Enable A Common Proxy Policy; Add Or Edit A Proxy Policy - Watchguard Firebox X15 User Manual

Proxy Settings
About adding and configuring proxy policies
When you add a proxy policy to your Firebox configuration, you specify types of content that the proxy must
look for as it filters traffic. If the content matches (or does not match) the criteria you set in the proxy definition,
the proxy allows or denies the network traffic.
For each proxy policy, you can use the default settings or you can configure individual settings to suit your
needs. You can also create additional proxy policies for each of the protocols to filter different parts of your
network.
It is important to remember that a proxy filter adds more work for your firewall for the same volume of network
traffic as a packet filter. But a proxy uses methods that packet filters cannot use to catch dangerous packets.
Each proxy policy includes a set of parameters that you can adjust to create balance between your security
needs and your performance needs.
If you upgrade to v8.6 from an earlier version of Edge firmware (such as v8.0 or v8.5) and you have
WebBlocker enabled, the HTTP proxy is enabled by default. WebBlocker uses the HTTP proxy for
content filtering.
To add a proxy policy to your configuration, you must first enable it, as described in
policy.

Enable a common proxy policy

1. To connect to the System Status page, type
of the Firebox X Edge trusted interface.
The default URL is: https://192.168.111.1
2. From the navigation bar, select Firewall > Outgoing or Firewall > Incoming.
The Filter Outgoing Traffic or Filter Incoming Traffic page appears.
3. Below Common Proxy Policies, find the proxy you want to enable and select Allow from the drop-
down list.
4. Click Submit.

Add or Edit a Proxy Policy

To add or change the properties of a proxy policy, select Firewall > Outgoing or Firewall > Incoming from
the navigation menu. To create a new proxy policy, click New Custom Proxy Policy. To modify an existing
proxy, click the Edit button adjacent to the proxy name.
When you add or edit a proxy policy, make sure you look at all of the parts of the configuration page. There
are three or four tabs for each proxy policy:
Incoming or Outgoing. Use this first tab to set general information about the proxy policy, including
whether traffic it applies to is allowed or denied. Certain types of proxy policies also allow you to set
which computers can send or receive this type of network traffic, or which IP address acts as a policy
host.
Properties or Settings. The second tab shows information about which port and protocol the proxy
policy manages. You cannot change the information on this tab.
Content. The third and/or fourth tabs of a proxy policy include settings that apply only to that type of
proxy policy. For example, a POP3 proxy policy includes two tabs, POP3 Settings and POP3 Content.
You can use these tabs to create a deny message that users see when an email is rejected, or specify a
list of attachment types that you consider unsafe.
128
in the browser address bar, and the IP address
https://
Enable a common proxy
Firebox X Edge e-Series