Watchguard Firebox X1000, Справочное руководство

Страница: 55 / 264

Packet Filter Services
Reference Guide 43
Clarent also supports the use of PCAnywhere for management. Refer to
the PCAnywhere implementation notes for further information.
Adding the Clarent-gateway service could compromise network security
because it allows traffic inside the firewall based only on network address
which is not a reliable method of authentication. In addition, your Clarent
server may be subject to denial of service attacks in this configuration.
Where possible, WatchGuard recommends using VPN options to provide
additional security for such a configuration.
Characteristics
• Protocol: UDP
• Client Port: ignore
• Port Number(s): 4040, 4045, 5010
Clarent-command
Clarent Corporation is an IP telephony technology supplier to
mainstream carriers and service providers. Clarent products enable voice-
over-IP for doing voice calls between Clarent gateways across the
Internet. This service supports the Clarent v3.0 product and later.
The Clarent products use two sets of ports, one for gateway-to-gateway
communications (UDP ports 4040, 4045, and 5010) and one for gateway-
to-command center communications (UDP ports 5001 and 5002). Use the
Clarent-gateway service icon for the former.
Enable incoming connections only from specific external gateways to
your gateway or command center.
Clarent also supports the use of PCAnywhere for management. Refer to
the PCAnywhere implementation notes for further information.
Adding the Clarent-command service could compromise network
security because it allows traffic inside the firewall based only on network
address which is not a reliable method of authentication. In addition, your
Clarent server may be subject to denial of service attacks in this
configuration. Where possible, WatchGuard recommends using VPN
options to provide additional security for such a configuration.