Kerio Tech Firewall6, Administrator'S Manual

Page: 69 / 404

7.1 Network Rules Wizard
69
Step 4 — Internet access limitations
Select which Internet services will be available for LAN users:
Figure 7.2 Network Policy Wizard — enabling access to Internet services
Allow access to all services
Internet access from the local network will not be limited. Users can access any Internet
service.
Allow access to the following services only
Only selected services will be available from the local network.
Note:
1. Defined restrictions will be applied also to the firewall itself.
2. In this dialog, only basic services are listed (it does not depend on what services
were defined in WinRoute — see chapter 14.3 ). Other services can be allowed by
modification of NAT traffic rules (for LAN hosts) or Firewall traffic rules (for the
firewall) or by adding custom rules. For details, see chapter 7.3 .
Step 5 — enabling Kerio VPN traffic
To use WinRoute’s proprietary VPN solution in order to connect remote clients or to create
tunnels between remote networks, keep the Create rules for Kerio VPN server selected. Specific
services and address groups for Kerio VPN will be added. For detailed information on the
proprietary VPN solution, refer to chapter 23 .
If you intend not to use the solution or to use a third-party solution (e.g. Microsoft PPTP , Nortel
IPSec , etc.), disable the Create rules for Kerio VPN option.
To enable remote access to shared items in the local network via a web browser, keep the
Create rules for Kerio Clientless SSL-VPN option enabled. This interface is independent from