Logging All Allowed Outbound Traffic - Watchguard SOHO User Manual

• For the SOCKS proxy, enter the URL or IP address of the
SOHO trusted network. The default IP address is
192.168.111.0.
Disabling SOCKS on the SOHO
Once you have used a SOCKS-compliant application through the
SOHO, the primary SOCKS port is available to anyone on your
trusted network. You can, however, close this security gap
between uses of SOCKS applications.
1 Enable the checkbox labeled Disable SOCKS proxy.
This disables the SOHO from acting as a SOCKS proxy.
2 Click the Submit button.
When you need to use SOCKS again, follow this procedure:
1 Disable the checkbox labeled Disable SOCKS proxy.
This enables the SOHO to act as a SOCKS proxy.
2 Click the Submit button.
The SOHO is enabled again as a Proxy server and ready to pass SOCKS
packets.

Logging all allowed outbound traffic

By default, the SOHO logs only particular events and not all traffic
passing through it. For the most part, the SOHO records denied
traffic. However, the SOHO can be configured to record all
allowed outbound traffic.
As this option will record an extensive amount of log entries,
WatchGuard recommends that it only be enabled for diagnostic purposes.
User Guide 5.0
Firewall Options
N
OTE
73