Watchguard Firebox X5-W Guía de usuario descargar pdf (Pagina 103)

User Guide 87

Configuring Firewall Settings

Here are some examples of how you can use the optional network:

• You can use the optional network for servers that the external network can get to. This helps to

protect the trusted network, because no traffic is allowed to the trusted network from the

optional network when the Firebox X Edge is in default configuration.

When computers are accessible from the external network, they are more vulnerable to attack. If

your public web or FTP server on the optional network is hacked or compromised, the attacker

cannot get to your trusted network.

• You can use the optional network to secure a wireless network. Wireless networks are usually less

secure than wired networks. If you have a wireless access point (WAP), you can increase the

security of your trusted network by keeping the WAP on the optional network.

• You can use the optional network to have a different network IP address range that is allowed to

communicate with the trusted network. See the section “Disabling Traffic Filters,” below.

Controlling traffic from the trusted to optional network

Do these steps to deny traffic that goes from the trusted network to the optional network:

1 To connect to the System Status page, type https:// in the browser address bar, and the IP

address of the Firebox X Edge trusted interface.

The default URL is: https://192.168.111.1

2 From the navigation bar, click Firewall > Optional.

The Filter Outgoing Traffic to Optional Network page appears.

3 To allow all traffic from the trusted network, select Allow for the Outgoing service from the Filter

drop-down list.

4 To deny all traffic from the trusted network, select Deny for the Outgoing service from the Filter

drop-down list.

5 To deny some traffic, but allow all other traffic from the trusted network to the optional network, set

the Outgoing service to Deny from the Filter drop-down list. Then, for each service that is

permitted, select Allow from the Filter drop-down list.

If you want to deny the traffic and create a log entry for each time the traffic is denied, select No Rule.

6 Click Submit.

1 2 ... 98 99 100 101 102 103 104 105 106 107 108 ... 233 234

Sin comentarios

Watchguard Firebox X5-W Guía de usuario Pagina 103