WSM User Guide - WatchGuard Technologies

Blocking PortsAvoiding problems with blocked portsYou can have a problem because of blocked ports. You must be very careful if you block port numbershigher than 1023. Clients frequently use these source port numbers.Blocking a port permanently1 From Policy Manager, select Setup > Intrusion Prevention > Blocked Ports.The Blocked Ports dialog box appears.2 Type the port number. Click Add.The new port number appears in the Blocked Ports list.Automatically blocking IP addresses that try to use blocked portsYou can configure the Firebox to automatically block an external host that tries to get access to ablocked port. In the Blocked Ports dialog box, select the Automatically block sites that try to useblocked ports check box.Setting logging and notification for blocked portsYou can configure the Firebox to make a log entry when a host tries to use a blocked port. You can alsoset up notification or set the Firebox to send an SNMP trap to an SNMP management server when a hosttries to get access to a blocked port.To set logging and notification parameters for blocked ports, use the same procedure as the one forblocked sites, as described in “Setting logging and notification parameters” on page 140.User Guide 143