Configure IP Whitelist on SonicWall Firewall

draft · network firewallwhitelistsonicwallconfiguration

Generated by docuprocessor (prompt article/v3) · 2026-04-22 10:12

Source thread

thread_id: spaces/AAAA05BdS6s/threads/lsPe2GzGvRs · 7 msgs · first 2024-08-16 · participants: Tech ATech B

Tech A 2024-08-16 14:29

Hey guys, is anyone familiar with Sonicwall? RITTER FAMILY DENTAL office received an email to whitelist some IP addresses. I see that the IP addresses are already created, also the groups. But not sure where to config the rules to whitelist them... I found a post, but I think that they don't have the correspondent licenses for that: https://community.sonicwall.com/technology-and-support/discussion/3001/whitelisting-a-ip-range-to-access-sonicwall

Tech A 2024-08-16 14:29

(no text)

image/png image.png

**SonicWall Network Security Appliance — Address Objects Configuration Screen** The firewall (Name: **2CB8ED5848C8**) is in **Configuration Mode**, displaying **Address Objects** under Manage > Policies > Objects, filtered by the search term **"peer"** showing IPv4 & IPv6 entries. Two address groups are visible: **"Peerlogic"** (Group 1, containing Peerlogic 1–7) and **"PeerLogic VoIP Traffic"** (Group 2, containing PeerLogic_Phoenix, Atlanta_old, Atlanta_new, NYC, LAX, Chicago, Dallas), all typed as **Host, IPv4, LAN zone, Custom class**. IP addresses range across entries including **216.223.176.51, 192.214.108.3, 23.111.152.182, 66.165.245.114, 149.255.35.90, 199.231.167.178, and 23.29.123.118**, all with subnet mask **/255.255.255.255**.

Tech A 2024-08-16 14:29

(no text)

image/png image.png

The screen displays a **Service Objects** configuration table with two custom UDP service entries. **Peerlogic_RTP_UDP** is configured for UDP protocol, port range **8500–59999**, Class: Custom. **Peerlogic_SIP_UDP** is configured for UDP protocol, port range **5060–5068**, Class: Custom. The view filter is set to **"All Types"** with search term **"peer"** applied.

Tech A 2024-08-16 14:30

(no text)

image/png image.png

**SonicWall Network Security Appliance — Gateway Anti-Virus License Upgrade Required** The management interface (Manage > Security Services > Gateway Anti-Virus) displays an **"Upgrade Required"** notification in a black banner, stating that a valid license is needed and directing the administrator to **Manage > Licenses**. The firewall is identified as **Firewall Name: 2CB8ED5848C8**, and the interface is in **Configuration mode** with a **Status: Ready** indicator at the bottom. A file named **sonicwall-TZ\_350-....exp** is visible in the browser download bar, suggesting a recent export or configuration file download.

Tech B 2024-08-16 15:09

Have you tried here? https://youtu.be/VrN-ZS-nbZ0?si=5mNxu_tMfT7I5LJ8 ( ps, sometimes firewalls dont't apply rules/policies immediately, so you can try restarting fw)

Tech A 2024-08-16 15:11

I didn't, but I think that's for content filtering and you are able to input keywords and domains only 🫤

Tech B 2024-08-16 17:08

geo-ip filter has the option to create a custom filter list. If it is enabled you can add exception

---
title: "Configure IP Whitelist on SonicWall Firewall"
category: network
tags: ["firewall", "whitelist", "sonicwall", "configuration"]
source_thread_id: "spaces/AAAA05BdS6s/threads/lsPe2GzGvRs"
source_space: "spaces/AAAA05BdS6s"
generated_at: "2026-04-22T10:12:27"
participants: ["Tech A", "Tech B"]
---

# Configure IP Whitelist on SonicWall Firewall

## Problem

A client office needed to whitelist specific IP addresses on their SonicWall TZ 350 firewall for Peerlogic VoIP traffic. The required address objects and service objects were already created in the firewall configuration, including two address groups ("Peerlogic" and "PeerLogic VoIP Traffic") containing multiple IP addresses and two custom UDP service objects for RTP and SIP traffic. However, the technician was unable to locate where to configure the actual firewall rules to allow traffic from these whitelisted addresses. The firewall also displayed a Gateway Anti-Virus license upgrade requirement, which may limit access to certain security features.

## Resolution

1. Check if Geo-IP filtering is enabled on the SonicWall
2. If Geo-IP filtering is available and enabled, create a custom filter list with exceptions for the required IP addresses
3. Navigate to the firewall rules section to create allow rules using the existing address objects and service objects
4. Apply the configuration changes
5. Restart the firewall to ensure rules are applied immediately, as SonicWall policies may not take effect without a reboot

Note: Some SonicWall features may require specific licenses. If the standard firewall rule configuration is not accessible, verify that the necessary security service licenses are active.

## References
- Source discussion: `spaces/AAAA05BdS6s/threads/lsPe2GzGvRs`
- Attachments:
  - ![image.png](../attachments/lsPe2GzGvRs.c-qan3GeWxI/image.png) — **SonicWall Network Security Appliance — Address Objects Configuration Screen**

The firewall (Name: **2CB8ED5848C8**) is in **Configuration Mode**, displaying **Address Objects** under Manage > Policies > Objects, filtered by the search term **"peer"** showing IPv4 & IPv6 entries. Two address groups are visible: **"Peerlogic"** (Group 1, containing Peerlogic 1–7) and **"PeerLogic VoIP Traffic"** (Group 2, containing PeerLogic_Phoenix, Atlanta_old, Atlanta_new, NYC, LAX, Chicago, Dallas), all typed as **Host, IPv4, LAN zone, Custom class**. IP addresses range across entries including **216.223.176.51, 192.214.108.3, 23.111.152.182, 66.165.245.114, 149.255.35.90, 199.231.167.178, and 23.29.123.118**, all with subnet mask **/255.255.255.255**.
  - ![image.png](../attachments/lsPe2GzGvRs.5M0jEd0AR2E/image.png) — The screen displays a **Service Objects** configuration table with two custom UDP service entries. **Peerlogic_RTP_UDP** is configured for UDP protocol, port range **8500–59999**, Class: Custom. **Peerlogic_SIP_UDP** is configured for UDP protocol, port range **5060–5068**, Class: Custom. The view filter is set to **"All Types"** with search term **"peer"** applied.
  - ![image.png](../attachments/lsPe2GzGvRs.vbUCGEvsL6k/image.png) — **SonicWall Network Security Appliance — Gateway Anti-Virus License Upgrade Required**

The management interface (Manage > Security Services > Gateway Anti-Virus) displays an **"Upgrade Required"** notification in a black banner, stating that a valid license is needed and directing the administrator to **Manage > Licenses**. The firewall is identified as **Firewall Name: 2CB8ED5848C8**, and the interface is in **Configuration mode** with a **Status: Ready** indicator at the bottom. A file named **sonicwall-TZ\_350-....exp** is visible in the browser download bar, suggesting a recent export or configuration file download.

Generated article

draft