WatchGuard Firebox System 7.0 User Guide

Blocking PortsAvoiding problems with legitimate usersIt is possible for legitimate users to have problems becauseof blocked ports. In particular, some clients might temporarilyfail because of blocked ports.You should be very careful about blocking port numbersbetween 1000 through 1999, as these numbers are particularlylikely to be used as client ports.NOTESolaris uses ports greater than 32768 for clients.Blocking a port permanentlyFrom Policy Manager:1 On the toolbar, click the Blocked Ports icon,shown at right.You can also select Setup => Intrusion Prevention =>Blocked Ports. The Blocked Ports dialog box appears, as shownin the following figure.2 In the text box to the left of the Add button, type theport number. Click Add.The new port number appears in the Blocked Ports list.To remove a blocked port, select the port to remove. ClickRemove.User Guide 191