WSM User Guide - WatchGuard Technologies

Packet Filter PoliciesIf you are not using dynamic NAT, allow IDENT to the IP address of your e-mail server.We recommend that IDENT policies be allowed to and from the Firebox, but know that hackers can useIDENT to collect user names.Characteristics• Internet Protocol(s): TCP• Port Number(s): 113IGMPThe Internet Group Management Protocol (IGMP) is the standard for IP multicasting on the Internet. It isused to control host memberships in multicast groups on a single network.Characteristics• Internet Protocol(s): IGMPIKEThe Internet Key Exchange Protocol is a standard protocol for key management.Characteristics• Internet Protocol(s): UDP• Port Number(s): 4500 and 500. UDP 4500 is used only for NAT traversal.IMAPInternet Mail Access Protocol (IMAP) is an application layer protocol for getting e-mail or bulletin boardmessages on a remote e-mail server as if the messages were local. You can get access to e-mail storedon an IMAP server from many locations (such as home, work, or laptop) without moving messages.Characteristics• Internet Protocol(s): TCP• Port Number(s): 143IPSecInternet Protocol Security (IPSec) is a framework for a set of protocols for security at the network orpacket layer of network communications. It is a VPN tunneling protocol with encryption.Characteristics• Internet Protocol(s): UDP, encapsulated security payload (ESP), and authentication header (AH)• Port Number(s): UDP 500 and UDP 4500User Guide 385