Defining Service Properties - Watchguard Firebox X1000 User Manual

Chapter 8: Configuring Filtered Services
the dialog box that appears, select the Save to Firebox
checkbox.

Defining Service Properties

You use the service's Properties dialog box to configure the
incoming and outgoing access rules for a given service.
The Incoming tab defines:
• The sources on the external network that use this
service to initiate sessions with your protected users,
hosts, and networks.
• The destinations behind the Firebox to which incoming
traffic for this service can be bound.
The Outgoing tab defines:
• The sources behind the Firebox that use this service to
initiate sessions with an outside destination.
• The destinations on the external network to which
outgoing traffic for this service can be bound.
In a given direction, a service can be in one of three states:
Disabled
Enabled and Denied
124
The traffic is handled by any other rules that might
apply to it. If none exists, the packets are denied by
default packet handling and logged as such. You
can make any service a one-directional filter by
selecting Disabled on either the Incoming or
Outgoing tab. This is generally used when
configuring multiple policies for the same service,
such as HTTP.
No traffic is allowed through this service, and
packets for this service will be blocked. The service
logs the attempts to connect to it.
WatchGuard Firebox System