Watchguard Firebox X1000, User Manual

Page: 138 / 314

Chapter 8: Configuring Filtered Services
116 WatchGuard Firebox System
As another example, passwords used for some services
(FTP, telnet, POP) are sent in the clear. If the passwords are
the same as those used internally, a hacker can hijack that
password and use it to gain access to your network.
Adding and Configuring Services
You add and configure services using Policy Manager. The
Services Arena of Policy Manager contains icons that repre-
sent the services (filtered and proxied) currently config-
ured on the Firebox, as shown in the following figure. You
can choose from many filtered and proxied services. These
services are configurable for outgoing or incoming traffic,
and they can also be made active or inactive. When config-
uring a service, you set the allowable traffic sources and
destinations, as well as determine the filter rules and poli-
cies for the service. You can create services to customize
rule sets, destinations, protocols, ports used, and other
parameters.
You can also add unique or custom services. However, if
you do, take steps to permit only the traffic flow in that ser-
vice that is absolutely essential.
Normal View of the Services Arena
To display the detailed view of the Services Arena,
select the Details icon (shown at right) at the far