Watchguard Firebox X15, User Manual

Page: 121 / 266

Configuring Incoming Services
User Guide 107
4 If you allow a service, enter the IP address of the service host.
The service host is the computer on the trusted or optional network that
receives the traffic.
5
Click Submit .
6
Repeat steps 1—5 to allow or deny more common services.
N
OTE
N
OTE
If you set a common service to Allow, the Edge allows traffic that
uses that service from any source on the external network. Traffic
from that service goes to the service host.
To limit which the external sources can use the ports and
protocols of the service you are adding, create a custom service.
About custom services for incoming traffic
A custom service for incoming traffic is necessary if:
- Incoming traffic does not use the same ports or protocols used
by one of the common services.
- You restrict the IP addresses on the external network that can
connect to a computer behind the Firebox X Edge.
You can add a custom service using one or more of these:
• TCP ports
• UDP ports
• An IP protocol that is not TCP or UDP. You identify an IP
protocol that is not TCP or UDP with the IP protocol number.
Adding a custom service using the wizard
1 From the navigation bar, click
Wizards
.
2
Adjacent to Define a custom service , click Go .
3
Use the instructions in the wizard to add a custom service.
The Traffic Filter Wizard includes these steps:
Welcome
The first screen tells you about the wizard and the information
you must have to complete the wizard.
Service Name
On this screen, type a name to identify the service.