WatchGuard Firebox System 7.0 User Guide

Chapter 9: Configuring Proxied Servicesa variety of custom options including specializedlogging features, definition of safe content types, andWebBlocker.• HTTP is a proxy service that functions very much likeProxied-HTTP, except that it controls both incomingand outgoing access only on port 80.NOTEThe WatchGuard service called “HTTP” is not to beconfused with an HTTP caching proxy. An HTTP cachingproxy refers to a separate machine that performs caching ofWeb data.• Filtered-HTTP is a multiservice that combinesconfiguration options for HTTP on port 80 with a ruleallowing (by default) all outgoing TCP connections. Asa filtered service, Filtered-HTTP is considerably fasterthan Proxied-HTTP or HTTP, but does not provideprotection that is as thorough or as effective. Inaddition, none of the custom options, includingWebBlocker, are available for Filtered-HTTP.Adding a proxy service for HTTPMost network administrators use the HTTP proxy servicewhen configuring Web traffic. Many administrators combinetheir HTTP service with an outgoing proxy serviceconfigured Any to Any to keep the HTTP service both easyto understand and control. In the following procedure, youdefine the content allowed to pass through the firewall.1 In Policy Manager, click the Add Service icon. Expandthe Proxies folder, double-click HTTP, and then clickOK.The HTTP Properties dialog box appears. The default stance is todeny incoming traffic and to allow outgoing traffic from Any toAny.2 Use the Incoming HTTP connections are drop-downlist to select Enabled and Allowed.3 Configure the service as you want. For example, toconfigure the HTTP proxy to allow incoming traffic152 WatchGuard Firebox System