Watchguard Firebox X1000, Руководство пользователя

Страница: 146 / 314

Chapter 8: Configuring Filtered Services
124 WatchGuard Firebox System
the dialog box that appears, select the Save to Firebox
checkbox.
Defining Service Properties
You use the service’s Properties dialog box to configure the
incoming and outgoing access rules for a given service.
The Incoming tab defines:
• The sources on the external network that use this
service to initiate sessions with your protected users,
hosts, and networks.
• The destinations behind the Firebox to which incoming
traffic for this service can be bound.
The Outgoing tab defines:
• The sources behind the Firebox that use this service to
initiate sessions with an outside destination.
• The destinations on the external network to which
outgoing traffic for this service can be bound.
In a given direction, a service can be in one of three states:
Disabled
The traffic is handled by any other rules that might
apply to it. If none exists, the packets are denied by
default packet handling and logged as such. You
can make any service a one-directional filter by
selecting
Disabled on either the Incoming or
Outgoing tab. This is generally used when
configuring multiple policies for the same service,
such as HTTP.
Enabled and Denied
No traffic is allowed through this service, and
packets for this service will be blocked. The service
logs the attempts to connect to it.