Chapter 11 Intrusion Detection And Prevention - Watchguard Firebox X1000 User Manual

Intrusion Detection
CHAPTER 11
and Prevention
The WatchGuard Firebox System can protect your net-
work from many types of attacks. In addition to the
protection provided through filtered and proxied ser-
vices, the Firebox also gives you the following tools to
stop attacks that services are not designed to defeat.
User Guide
Default packet handling
Options for how the firewall handles
incoming communications that appear to be
attacks on a network.
Blocked sites
An IP address outside the Firebox that is
prevented from connecting to hosts behind the
Firebox. The Blocked Sites feature of the
Firebox helps you prevent unwanted contact
from known or suspected hostile systems.
Blocked ports
Ports that are designated as vulnerable entry
points to your network. A blocked port setting
blocks packets that enter your network
through the external interface.
177