Watchguard Firebox X20E, User Manual

Page: 124 / 310

Configuring the FTP Proxy
112 Firebox X Edge e-Series
Setting access control options
On the Outgoing tab, you can set rules that filter IP addresses, network addresses, or host ranges. This
is the same functionality you have in packet filter policies. See Chapter 7, “Firewall Policies” for more
information.
1
Select the Outgoing tab.
2
From the Outgoing Filter drop-down list, select Deny , Allow , or No Rule .
3
Use the From drop-down list to add the IP address, network address, range of IP addresses of
computers on the trusted or optional network, or alias for which this policy applies.
Network IP addresses must be entered in “slash” notation (also known as Classless Inter Domain
Routing or CIDR notation).
4
Click Add . The From text box shows the IP addresses you added. The From text box can have
more than one entry.
5
Use the To drop-down list to add the IP address, network address, or range of IP addresses of
computers on the external network for which this policy applies.
Network IP addresses must be entered in “slash” notation (also known as Classless Inter Domain
Routing or CIDR notation).
6
Click Add . The To text box shows the IP addresses you added. The To text box can have more
than one entry.
Setting proxy limits
On the FTP Settings tab, you can set the maximum user name length, password length, file name
length, and command-line length allowed through the proxy. These limits help protect your network
from buffer overflow attacks. Use the default settings or enter a new value in bytes.