WSM Reference Guide - WatchGuard Technologies

More documents

Recommendations

Info

BooksO'ReillyPublishes many books on network security.www.ora.com/BooksNon-FictionZwicky, Elizabeth D. et al; Building Internet Firewalls. Sebastopol: O'Reilly & Associates, 2000. ISBN1565928717.Cheswick, et al; Firewalls and Internet Security: Repelling the Wily Hacker. Reading, MA: Addison WesleyLongman, Inc., 2003. ISBN 020163466X.Garfinkel and Spafford, Simson Garfinkel and Gene Spafford. Practical Unix and Internet Security. Sebastopol:O'Reilly & Associates, 2003. ISBN 0596003234.McClure, Stewart; Scambray, Joel; and Kurtz, George. Hacking Exposed. Fourth Edition. McGraw-HillPublishing, 2003. ISBN 0072227427.Power, Richard. Tangled Web: Tales of Digital Crime from the Shadows of Cyberspace. Que; September2000. ISBN 078973443x.Schneier, Bruce. Applied Cryptography. Second Edition. New York: John Wiley & Sons, Inc., 1996. ISBN0471117099.Schwartau, Winn. Cybershock: Surviving Hacker, Phreakers, Identity Theives, Internet Terrorists andWeapons of Mass Disruption. New York: Thunder’s Mouth Press, 2001. ISBN 156025307X.Stevens, W. Richard. TCP/IP Illustrated. Reading MA: Addison Wesley Longman, Inc., 1994. ISBN0201633469. (Note: This is a 3-volume set.)Stoll, Cliff. Cuckoo’s Egg. Pocket Books, 1995. ISBN 0671726889.FictionStephenson, Neal. Cryptonomicon. New York, NY: HarperCollins Publishers, 1999. ISBN 0060512806.White Papers & Requests for Commentswww.cis.ohio-state.edu/htbin/rfc/rfc1700.htmlReynolds, J. and J. Postel, Assigned Numbers. Available at this Web site.www.cis.ohio-state.edu/hypertext/information/rfc.htmlInternet Requests for Comments (RFC)www.watchguard.com/infocenter/whitepapers.aspWatchGuard White Paper Library76 WatchGuard System Manager
Mailing ListsMailing Listswg-users@watchguard.comWatchGuard sponsors a listserv for our customers. For more information, see the TechnicalSupport chapter in the User Guide.firewall-wizards@nfr.netFirewall gurus from around the world discuss and answer all types of questions.Full DisclosureWhen Symantec bought Security Focus and its lists, suspicious security expersts and networkadministrators fled. Where did they go? Largely to FullDisclosure. Pros: Cannot be biased by anyvendor because it's completely unmoderated. First choice for posting latest discoveries bysome big-name researchers. Black-hat hackers like to harass this list, inadvertently providinguseful perspective on the "script kiddie" mindset. Con: Because it's unmoderated, this highvolumelist will drown you in 20 irrelevant flame-war e-mails for every on-topic comment. Net:You get what you pay for, and this list is free. Try it briefly to familiarize yourself with it, but useOutlook rules to divert Full Disclosure e-mails to a folder you can read at leisure.VulnWatch and VulnDiscussThese lists are, respectively, moderated and unmoderated. Pro: You can not only get securityadvisories from vendors, you can also see what the rest of the IT community thinks and feelsabout them. Con: Fairly large volume of highly technical alerts difficult for newcomers tounderstand. Net: While you wouldn't want this as your only source of security news, it providesa solid source for confirmation and alternate opinions on security trends.SecuniaPro: This list notifies on every vulnerability under the sun. Con: Secunia mostly reproducesvendor releases, without analysis or suggested remediation for IT beginners. And did I mentionthey report on everything under the sun? If you don't know Linux/Unix, you won't understand alot of the bulletins. Net: High volume, but all on topic (unlike FullDisclosure). Try it to see if it'sfor you.General IT and Security Web SitesFirst, a note to any intrepid beginner who is reading this: not all of these sites are sponsored by goodguys. Some of them post malicious code that hackers use. Do not download or execute anything you donot fully understand.WatchGuard Frequently Asked Questionswww.watchguard.com (Click Support, Log into LiveSecurityService, click Knowledge Base, clickFAQs)www.cerias.purdue.edu/The Center for Education and Research in Information Assurance and Security (CERIAS) iscurrently viewed as one of the world’s largest centers for research and education in areas ofinformation security that are crucial to the protection of critical computing and communicationinfrastructure. CERIAS is unique among such national centers in its multidisciplinary approachto the problems, ranging from purely technical issues (e.g., intrusion detection, networksecurity, etc.) to ethical, legal, educational, communicational, linguistic, and economic issues,and the subtle interactions and dependencies among them.Reference Guide 77
Page 1 and 2:
WatchGuard ® System ManagerReferen
Page 3 and 4:
ContentsCHAPTER 1 Internet Protocol
Page 5 and 6:
CHAPTER 1Internet Protocol Referenc
Page 7 and 8:
Internet Protocol HeaderKeyword Num
Page 9 and 10:
Transfer ProtocolsSource RoutingThe
Page 11 and 12:
CHAPTER 2MIME Content TypesSoftware
Page 13 and 14:
Type Subtype Reference (where avail
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22:
Page 23 and 24:
CHAPTER 3Services and PortsWell-kno
Page 25 and 26:
Well-Known Services ListPort(s) Pro
Page 27 and 28:
Well-Known Services ListService Nam
Page 29 and 30: Well-Known Services ListService Nam
Page 31 and 32: CHAPTER 4Log MessagesUnderstanding
Page 33 and 34: Traffic LogsFWAllowEach packet filt
Page 35 and 36: Traffic Logsdst_ip="66.35.250.151"
Page 37 and 38: Traffic LogsDNS Proxy Traffic Log M
Page 39 and 40: Traffic LogsHTTP Proxy Traffic Log
Page 41 and 42: Alarm LogsPolicy AlarmsDefaultNameP
Page 43 and 44: Alarm LogsDenial of Servce (DoS) Al
Page 45 and 46: Event LogsGateway AntiVirus Service
Page 47 and 48: Event LogsDescription of Log Module
Page 49 and 50: Event LogsEvent Log Message Catalog
Page 59 and 60: Firebox Log File XML DTD and Schema
Page 61 and 62: Firebox® X Edge Log MessagesModule
Page 73 and 74: CHAPTER 5WebBlocker ContentWatchGua
Page 75 and 76: WebBlocker CategoriesCategoryDrugs,
Page 77 and 78: WebBlocker CategoriesCategoryJob Se
Page 79: CHAPTER 6ResourcesThere are many re
Page 83 and 84: White Hat Web Sitesbeginners. Cons:
Page 85 and 86: Other Web Sitesmaintains a list of
Page 87 and 88: RSS Feedswww.sophos.com/virusinfo/i
Page 89 and 90: IndexBblocked sites, searching for
show all

WSM Reference Guide - WatchGuard Technologies

Create successful ePaper yourself

Delete template?

Save as template?