Watchguard Firebox X20E, User Manual

Page: 137 / 310

User Guide 125
Using Additional Services for Proxies
Adding a custom SMTP proxy policy
If you have a second SMTP email server, you must have an additional external IP address to give to the
Edge. You can then enable 1-to-1 NAT and make a custom incoming proxy policy for SMTP.
Using Additional Services for Proxies
You can purchase additional services that work with the Firebox® X Edge proxies to add even greater
security to your network. These are subscription-based services offered by WatchGuard. For purchase
information, visit the WatchGuard LiveSecurity® web site at
http://www.watchguard.com/store or con-
tact your WatchGuard reseller.
Gateway AntiVirus/Intrusion Prevention Service
Hackers use many methods to attack computers on the Internet. Gateway AntiVirus/ Intrusion Preven-
tion Service (Gateway AV/IPS) for the Firebox X Edge e-Series identifies and stops possible attacks. The
Intrusion Prevention Service and the Gateway AntiVirus Service operate with the HTTP, FTP, POP3, and
SMTP proxies. When a new attack is identified, the features and activities that make the virus or intru-
sion attack unique are recorded. These recorded features are known as the signature. Gateway AV/IPS
uses these signatures to find viruses and intrusion attacks when they are filtered through the proxy. See
Chapter 15, “Gateway AntiVirus and Intrusion Prevention Service” for more information.
WebBlocker
WebBlocker is web or content filtering option for the Firebox® X Edge e-Series that gives you control of
the web sites that are available to your users. Some companies restrict access to some web sites to
increase employee productivity. Other companies restrict access to offensive web sites or those with
known security risks.
WebBlocker operates on the HTTP proxy. When a user on your network tries to connect to a web site,
the Firebox® X Edge e-Series examines the WebBlocker database. If the web site is not in the database
or is not blocked, the page opens. If the web site is in the WebBlocker database and is blocked, a notifi-
cation appears and the web site is not displayed. See Chapter 13, “WebBlocker” for more information.
spamBlocker
Unwanted email, also known as spam, fills the average inbox at an astonishing rate. A large volume of
spam decreases bandwidth, degrades employee productivity, and wastes network resources. The
WatchGuard® spamBlocker™ option operates with the POP3 and SMTP proxies. It uses unique recurrent
pattern detection technology from Commtouch® to block spam at your Internet gateway and keep it
from getting to your email server. See Chapter 14, “spamBlocker” for more information.