Kerio Tech Firewall6, Administrator'S Manual

Page: 17 / 404

2.3 Installation
17
Warning
If the FAT32 file system is used, it is not possible to protect WinRoute in the way suggested
above. For this reason, it is recommended to install WinRoute only on computers which use
the NTFS file system.
Conflicting Applications and System Services
The WinRoute installation program detects applications and system services that might con-
flict with the WinRoute Firewall Engine .
1. Windows Firewall’s system components
1
and Internet Connection Sharing .
These components provide the same low-level functions as WinRoute . If they are run-
ning concurrently with WinRoute , the network communication would not be functioning
correctly and WinRoute might be unstable. Both components are run by the Windows Fire-
wall / Internet Connection Sharing system service.
2
.
Warning
To provide proper functionality of WinRoute , it is necessary that the Internet Connection
Firewall / Internet Connection Sharing detection is stopped and forbidden!
2. Universal Plug and Play Device Host and SSDP Discovery Service
The services support UPnP (Universal Plug and Play) in the Windows XP , Windows
Server 2003 , Windows Vista and Windows Server 2008 operating systems. However, these
services collide with the UPnP support in WinRoute (refer to chapter 18.2 ).
The WinRoute installation includes a dialog where it is possible to disable colliding system
services.
By default, the WinRoute installation disables all the colliding services listed. Under usual
circumstances, it is not necessary to change these settings. Generally, the following rules are
applied:
• The Windows Firewall / Internet Connection Sharing (ICS) service should be disabled.
Otherwise, WinRoute will not work correctly. The option is a certain kind of warning
which informs users that the service is running and that it should be disabled.
•
To enable support for the UPnP protocol in WinRoute (see chapter 18.2 ), it is neces-
sary to disable also services Universal Plug and Play Device Host and SSDP Discovery
Service .
• If you do not plan to use support for UPnP in WinRoute , it is not necessary to disable
the Universal Plug and Play Device Host and SSDP Discovery Service services.
In Windows XP Service Pack 1 and older versions, the integrated firewall is called Internet Connection Firewall
1
In the older Windows versions listed above, the service is called Internet Connection Firewall / Internet Connection
2
Sharing .