WSM User Guide - WatchGuard Technologies

Configuring the HTTP ProxyConfiguring proxy alarms for FTPAn alarm is a mechanism to tell a network administrator when network traffic matches criteria for suspicioustraffic or content. When an alarm event occurs, the Firebox does an action that you configure. Forexample, you can set a threshold value for file length. If the file is larger than the threshold value, theFirebox can send a log message to the Log Server.1 From the Categories section, select Proxy Alarm.2 For information on fields in the Proxy Alarm Configuration section, see “Using dialog boxes foralarms, log messages, and notification” on page 164.Configuring the HTTP ProxyThe HTTP proxy is a high performance content filter. It examines web traffic to identify suspicious contentwhich can be a virus, spyware, or other types of intrusion. It can also protect your web server fromattacks from the external network. You can configure the HTTP proxy to:• Allow only content that matches RFC requirements for web servers and clients• Select which types of MIME content the Firebox® allows into your network• Block Java, ActiveX, and other code types• Examine the HTTP header to make sure it is not from a known source of suspicious content1 Add the HTTP proxy to Policy Manager. To learn how to add policies to Policy Manager, see“AddingPolicies” on page 146.2 Select the Properties tab.3 In the Proxy drop-down list, select to configure the HTTP-Client or HTTP-Server proxy action. Usethe HTTP-Server proxy action (or an incoming proxy action you create based on the HTTP-Serverproxy action) to protect a web server. Use HTTP-Client, or an outgoing proxy action, to filter HTTPrequests from users behind the Firebox.4 Click the View/Edit Proxy icon.You can also clone a proxy action to create a new proxy action.Configuring settings for HTTP requestsYou can configure general settings for HTTP requests. You can also see and edit the HTTP requestrulesets included in a proxy action. To get access to these settings, click HTTP Request in the Categorieslist on the left of the proxy configuration.174 WatchGuard System Manager