Watchguard Firebox X5-W Guía de usuario descargar pdf (Pagina 94)

Configuring Firewall Settings

78 Firebox X Edge e-Series

Incoming and outgoing traffic

Traffic that comes from the external network is incoming traffic. Traffic that goes to the external network

is outgoing traffic. By default, the Firebox X Edge e-Series denies incoming traffic to protect your trusted

and optional networks.

The default configuration of the Edge allows this traffic:

- From the trusted network to the external network

- From the trusted network to the optional network

- From the optional network to the external network

The default configuration of the Edge denies this traffic:

- From the external network to the trusted network

- From the optional network to the trusted network

- From the external network to the optional network

Traffic through VPN tunnels

When you create a Mobile User VPN tunnel from remote users, or when you create a Branch Office VPN

tunnel to other offices, the Firebox X Edge e-Series automatically allows all traffic through that VPN tun-

nel. No other configuration is necessary after the VPN tunnel is set up.

Configuring Incoming Services

You can control the traffic that goes to the trusted or optional networks from the external network using

incoming services. Usually, the Internet is the external network.

The Firebox® X Edge supplies a list of frequently used services, called common services, that you can use

to easily allow the most common traffic categories into your trusted or optional network. You also can

create custom services if you must allow traffic that is not in the list of frequently used services.

You must be careful when you allow incoming services. When you allow an incoming service, you open

the protected networks behind the Firebox X Edge to more traffic, which increases risk. Make sure that

you compare the value of added access to the security risk.

Note

The incoming services in this section have no effect on traffic between the trusted and optional

networks. These services also have no effect on traffic between computers on the trusted network or

between computers on the optional network.

1 2 ... 89 90 91 92 93 94 95 96 97 98 99 ... 233 234

Sin comentarios

Watchguard Firebox X5-W Guía de usuario Pagina 94