Watchguard Wireless Router User's Guide download pdf (Page 105)

Configuring Incoming Services

User Guide 91

drop-down list adjacent to the service name, select Allow or

Deny.

In its default configuration, the Firebox does not allow incoming traffic

to your network. Because of this, you can keep a service’s filter rule set

to No Rule and the traffic is denied.

4 If you use Allow for a service, enter the IP address of the service

host.

The service host is the computer on the trusted or optional network that

receives the traffic.

5 Click Submit.

6 Repeat to allow or deny more common services.

OTE

If you set a common service to Allow, the Edge allows traffic that

uses that service from any source on the external network. The

Firebox only allows traffic to go to the service host.

To put a limit on the external sources that can use the ports and

protocols of the service you are adding, you must create a custom

service.

About custom services for incoming traffic

A custom service for incoming traffic is necessary if:

- Incoming traffic does not use the same ports or protocols used

by one of the common services.

- You restrict the IP addresses on the external network that can

use a service to connect to a computer behind the Firebox X

Edge.

You can add a custom service using one or more of these:

•TCP ports

• UDP ports

• An IP protocol that is not TCP or UDP. You identify an IP

protocol that is not TCP or UDP with the IP protocol number.

Adding a custom service using the wizard

1 From the navigation bar, click Wizards.

2 Adjacent to Define a custom service... click Go.

3 Use the instructions in the wizard to add a custom service.

The Traffic Filter Wizard includes these steps:

1 2 ... 100 101 102 103 104 105 106 107 108 109 110 ... 253 254

No comments

Watchguard Wireless Router User's Guide Page 105