Watchguard Firebox X15, Руководство пользователя

Страница: 125 / 266

Configuring Outgoing Services
User Guide 111
3 In the adjacent text boxes, type the host or network IP address,
or type the range of IP addresses that identify the computers on
the trusted or optional network that can use this service to send
traffic to the external network.
Network IP addresses must be entered in “slash” notation (also known as
Classless Inter Domain Routing or CIDR notation). For more information
on entering IP addresses in slash notation, see this FAQ:
http://www.watchguard.com/support/advancedfaqs/general_slash.asp.
4 Click
Add
. The
From
box shows the IP addresses you added.
Repeat steps 2—4 until all of the address information for this custom
service is set. The From box can have more than one entry.
5
To limit which computers on the external network can receive
network traffic with this service, use the drop-down list below
the
To
box to select
Host IP Address, Network IP Address,
or
Host Range.
6
In the adjacent text boxes, type the host or network IP address,
or type the range of IP addresses that identify the computers on
the external network that internal computers can connect to
using this service.
Network IP addresses must be entered in “slash” notation (also known as
Classless Inter Domain Routing or CIDR notation). For more information
on entering IP addresses in slash notation, see this FAQ:
http://www.watchguard.com/support/advancedfaqs/general_slash.asp.
7
Click Add . The To box shows the IP addresses you added.
Repeat steps 5—7 until all of the address information for this custom
service is set. The To box can have more than one entry.
8 If this service is only for outgoing traffic, keep the Incoming
Filter set to
No Rule .
To limit which computers can receive information using this service, go
to the previous section, “Filtering incoming traffic for services.”
9
Click Submit .
Configuring Outgoing Services
You control traffic that starts in the trusted or optional network and
goes to the external network using outgoing services. Usually, the
Internet is the external network.
By default, the Firebox® X Edge allows all traffic that starts in the
trusted or optional networks to go to the external network. To deny
outgoing connections, you must make rules for those connections.