Watchguard Firebox V10, Руководство пользователя

Страница: 226 / 477

CHAPTER 8: About Security Policies
194 Vcontroller
Block
Prevents all qualifying traffic from gaining access
to your network.
Reject
Blocks incoming traffic from the source and sends a
TCP reset message back to that source’s interface.
Proxy
Inserts a proxy action to provide content filtering.
When this is selected, you can select from the list of
available proxy actions, create a new proxy action,
or edit an existing proxy action. For more
information on Proxies, see “Using Proxies” on
page 237. Remember to select a matching Service
type (HTTP for the HTTP Client Proxy, or SMTP
for the SMTP Incoming or Outgoing).
Enable User Authentication (with Pass or Proxy)
Requires that internal users authenticate to the
Firebox Vclass appliance before they are granted
access through the firewall to external networks.
This option is available if you select Pass or Proxy
as the action for the Policy.
If you select the User Authentication option, you
must create end user accounts for use by
authorized users. For more instructions on using
the
User Authentication option, see “End-user
accounts for authentication” on page 152.
Using Quality of Service (QoS)
In an extensive network with a large number of host com-
puters, the volume of data moving through the Internet
can be immense. When the traffic is more than the network
can sustain, data packets are simply dropped as a result of
congestion. In short, the network does not have enough
bandwidth to deliver all the traffic when it enters the net-