Watchguard Firebox X1000, Reference Manual

Page: 54 / 264

CHAPTER 4: Types of Services
42 WatchGuard Firebox System
• RFC: 1413
Citrix ICA (WinFrame)
Citrix ICA is a protocol used by Citrix for their applications, including the
Winframe product. Winframe is a server-based application from Citrix
that provides access to Windows from a variety of clients. ICA uses TCP
port 1494 for its WinFrame software.
Adding the Citrix ICA service could compromise network security
because it allows traffic inside the firewall without authentication. In
addition, your Winframe server may be subject to denial of service
attacks. WatchGuard recommends using VPN options to provide
additional security for such a configuration. All of the usual logging
options can be used with WinFrame.
Characteristics
• Protocol: TCP
• Server Port(s): 1494, 1604
• Client Port(s): client
For more information on adding the Citrix ICA service, refer to the
Advanced FAQs in the Knowledge Base. (Go to
www.watchguard.com/
support
and log in to the LiveSecurity Service.)
Clarent-gateway
Clarent Corporation is an IP telephony technology supplier to
mainstream carriers and service providers. Clarent products enable voice-
over-IP for doing voice calls between Clarent gateways across the
Internet. This service supports the Clarent v3.0 product and later.
Clarent products use two sets of ports, one for gateway-to-gateway
communications (UDP ports 4040, 4045, and 5010) and one for gateway-
to-command center communications (UDP ports 5001 and 5002). Use the
Clarent-command service icon for the latter.
Enable incoming connections only from specific external gateways to
your gateway or command center.