WSM User Guide - WatchGuard Technologies

Setting Blocked SitesUsing an external list of blocked sitesYou can make a list of blocked sites in an external file. This file must be a .txt file. To add an external fileto your Blocked Sites list:1 In the Blocked Sites Configuration dialog box, select Import.2 Find the file. Double-click it, or select it and select Open.The sites in the file appear in the Blocked Sites list.Creating exceptions to the Blocked Sites listA host that is a blocked sites exception does not appear in the Blocked Sites list. The automatic rules donot apply for this host.1 From Policy Manager, select Setup > Intrusion Prevention > Blocked Sites.2 Click the Blocked Sites Exceptions tab. Click Add.3 Use the Choose Type drop-down list to select a member type. The selections are Host IP, NetworkIP, or Host Range.4 Type the member value.The member type shows if this is an IP address or a range of IP addresses. When you type an IP address, type all thenumbers and the period. Do not use the TAB or the arrow key.5 Select OK.Setting logging and notification parametersYou can configure the Firebox to make a log entry when a host tries to use a blocked site. You can alsoset up notification for when a host tries to get access to a blocked site.1 From the Blocked Sites dialog box, select Logging.The Logging and Notification dialog box appears.2 Set the parameters and notification to comply with your security policy:Enter it in the logWhen you enable this check box, the Firebox sends a log message when a packet is deniedbecause of your blocked port configuration. The default configuration of all services is for theFirebox to send a log message when it denies a packet.140 WatchGuard System Manager