Enabling Protocol Anomaly Detection For Ftp - Watchguard Firebox X1000 User Manual

Chapter 9: Configuring Proxied Services
From Policy Manager:
1 If you have not done so already, use the Add Service
button to add the FTP proxy service. Expand the
Proxies tree and double-click the FTP service icon.
2 Click the Properties tab. Click Settings.
The Settings information appears as shown in the following
figure.
3
Enable FTP proxy properties according to your
security policy preferences.
For a description of each control, right-click it, and then select
What's This?. You can also refer to the "Field Definitions"
chapter in the Reference Guide.
Note that the Make Incoming FTP Connections Read only
checkbox is selected by default. If you have an FTP server that
accepts files, be sure to clear this checkbox.
4
Click OK.

Enabling protocol anomaly detection for FTP

For a description of protocol anomaly detection, see "Pro-
tocol Anomaly Detection" on page 136.
1 From the FTP Properties dialog box, click the
Properties tab.
2
Select the Enable auto-blocking of sites using
protocol anomaly detection checkbox.
3
To set rules for anomaly detection, click the Auto-
blocking Rules button.
The PAD Rules for FTP Proxy dialog box appears, as shown in
the following figure.
150 WatchGuard Firebox System