Watchguard Firebox X1000, Reference Manual

Page: 77 / 264

Proxied Services
Reference Guide 65
Icons in the Services Arena
Configuration is the same as for Scenario 1.
H323
The H323 service enables applications based on the H.323 protocol to be
used through the Firebox. Popular products that use this protocol include:
•
Microsoft NetMeeting
• Intel Internet VideoPhone
This service does not do any filtering for harmful content. It does not
support QoS or rsvp protocol, nor does it support any type of NAT.
Considerations
For incoming connections:
•
Any external host must be able to route to the internal host directly.
Use the ping utility if necessary to ensure that the connection is valid.
• Dynamic NAT must be turned off for the incoming H323 connection
to work properly.
There are no equivalent special considerations for outgoing H323
connections.
Characteristics
• Service Name: H323
• Protocol: Multi (control, data, LDAP)
• Client Port: client
• Port Numbers: 1720 (control), 1503 (data), 389 (LDAP)
HTTP
HTTP is the Hypertext Transfer Protocol used by the World Wide Web to
move information around the Internet.
N
OTE
The WatchGuard service called HTTP Proxy is not to be confused with an
HTTP caching proxy. An HTTP caching proxy is a separate machine, and
it performs caching of Web data. If you use an external caching proxy,