Watchguard Firebox X1000, User Manual

Page: 213 / 314

Blocking Ports
User Guide 191
Avoiding problems with legitimate users
It is possible for legitimate users to have problems because
of blocked ports. In particular, some clients might tempo-
rarily fail because of blocked ports.
You should be very careful about blocking port numbers
between 1000 through 1999, as these numbers are particu-
larly likely to be used as client ports.
N
OTE
Solaris uses ports greater than 32768 for clients.
Blocking a port permanently
From Policy Manager:
1 On the toolbar, click the Blocked Ports icon,
shown at right.
You can also select Setup
=>
Intrusion Prevention
=>
Blocked Ports. The Blocked Ports dialog box appears, as shown
in the following figure.
2
In the text box to the left of the
Add
button, type the
port number. Click Add .
The new port number appears in the Blocked Ports list.
To remove a blocked port, select the port to remove. Click
Remove .