Watchguard Firebox X20E, User Manual

Page: 108 / 310

Configuring Custom Packet Filter Policies
96 Firebox X Edge e-Series
7
Click Submit .
Outgoing settings
1
From the Edit Policies page, select the Outgoing tab.
2
From the Outgoing Filter drop-down list, select the rule you want to apply. This rule affects only
outgoing traffic.
3
To specify which computers on your trusted and optional network can use this policy, in the
From field, select Any and click Remove . Select Host IP Address , Network IP Address , Host
Range , or Alias from the drop-down list. Then enter the IP address or range of IP addresses you
want to allow and click Add . You can add more than one address. If you select Alias , you can
choose from Trusted Network , Optional Network , or Wireless Guest Network .
Type network IP addresses in “slash” notation.
4
To limit which computers on the external network can connect to computers on the trusted or
optional networks with this policy, in the
To field, select Any and click Remove . Select Host IP
Address , Network IP Address , or Host Range from the drop-down list. Then enter the IP
address or range of IP addresses you want to allow and click Add . You can add more than one
address.
5
To have the Firebox save log messages for this policy to the log file, select the Log outgoing
traffic check box.
6
Click Submit .
Configuring Custom Packet Filter Policies
A custom packet filter policy for traffic is necessary if:
•
You must allow traffic for a policy that is not on the common packet filter policy list.