Watchguard Firebox X1000, Reference Manual

Page: 191 / 264

Policy Manager
Reference Guide 179
Arrows
Use the arrows to select your preferred value.
Auto-Block source of packets not handled
Enable this checkbox to auto-block the source of packets blocked
due to another packet handling option. When enabled, the
Firebox automatically temporarily rejects all communication
attempts from a site that has been sending IP options or probes.
Adjust the auto-block duration using the Blocked Sites dialog box.
Auto-blocking is a separate function from blocking sites
manually.
Send an error message to clients whose connections are blocked
Enable this checkbox to cause the Firebox to send an ICMP (port
unreachable) message to an auto-blocked site. Some operating
systems do not handle error messages correctly and may
inadvertently terminate other connections when they receive
them.
Log incoming packets sent to broadcast addresses
Enable this checkbox to make the Firebox log incoming packets
sent to broadcast addresses. Communicating with a broadcast
address can indicate an information-gathering activity. Default is
to log incoming packets.
Log outgoing packets sent to broadcast addresses
Enable this checkbox to have the Firebox log packets originating
from behind the firewall and set to your network's broadcast
address. Default is to log outgoing packets.
OK
Closes this dialog box and saves any changes.
Cancel
Closes this dialog box without saving any changes.
Logging
Click to access the Logging and Notification dialog box.
DHCP Server dialog box
Enable DHCP Server
Enable this checkbox to activate the DHCP server.