WSM User Guide - WatchGuard Technologies

Packet Filter Policies• Port Number(s): TCP 37, UDP 37traceroutetraceroute is a software application that creates maps of networks. It is used for network troubleshooting,network route troubleshooting, and finding the Internet service provider of a site. The WatchGuardtraceroute policy controls UNIX-based, UDP-style traceroute only. For a DOS-based or Windows-basedtraceroute packet filter, use the ping policy (see “ping” on page 42).traceroute uses ICMP and UDP packets to create paths across networks. It uses the UDP TTL field to sendback packets from each router and computer between a source and a destination. If you allowtraceroute incoming to a network, this can enable a hacker to create a map of your private network. But,outgoing traceroute is good for troubleshooting.Characteristics• Internet Protocol(s): UDP• Port Number(s): 33401-65535UUCPUnix-to-Unix Copy (UUCP) is a Unix tool and protocol that enables one computer to send files to anothercomputer. This tool is not used frequently, as users more often use FTP, SMTP, and NNTP to transfer files.Characteristics• Internet Protocol(s): TCP• Port Number(s): 540WAISWide Area Information Services (WAIS) is a protocol you can use to find documents on the Internet.Thinking Machines Incorporated first developed WAIS. Some web sites use WAIS to look for searchableindices, but it is not used frequently.WAIS is created on the ANSI Z39.50 search protocol, and the words Z39.50 and WAIS refer to the sametechnology.Characteristics• Internet Protocol(s): TCP• Port Number(s): 210, but servers can be (and frequently are) configured on other ports, much likeHTTP serversWinFrameCitrix ICA is a protocol used by Citrix for its software applications, which includes the Winframe product.Winframe gives access to Windows from different types of clients. Citrix uses TCP port 1494 for its ICAprotocol. Citrix MPS 3.0 uses Session Reliability by default. This changes the ICA protocol to use TCP2598. If you use Citrix MPS, you must add a policy for TCP port 2598.396 WatchGuard System Manager