Watchguard Firebox X5500E, Справочное руководство

Страница: 50 / 160

Packet Filter Policies
42
WatchGuard System Manager
CU-SeeMe
CU-SeeMe is a software application used to do video conferencing through the Internet. For CU-SeeMe
to operate through the Firebox, you must make sure that you are not on a network that uses outgoing
dynamic NAT.
The CU-SeeMe protocol makes you configure this policy for traffic going in to and out of your network.
The CU-SeeMe policy uses the correct ports to allow the use of CU-SeeMe versions 2.X and 3.X.
CU-SeeMe Version 2.X operates on UDP port 7648. Version 3.X operates on UDP port 7648, UDP port
24032 (for H.323 conferences), and TCP port 7648 (video conference directories).
Characteristics
• Internet Protocol(s): TCP, UDP
• Port Numbers(s): TCP 7648, UDP 7648, UDP 24032
DHCP-Server or DHCP-Client
Dynamic Host Configuration Protocol (DHCP) gives a way to allocate dynamic IP addresses to devices
on a network.
Characteristics
• Internet Protocol(s): TCP
• DHCP-Server Port Number(s): 67
• DHCP-Client Port Number(s): 68
DNS
Domain Name Service (DNS) matches host names to IP addresses. A DNS policy is enabled in the
default configuration. The DNS policy allows UDP DNS traffic, as well as TCP zone transfers, to occur as
specified. All of the usual log options can be used with DNS.
Characteristics
• Internet Protocol(s): TCP (for server-server zone transfers), UDP (for client-server lookups)
• Port Number(s): TCP 53, UDP 53
Entrust
The Entrust Authority Public Key distribution application protocol passes public keys to a trusted
third-party organization for verification.
Characteristics
• Internet Protocol(s): TCP
• Port Number(s): 709, 710