WatchGuard Firebox System 7.0 User Guide

Chapter 8: Configuring Filtered ServicesAs another example, passwords used for some services(FTP, telnet, POP) are sent in the clear. If the passwords arethe same as those used internally, a hacker can hijack thatpassword and use it to gain access to your network.Adding and Configuring ServicesYou add and configure services using Policy Manager. TheServices Arena of Policy Manager contains icons that representthe services (filtered and proxied) currently configuredon the Firebox, as shown in the following figure. Youcan choose from many filtered and proxied services. Theseservices are configurable for outgoing or incoming traffic,and they can also be made active or inactive. When configuringa service, you set the allowable traffic sources anddestinations, as well as determine the filter rules and policiesfor the service. You can create services to customizerule sets, destinations, protocols, ports used, and otherparameters.You can also add unique or custom services. However, ifyou do, take steps to permit only the traffic flow in that servicethat is absolutely essential.Normal View of the Services ArenaTo display the detailed view of the Services Arena,select the Details icon (shown at right) at the far116 WatchGuard Firebox System