WatchGuard Technologies SOHO manual How does the Soho process this information?, Services

Page 21

How does the SOHO process this information?

How does the SOHO process this information?

Services

A service is the combination of protocol(s) and port numbers associated with a specific application or communication type. To facilitate configuration of your SOHO, WatchGuard lets you select pre-configured versions of several commonly used services.

Network Address Translation (NAT)

All incoming connections through a SOHO automatically use a feature called dynamic network address translation (dynamic NAT). Without dynamic NAT, your trusted, private addresses would not be passed along the Internet to their destination.

Furthermore, the SOHO protects your trusted network by disguising private IP addresses. During an Internet connection, all traffic passed between computers includes their IP address information. However, due to the dynamic NAT feature, applications and servers on the Internet only see the public, external IP address of the SOHO itself and are never privy to the addresses in your trusted network address range when they exchange information with a computer behind your firewall.

Imagine that you install a computer behind the SOHO with the private IP address 192.168.111.12. If this address were broadcast to the Internet, hackers could easily direct an attack on the computer itself. Instead, the SOHO converts the address automatically to the public, external address of the SOHO. When a hacker tries to violate the computer, they are stopped cold at the SOHO, never learning the true address of your computer.

User Guide 5.0

21

Image 21
Contents WatchGuard Soho User Guide Page Following conventions are used throughout this guide Using this guideFCC Certification Certifications and NoticesCE Notice Industry CanadaTaiwanese Notice Vcci Notice Class a ITE Declaration of Conformity WatchGuard End-User License Agreement Page User Guide WatchGuard Limited Hardware Warranty User Guide Copyright and Patent Information Table of Contents Your Administrative Options Configuring Virtual Private Networking Page Welcome IntroductionHow does a firewall work? Registration and Identification InformationHow does a firewall work? IP Addresses How does information travel on the internet?Protocol Port numberServices How does the Soho process this information?Network Address Translation NAT Soho Home Page-System Status Default Factory SettingsFirewall Settings Resetting a Soho to the Factory DefaultsBase Model Soho Rebooting a WatchGuard SohoRebooting a WatchGuard Soho Rebooting a WatchGuard Soho Before you begin Pre-installation checklistInstallation Process Microsoft Windows NT or Determine your current TCP/IP settingsMicrosoft Windows 95 or 98 or ME MacintoshExit the TCP/IP configuration screen Disable your browser’s Http proxyNetscape 6/6.1 NetscapePhysically connecting your Soho Internet Explorer 5.0/5.5Cabling the Soho for one to four devices Installation Process Cabling the Soho for more than four computers This creates a connection between the Soho and the modem Installation Process Network addressing Configuring Your External NetworkDouble-click the Network icon TCP/IP Properties dialog box appears Configuring the Soho External network for dynamic addressing On your computer Configuring the Soho External network for static addressingExternal On the SohoConfiguring the Soho external network for PPPoE From the Configuration Mode drop list, select PPPoE Client Click Automatically restore lost connections Release and renew the IP configuration Configuring Your Trusted Network Configure the Trusted network with static addressesRoutes Configure additional computers to the trusted network Configuring Static Routes View the Network Statistics Network Statistics View the Network Statistics System Security Your Administrative OptionsSetting a System Administrator Name and System Passphrase = System Security = VPN Manager Access Setting up VPN Manager AccessClick the Submit button Update Your Configuration from a Non- Windows Platform Redeeming your Soho upgrade certificates= Update = Upgrade Seat Licenses Upgrade certificates= View Configuration File View the Configuration FileView the Configuration File Configuring Incoming and Outgoing Services Firewall settingsIncoming or Outgoing Pre-configured ServicesCreating a Custom Service Custom Service TCP and UDP PortsIP Protocols Blocking External Sites Blocked Sites Firewall Options Firewall OptionsPing requests received on the External Network Socks implementation for the Soho Denying FTP access to the Trusted Network interfaceConfigure your Socks application Disabling Socks on the Soho Logging all allowed outbound trafficDMZ Creating a virtual DMZCreating a virtual DMZ Creating a virtual DMZ Viewing Soho log messages What is Logging?Wsep Logging Setting a WatchGuard Security Event Processor log hostOur example Syslog Logging Setting a Syslog HostSystem Time Setting the System TimeIf you have decided to use the WatchGuard Time Server Setting the System Time Setting the System Time How WebBlocker works WatchGuard Soho WebBlockerWeb site in WebBlocker database Web site not in WebBlocker databaseWatchGuard WebBlocker database unavailable WebBlocker Users and GroupsBypassing the Soho WebBlocker Purchasing and enabling Soho WebBlockerConfiguring the Soho WebBlocker Enable WebBlockerSettings Enter the Inactivity Timeout in minutes Groups Create WebBlocker Groups and UsersTo the right of the Users field, click the New button Click the Submit button Alcohol/Tobacco WebBlocker categoriesDrug Culture Search Engines Click Check if the URL is on the CyberNOT List Searching for blocked sitesWhy create a virtual private network? Configuring Virtual Private NetworkingWhat you will need IP Address Table example Obtaining the VPN upgrade Step-by-step instructions for configuring a Soho VPN tunnelEnabling the VPN upgrade Special considerationsFrequently asked questions Why do I need a static external address?How do I get a static external IP address? How do I obtain a VPN upgrade certificate? OK, why is ping not working?How do I connect three or four offices together? How do I troubleshoot the connection?How do I enable a VPN Tunnel? Muvpn ClientsView the VPN Statistics View the VPN Statistics 104 Troubleshooting How do I reboot my SOHO?General How do I register my SOHO? What do the on and Mode lights signify on the SOHO?What is a Soho feature key? Set a password on my unit, but I forgot it. Can you help?Cant get a certain Soho feature to work with a DSL modem How does the seat limitation on the Soho work?How do I install a Soho using a Macintosh? Where are the Soho settings stored? ConfigurationHow can I see the MAC address of my SOHO? How do I change to a Dhcp trusted IP address?How do I change to a static trusted IP address? How do I set up and disable Webblocker?Incoming WebBlockerVPN Management How do I set up VPN between two SOHOs? How do I set up my Soho for VPN Manager Access?Online Documenting and In-Depth FAQs Contacting Technical supportSpecial Notices Database WebBlocker Default gateway 98 DNS service 116 User Guide 117 Socks