WatchGuard Firebox System 4.6 User Guide

Blocking sites temporarily with service settingsRemoving a blocked portFrom the Blocked Ports dialog box, click a port number in the Blocked Ports list.Click Remove.Logging and notification for blocked portsFrom the Blocked Ports dialog box:1 Click Logging.The Logging and Notification dialog box appears.2 In the Category list, click Blocked Ports.3 Modify the logging and notification parameters according to your security policypreferences.For detailed instructions, see “Customizing logging and notification by service or option” onpage 76.Blocking sites temporarily with service settingsUse service properties to automatically and temporarily block sites when incomingtraffic attempts to use a denied service. You can use this feature to individually log,block, and monitor sites that attempt access to restricted ports on your network.Configuring a service to temporarily block sitesConfigure the service to automatically block sites that attempt to connect using adenied service. From Policy Manager:1 Double-click the service icon in the Services Arena.The Properties dialog box appears.2 Use the Incoming Service Connections Are drop list to select Enabled andDenied.3 Enable the Auto-Block Sites that Attempt to Connect Via checkbox.To change the auto-block duration, see “Changing the auto-block duration” on page 44.Viewing the Blocked Sites listUse Firebox Monitors to view sites that are automatically blocked according to aservice’s property configuration. From the Control Center:1 On the QuickGuide, click the Firebox Monitors icon.2 Click the Blocked Site List tab. (You might need to use the arrows to access thistab.)The Blocked Sites list appears.46