WSM Reference Guide - WatchGuard Technologies

More documents

Recommendations

Info

Notice to UsersInformation in this guide is subject to change without notice. Companies, names, and data used in examplesherein are fictitious unless otherwise noted. No part of this guide may be reproduced or transmitted in anyform or by any means, electronic or mechanical, for any purpose, without the express written permission ofWatchGuard Technologies, Inc.Copyright, Trademark, and Patent InformationCopyright© 1998 - 2006 WatchGuard Technologies, Inc. All rights reserved.Complete copyright, trademark, patent, and licensing informationcan be found in the WatchGuard System Manager UserGuide. A copy of this book is automatically installed into a subfolderof the installation directory called Documentation. Youcan also find it online at:http://www.watchguard.com/help/documentation/All trademarks or trade names mentioned herein, if any, are the property of their respective owners.Software Version: WSM 8.3Document Version: Reference-8.3-352-2672-001ADDRESS:505 Fifth Avenue SouthSuite 500Seattle, WA 98104SUPPORT:www.watchguard.com/supportsupport@watchguard.comU.S. and Canada +877.232.3531All Other Countries +1.206.613.0456SALES:U.S. and Canada +1.800.734.9905All Other Countries +1.206.521.8340ABOUT WATCHGUARDWatchGuard is a leading provider of network security solutions for small- to midsizedenterprises worldwide, delivering integrated products and services that arerobust as well as easy to buy, deploy and manage. The company’s Firebox X family ofexpandable integrated security appliances is designed to be fully upgradeable as anorganization grows and to deliver the industry’s best combination of security,performance, intuitive interface and value. WatchGuard Intelligent Layered Securityarchitecture protects against emerging threats effectively and efficiently and providesthe flexibility to integrate additional security functionality and services offeredthrough WatchGuard. Every WatchGuard product comes with an initial LiveSecurityService subscription to help customers stay on top of the security landscape withvulnerability alerts, software updates, expert security instruction and superiorcustomer care. For more information, please call (206) 521-8340 or visitwww.watchguard.com.iiWatchGuard System Manager
ContentsCHAPTER 1 Internet Protocol Reference ............................................................................................. 1Internet Protocol Header ...................................................................................................................... 1IP header number list ........................................................................................................................... 2Internet Protocol Options ..................................................................................................................... 4Transfer Protocols .................................................................................................................................... 5UDP .......................................................................................................................................................... 5TCP ........................................................................................................................................................... 6ICMP ........................................................................................................................................................ 6Other protocols ..................................................................................................................................... 6Standard Ports and Random Ports .................................................................................................... 6CHAPTER 2 MIME Content Types ............................................................................................................ 7CHAPTER 3 Services and Ports ...............................................................................................................19Ports Used by WatchGuard Products .............................................................................................19Ports Used by Microsoft Products ...................................................................................................20Well-Known Services List ....................................................................................................................21CHAPTER 4 Log Messages ........................................................................................................................27Introduction to Logging .....................................................................................................................27Traffic Logs ...............................................................................................................................................28Packet Filter Logs ................................................................................................................................28Proxy Logs ............................................................................................................................................30Alarm Logs ...............................................................................................................................................36Event Logs ................................................................................................................................................41Event Log Messages ...........................................................................................................................43Firebox Log File XML DTD and Schema .........................................................................................55Firebox® X Edge Log Messages .........................................................................................................56CHAPTER 5 WebBlocker Content ..........................................................................................................69Searching for Blocked Sites ................................................................................................................69Reference Guideiii
Page 1: WatchGuard ® System ManagerReferen
Page 5 and 6: CHAPTER 1Internet Protocol Referenc
Page 7 and 8: Internet Protocol HeaderKeyword Num
Page 9 and 10: Transfer ProtocolsSource RoutingThe
Page 11 and 12: CHAPTER 2MIME Content TypesSoftware
Page 13 and 14: Type Subtype Reference (where avail
Page 23 and 24: CHAPTER 3Services and PortsWell-kno
Page 25 and 26: Well-Known Services ListPort(s) Pro
Page 27 and 28: Well-Known Services ListService Nam
Page 29 and 30: Well-Known Services ListService Nam
Page 31 and 32: CHAPTER 4Log MessagesUnderstanding
Page 33 and 34: Traffic LogsFWAllowEach packet filt
Page 35 and 36: Traffic Logsdst_ip="66.35.250.151"
Page 37 and 38: Traffic LogsDNS Proxy Traffic Log M
Page 39 and 40: Traffic LogsHTTP Proxy Traffic Log
Page 41 and 42: Alarm LogsPolicy AlarmsDefaultNameP
Page 43 and 44: Alarm LogsDenial of Servce (DoS) Al
Page 45 and 46: Event LogsGateway AntiVirus Service
Page 47 and 48: Event LogsDescription of Log Module
Page 49 and 50: Event LogsEvent Log Message Catalog
Page 51 and 52: Event LogsEvent Log Message Catalog
Page 53 and 54:
Event LogsEvent Log Message Catalog
Page 55 and 56:
Page 57 and 58:
Page 59 and 60:
Firebox Log File XML DTD and Schema
Page 61 and 62:
Firebox® X Edge Log MessagesModule
Page 63 and 64:
Page 65 and 66:
Page 67 and 68:
Page 69 and 70:
Page 71 and 72:
Page 73 and 74:
CHAPTER 5WebBlocker ContentWatchGua
Page 75 and 76:
WebBlocker CategoriesCategoryDrugs,
Page 77 and 78:
WebBlocker CategoriesCategoryJob Se
Page 79 and 80:
CHAPTER 6ResourcesThere are many re
Page 81 and 82:
Mailing ListsMailing Listswg-users@
Page 83 and 84:
White Hat Web Sitesbeginners. Cons:
Page 85 and 86:
Other Web Sitesmaintains a list of
Page 87 and 88:
RSS Feedswww.sophos.com/virusinfo/i
Page 89 and 90:
IndexBblocked sites, searching for
show all

WSM Reference Guide - WatchGuard Technologies

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?