Setting Access Control Options; Setting Proxy Limits - Watchguard Firebox X20E User Manual

Configuring the HTTP Proxy

Setting access control options

On the Outgoing tab, you can set rules that filter IP addresses, network addresses, or host ranges. This
is the same functionality you have in packet filter policies. See Chapter 7, "Firewall Policies" for more
information.
Select the Outgoing tab.
1
From the Outgoing Filter drop-down list, select Deny, Allow, or No Rule.
2
Use the From drop-down list to add the IP address, network address, range of IP addresses of
3
computers on the trusted or optional network, or an alias for which this policy applies.
Network IP addresses must be entered in "slash" notation (also known as Classless Inter Domain
Routing or CIDR notation).
Click Add. The From text box shows the IP addresses you added. The From text box can have
4
more than one entry.
Use the To drop-down list to add the IP address, network address, or range of IP addresses of
5
computers on the external network for which this policy applies.
Network IP addresses must be entered in "slash" notation (also known as Classless Inter Domain
Routing or CIDR notation).
Click Add. The To text box shows the IP addresses you added. The To text box can have more
6
than one entry.

Setting proxy limits

On the HTTP Settings tab, you can adjust timeout and length limits of HTTP requests and responses.
This stops the HTTP proxy from using too many network resources and can prevent some types of
attacks. You can also customize the deny message that users see when they try to connect to a web site
that the HTTP proxy blocks and add the IP addresses of web sites that you want to bypass the HTTP
proxy.
106 Firebox X Edge e-Series