Watchguard Firebox X10E, Руководство пользователя

Страница: 142 / 314

Chapter 8: Configuring Filtered Services
120 WatchGuard Firebox System
3
Click OK to bring up the service’s Properties dialog
box and define outgoing properties, as described in
“Adding service properties” on page 125.
Using the previous example, you might add an alias called
“staff,” which includes a range of IP addresses or group of
authenticated users. For more information on aliases, see “Using
Aliases” on page 162.
4
Add the second HTTP service.
Using the previous example, you might call this second HTTP
service “full_web_access.”
5
Click OK to bring up the service’s Properties dialog
box and define outgoing properties, as described in
“Adding service properties” on page 125.
Using the previous example, you might add an alias called
“executives.”
N
OTE
Be careful to avoid creating conflicting services; for example,
one HTTP service that allows incoming traffic while the other
is set to deny incoming traffic.
Creating a new service
In addition to built-in filtered services provided by Watch-
Guard, you can create a new service or customize an exist-
ing service. You might need to do this when a new product
appears on the market that you would like to run behind
your firewall. Remember, however, that every new service
you configure and add to your firewall potentially
increases your vulnerability to hackers.
From Policy Manager:
1
On the Policy Manager toolbar, click the Add
Services icon (shown at right).
The Services dialog box appears.
2
Click New .
The New Service dialog box appears, as shown in the following
figure.