WatchGuard Technologies WatchGuard Firebox SOHO 6 - Manual (Page 80)

Chapter 6: Configure the Firewall Settings
62 WatchGuard Firebox SOHO 6.1
Configure Incoming and Outgoing Services
By default, the security stance of the SOHO 6 is to deny incoming
packets to computers on the trusted network protected by the
SOHO 6 firewall. You can selectively open your network to certain
types of Internet connectivity. For example, to set up a Web server
behind the SOHO 6, you add an incoming Web service.
It is important to remember that each service you add opens a
small window into your trusted network and marginally reduces
your security. This is the inherent trade-off between access and
security.
Pre-configured Services
Each service is defined by a combination of Internet protocols and
port numbers to uniquely identify the connection type to
applications and servers on the Internet. The SOHO 6
configuration pages include several of the most common types.
Follow these steps to add an Incoming service:
1 From the navigation bar on the left side, select
Firewall => Incoming or Outgoing.
The Filter Traffic page appears.