Configuring Upnp Rules From Windows Xp - McAfee SG310 Administration Manual

Firewall menu options
NAT
The UPnP Gateway needs to be run on a pair of interfaces: the external interface (typically default gateway
internet) and the internal interface (typically LAN or DMZ). The UPnP Gateway sends out notifications on
the internal interface, advertising its presence on the network. Any UPnP-capable applications or devices
you require to make use of the UPnP Gateway need to be connected to the UTM Firewall appliance via this
interface. The UPnP Gateway listens on this interface to requests from UPnP-capable applications and
devices to establish port forwarding rules. In response to these requests, the UPnP Gateway establishes
port forwarding rules to allow matching packets to be forwarded from the configured external interface
through to the internal interface.
The port forwarding rules set up via the UPnP Gateway are temporary. The list of configured UPnP port
forwarding rules is cleared should the UTM Firewall appliance be power cycled, or should the internal or
external interface become unavailable. The UPnP Gateway is intended for transitory application port
forwarding, such as those established by some versions of Microsoft Messenger for file transfers. For long
term port forwarding, configuring the necessary rules via the Destination NAT features in Packet Filtering is
recommended. Should there be a conflict; packet filtering and NAT rules take precedence over UPnP rules.
Enabling and configuring the UPnP Gateway
From the Firewall menu, click NAT > UPnP Gateway tab. The UPnP Gateway page appears
1
(Figure 193).
Figure 193 UpnP Gateway page
[Optional] Select the Enable UPnP Gateway checkbox.
2
Select an interface from the Internal Interface list.
3
Select an interface from the External Interface list.
4
[Optional] To enable detailed syslog information for UPnP activities, select the Enable verbose syslog
5
information checkbox. You can view details of every UPnP transaction carried out by the UPnP Gateway
recorded in the system log.
Click Submit.
6

Configuring UPnP rules from Windows XP

Once UPnP is running on the UTM Firewall appliance, you can configure UPnP port forwarding rules from a
local Windows XP PC.
188 McAfee UTM Firewall 4.0.4 Administration Guide