WatchGuard Firebox System 7.0 User Guide

Chapter 8: Configuring Filtered Services3 Click OK to bring up the service’s Properties dialogbox and define outgoing properties, as described in“Adding service properties” on page 125.Using the previous example, you might add an alias called“staff,” which includes a range of IP addresses or group ofauthenticated users. For more information on aliases, see “UsingAliases” on page 162.4 Add the second HTTP service.Using the previous example, you might call this second HTTPservice “full_web_access.”5 Click OK to bring up the service’s Properties dialogbox and define outgoing properties, as described in“Adding service properties” on page 125.Using the previous example, you might add an alias called“executives.”NOTEBe careful to avoid creating conflicting services; for example,one HTTP service that allows incoming traffic while the otheris set to deny incoming traffic.Creating a new serviceIn addition to built-in filtered services provided by Watch-Guard, you can create a new service or customize an existingservice. You might need to do this when a new productappears on the market that you would like to run behindyour firewall. Remember, however, that every new serviceyou configure and add to your firewall potentiallyincreases your vulnerability to hackers.From Policy Manager:1 On the Policy Manager toolbar, click the AddServices icon (shown at right).The Services dialog box appears.2 Click New.The New Service dialog box appears, as shown in the followingfigure.120 WatchGuard Firebox System