Watchguard Firebox X15 User Manual page 130

Firewall Policies
About using common packet filter policies
You can control the traffic between the trusted, optional, and external networks using packet filter policies.
The Firebox X Edge supplies a list of frequently used policies, called common policies, that you can use to
easily allow or deny the most common traffic categories. You can use the default settings of the packet filters
or you can edit them to meet your needs.
Remember that you must configure incoming and outgoing packet filter policies separately. By default, the
common packet filter policy Outgoing is set to Allow. With the Outgoing policy, you can allow users on your
trusted network to establish connections on the Internet, such as web browsing and email, and not have to
create a policy for each type of connection. By default, all incoming traffic is set to Deny. You must be careful
when you set incoming policies to Allow. When you allow an incoming policy, you open the protected
networks behind the Firebox X Edge to more traffic, which increases risk.
To set your packet filter policies:
1. To connect to the System Status page, type
of the Firebox X Edge trusted interface.
The default URL is: https://192.168.111.1
2. From the navigation bar, select Firewall > Incoming for incoming policies or Firewall > Outgoing for
outgoing policies. You can edit both incoming and outgoing traffic from either page.
The Filter Traffic page appears.
3. Find the common policy you want to allow or deny. From the Filter drop-down list adjacent to the
policy name, select Allow, Deny, or No Rule.
If you select No Rule, that policy is disabled and the Edge uses the default behavior, which is to deny
incoming traffic and allow outgoing traffic. For more information on rules, see
118
in the browser address bar, and the IP address
https://
Policy Rules.
Firebox X Edge e-Series