Watchguard Firebox X5000 User's Guide download pdf (Page 58)

Proxy Migration

54 WatchGuard Fireware

With the removal of directionality, the default proxy actions are named so that they represent

typical situations in which they are used to protect resources. For example, there is an HTTP

Client proxy. Client means that this proxy serves as protection for HTTP clients. In other words, it

is most likely used on an outgoing policy.

Open proxy actions in Fireware Policy Manager Setup > Actions > Proxy Actions.

The best approach for adding proxied services is to use the same method as WFS and Policy

Manager for Fireware Edit > Add Policies and select the best proxy for migration.

NOTE

Fireware no longer supports the DCE-RPC, H323 or RTSP proxies. There is a Netmeeting

packet filter that does not support NAT. The Proxy and Proxied-HTTP proxies are replaced

with the TCP-Proxy.

Proxy configuration for Fireware has many more features and flexibility than WFS. As a result,

there are very few direct correlation points between what is configured in WFS Policy Manager

and where it shows up in Fireware Policy Manager. The most important concept to understand is

that the proxies in Fireware are all configured using similar mechanisms. Once understood, they

provide a powerful tool to protect resources comprehensively and intelligently.

When configuring any proxy, the dialog is divided into three primary areas:

• Information at the top

• Categories on the left

• Detail configuration settings on the right

1 2 ... 53 54 55 56 57 58 59 60 61 62 63 ... 77 78

No comments

Watchguard Firebox X5000 User's Guide Page 58