Watchguard Firebox X15, User Manual

Page: 135 / 266

Configuring Firewall Options
User Guide 121
Denying FTP access to the Firebox X Edge
You can configure the Firebox X Edge to not allow any FTP connec-
tions from the trusted network. This option overrides all other Fire-
box settings.
1
Select the Do not allow FTP access to the Edge from the
Trusted Network check box.
2
Click Submit .
N
OTE
N
OTE
You must clear the
Do not allow FTP access to the Edge from
the Trusted Network
check box when you apply an update to
the Edge firmware with the automatic installer. If you do not clear
this check box, the Software Update Installer cannot move
firmware files to the Firebox X Edge.
SOCKS implementation for the Firebox X Edge
The Firebox X Edge can operate as a SOCKS network proxy server.
Software that uses more than one socket connection and uses the
SOCKS version 5 protocol can send traffic through the Edge. SOCKS
gives you secure, two-way communication between a computer on
the external network and a computer on the trusted network. To use
a SOCKS-compatible program, configure the program with the nec-
essary information about the Firebox X Edge.
The Firebox X Edge uses SOCKS version 5. Firebox X Edge users do
not authenticate before using the Edge configuration pages.
Your Firebox X Edge does not connect with software that finds only
DNS (domain name server) names. Configure the SOCKS-compatible
software to connect to IP addresses and not connect to domain
names.
Software that uses SOCKS and can operate with Firebox X Edge
includes ICQ, IRC, and AOL Messenger.
N
OTE
N
OTE
If software that uses SOCKS operates on a computer put on the
trusted network, then all users on the trusted network can use the
SOCKS proxy. To stop this risk, disable the SOCKS proxy on your
Firebox X Edge.