WatchGuard Technologies SOHO 6.1 How Does the Soho 6 Process Information?, Port numbers, Services

Page 23

How Does the SOHO 6 Process Information?

Port numbers

The port numbers are used by computers at both the sending and receiving end to determine the particular program or application for each connection.

How Does the SOHO 6 Process Information?

Services

A service is the combination of protocol(s) and port numbers associated with a specific program or application type. To simplify configuration of your SOHO 6, WatchGuard configured versions of several common services are available for your use.

Network Address Translation

All outgoing connections through a SOHO 6 automatically use a feature called dynamic NAT (Network Address Translation). Without dynamic NAT, your trusted, private addresses are passed along the Internet to their destination.

In addition, the SOHO 6 protects your trusted network by disguising private IP addresses. During an Internet connection, all traffic passed between computers includes IP address information. However, because of the dynamic NAT feature, applications and servers on the Internet only see the public, external IP address of the SOHO 6 itself and are never aware of the addresses in your trusted, network address range.

Imagine that you install a computer behind the SOHO 6 with the IP address 206.253.208.100. If this address were broadcast to the Internet, hackers could easily direct an attack on the computer itself. Instead, the SOHO 6 converts the address automatically to

User Guide

5

Image 23
Contents WatchGuard Firebox Soho User Guide Following conventions are used in this guide Using this GuideIndustry Canada Certifications and NoticesFCC Certification CE NoticeVcci Notice Class a ITE Declaration of Conformity Watchguard Soho Software END-USER License Agreement User Guide Vii Viii WatchGuard Firebox Soho Copyright, Trademark, and Patent Information WatchGuard Firebox Soho User Guide Xii WatchGuard Firebox Soho Contents Configure the Network Interfaces Configure the Firewall Settings VPN-Virtual Private Networking Index 117 Xviii WatchGuard Firebox Soho Welcome IntroductionPackage Contents How Does a Firewall Work? Protocol How Does Information Travel on the Internet?IP addresses Network Address Translation ServicesHow Does the Soho 6 Process Information? Port numbersEthernet ports Soho 6 Hardware DescriptionSoho 6 front and rear views Faster ProcessorMode StatusLink 100OPT port Numbered ports Reset buttonPower input WAN portIntroduction WatchGuard Firebox Soho Installation Microsoft Windows 2000 and Windows XP Review and record your current TCP/IP settingsClick Start = Programs = Accessories = Command Prompt Before You BeginOther operating systems Unix, Linux Microsoft Windows NTMicrosoft Windows 95 or 98 or ME MacintoshExit the TCP/IP configuration screen Disable the Http proxy setting of your Web browserClick Edit = Preferences NetscapeClick Tools = Internet Options Enable your computer for DhcpClick Start = Settings = Control Panel Internet Explorer 5.0, 5.5,Click Properties Physically connect the Soho Cabling the Soho 6 for one to four appliances Cabling the Soho 6 for more than four computers Physically connect the Soho Soho 6 is now connected to the Internet and your hub Soho 6 Home Page-System Status Soho 6 BasicsSoho 6 Basics Trusted Network Default Factory SettingsExternal Network System Security Reset a Soho 6 to factory defaultFirewall Settings Upgrade OptionsBase model Soho Register your Soho 6 and Activate the LiveSecurity ServiceReboot the Soho Reboot the Soho Soho 6 Basics WatchGuard Firebox Soho Network addressing Configure Network InterfacesConfigure Your External Network Configure the Soho 6 External Network for dynamic addressing Network = External Configure the Soho 6 External Network for static addressingManual Configuration Configure the Soho 6 External Network for PPPoE Click Automatically restore lost connections Configure Dhcp Server and Dhcp Relay Configure the Trusted NetworkTrusted Network Configuration page appears Configure additional computers on the Trusted Network Network = Trusted Configure the Trusted Network with static addressesConfigure Static Routes Click Add Network = Network Statistics View Network StatisticsNetwork = DynamicDNS Configure the Dynamic DNS ServiceSelect the Enable Dynamic DNS client checkbox Configure Dual ISP Port Configure OPT Port UpgradesConfigure OPT Port Upgrades Network = Dual ISP Configure VPNforce Port Network = Optional Configure OPT Port Upgrades Configure the Network Interfaces WatchGuard Firebox Soho Administrative Options System management System SecurityAdministration = System Security Soho Remote Management Set up VPN Manager AccessSelect Enable VPN Manager Access Administration = VPN Manager AccessAdministration = Update Update Your FirmwareRedeem your Soho 6 Upgrade Options Seat Licenses Administration = UpgradeUpgrade options IPSec Virtual Private Networking VPN LiveSecurity Service Subscription RenewalsDual ISP Port VPNforce PortAdministration = View Configuration File View the Configuration FileFirewall Settings Configure Firewall SettingsFirewall = Incoming or Outgoing Configure Incoming and Outgoing ServicesPre-configured Services Create a Custom Service Custom Service page refreshes Firewall = Custom ServiceBlock External Sites Blocked Sites page appears Firewall = Firewall Options Firewall OptionsSocks implementation for the Soho Denying FTP access to the Trusted Network interfaceSelect Do not allow FTP access to Trusted Network Ping requests received on the External NetworkConfiguring your Socks application Disabling Socks on the Soho Logging all allowed outbound trafficSelect Enable override MAC address for the External Network Enable override MAC address for the External NetworkSelect Log All Allowed Outbound Access Firewall = Pass Through Select Enable pass through addressCreate an Unrestricted Pass Through Create an Unrestricted Pass Through Configure the Firewall Settings WatchGuard Firebox Soho Configure Logging From the navigation bar on the left side, select Logging View Soho 6 Log MessagesTo have your log messages synchronize with your computer Select Enable WatchGuard Security Event Processor Logging Logging = Syslog Logging Set up Logging to a Syslog HostSelect Enable syslog output Select Include local time in syslog message Set the System TimeSelect a time zone from the drop list Select Adjust for daylight savings timeConfigure Logging WatchGuard Firebox Soho VPN-Virtual Private Networking Why Create a Virtual Private Network?What You Need IP Address Table example Enable the VPN Upgrade How do I get a static external IP address? Frequently Asked QuestionsWhy do I need a static external address? Special ConsiderationsHow do I troubleshoot the connection? Why is ping not working?How do I obtain a VPN upgrade license key? How do I enable a VPN Tunnel?VPN = Manual VPN Set Up Multiple SOHO-SOHO VPN TunnelsEnter the Name, IPSec Gateway Address, and Shared Key for Soho 6 you want to set up a VPN tunnelSet Up Multiple SOHO-SOHO VPN Tunnels Forward Secrecy Muvpn Clients Configure Split TunnelingStatistics View the VPN StatisticsHow WebBlocker Works Soho 6 WebBlockerWatchGuard WebBlocker database unavailable Web site not in the WebBlocker databaseWeb site in the WebBlocker database Groups Purchase and Activate Soho 6 WebBlockerWebBlocker users and groups Bypass the Soho 6 WebBlockerActivate WebBlocker Configure the Soho 6 WebBlockerWebBlocker = Settings Create WebBlocker Groups and Users Select Enable WebBlockingClick New to create a group name and profile Click Submit To the right of the Users field, click New Illegal Gambling WebBlocker CategoriesAlcohol/tobacco Intolerance Militant/extremistDrug Culture Satanic/cultSports and Leisure Gross DepictionsViolence/profanity Search EnginesPartial/artistic Nudity Sexual ActsFull Nudity General Troubleshooting TipsSupport Resources How do I restart my Soho 6? How do I register my Soho 6 with the LiveSecurity Service?How does the seat limitation on the Soho 6 work? What is a Soho 6 Feature Key?Cant get a certain Soho 6 feature to work with a DSL modem 110 Select Enable Dhcp Server and then click Submit ConfigurationWhere are the Soho 6 settings stored? How do I set up Dhcp on the trusted network of the Soho 6?How do I change to a static, trusted IP address? Disable Enable Dhcp Server and then click SubmitHow do I set up and disable Webblocker? Firewall = Incoming VPN Management How do I set up VPN to a Soho 6s? How do I set up my Soho 6 for VPN Manager Access?Contact Technical support Online Documentation and In-Depth FAQsNumerics IndexWAN Socks Redeeming 57 types Upgrade page 58 upgrading Processor WebBlocker 122
Related manuals
Manual 8 pages 29.02 Kb