Enabling Common Packet Filter Policies - Watchguard Firebox X20E User Manual

Enabling Common Packet Filter Policies

You can control the traffic between the trusted, optional, and external networks using packet filter pol-
icies. The Firebox® X Edge supplies a list of frequently used policies, called common policies, that you
can use to easily allow or deny the most common traffic categories. You can use the default settings of
the packet filters or you can edit them to meet your needs.
Remember that you must configure incoming and outgoing packet filter policies separately. By
default, the common packet filter policy "Outgoing" is set to Allow. With the Outgoing policy, you can
allow users on your trusted network to establish connections on the Internet such as web browsing
and email and not have to create a policy for each type of connection. By default, all incoming traffic is
set to Deny. You must be careful when you set incoming policies to Allow. When you allow an incom-
ing policy, you open the protected networks behind the Firebox X Edge to more traffic, which increases
risk.
To set your packet filter policies:
To connect to the System Status page, type https:// in the browser address bar, and the IP
1
address of the Firebox X Edge trusted interface.
The default URL is: https://192.168.111.1
From the navigation bar, select Firewall > Incoming for incoming policies or
2
Firewall > Outgoing for outgoing policies. You can edit both incoming and outgoing traffic
from either page.
The Filter Traffic page appears.
User Guide
Enabling Common Packet Filter Policies
93