - How To...
Tutorials
Appendix 2 Comodo Secure DNS
Service
Appendix 3 CIS Versions
About Comodo Security
Solutions
Comodo Internet Security 5.9/5.10 English
Version 5.9/5.10 English
Blocking Internet Access while Allowing Local Area Network (LAN)
Access
You can configure Comodo Firewall to block Internet access while allowing free connections to an internal network
(Intranet or LAN).
Example scenarios:
In your network at home, you want your child's computer to connect to other computers at home but disable
Internet access to them for safety reasons
In your corporate network, you want your employee's computers to connect to your local network machines
but disable Internet access for them for bandwidth restrictions
To selectively block connection to Internet whilst allow connection to internal network you need to create a Global
Rule under Network Security Policy and password protect your configuration to prevent others from altering it.
To create a Global Rule
1. Click 'Firewall' from the top navigation pane and click 'Network Security Policy' from the Firewall Tasks
interface
2. In the Network Security policy interface, click Global Rules tab...
… and click 'Add'. The 'Network Control Rule' interface will open for creating a new rule.
3. Choose the following options from the drop-down menus:

Action: Block;

Protocol: IP;

Direction: Out.

4. Enter a description for the new rule in the Description text box.
5. Click the 'Source Address' tab, choose 'IPv4 Single Address' or 'IPv6 Single address' as per your network and
enter the IP address of the computer in the IP text box.
6. Click the 'Destination Address' tab, choose 'Network Zone' from the Type drop-down and choose your local
area network from the 'Zone' drop-down.

7. Click the 'IP Details' tab and choose 'Any' from the 'IP Protocol' drop-down.

8. Click 'Apply'. The created policy will be listed in Network Security Policy > Global Rules.
9. Select the rule and click 'Move Up' repeatedly until the rule moves to the first position or drag the rule to the
first position.
 10. Click 'OK' for your configuration to take effect.

Your Firewall is now configured to allow access to internal network but to block Internet access. Now you need to
password protect this configuration to prevent others from changing it.

To password protect your configuration

1. Click More from the top navigation pane and click 'Preferences'.
2. Click 'Parental Control' tab from the 'Preferences' interface.
3. Select the check box 'Enable password protection for the settings'.
4. Click the 'Change Password' button.

5. Enter a password of your choice in the Enter the password text box and re-enter the same in the Re-type the
password text box.
 6. Click 'Apply'.

The configuration is now password protected. From the next attempt to change any configuration changes to CIS,
you will be prompted to enter the password to proceed.

Comodo Internet Security User Guide | © 2012 Comodo Security Solutions Inc. | All rights reserved

Our Free Products Enterprise

Free Antivirus Free Endpoint Security Patch Management Software

Free Internet Security Free ModSecurity Patch Manager

Free Website Scan Free RMM Service Desk

Free Anti-Malware Free Website Malware Scan Mobile Device Management

Anti-Spam (Free Trial) Free Device Manager for Android Endpoint Protection Solutions

Free Quote Free Demo Website Security Check

Network Security Remote Monitoring and Management

Endpoint Protection cWatch Web Security

Free Antivirus for Android Device Manager

ITSM

CRM

MSP

Android Device Manager

MDR Services

EDR Services

Support Partners Terms and Conditions Privacy Policy

© Comodo Group, Inc. 2019. All rights reserved.