Packet Filter Policies
48
WatchGuard System Manager
MS-Win-Media
Microsoft Windows Media Server is a proprietary protocol developed by Microsoft to supply unicast
streams. It enables bidirectional connections that enable users to go forward, go back, or pause the
playback of unicast
streams.
Characteristics
•
Internet Protocol(s): TCP
•
Port Number(s): 80, 1755
NetMeeting
NetMeeting is a product developed by Microsoft Corporation that enables groups to teleconference
across the Internet. It is included with Microsoft’s Internet Explorer web browser. This policy is based on
the H.323 protocol and does not filter for dangerous content. It does not support QoS or RSVP protocol,
and it does not support NAT.
Characteristics
•
Internet Protocol(s): TCP
•
Port Number(s): 389, 1720
NFS
The Network File System (NFS) protocol is a client server software application created by Sun
Microsystems to allow all network users to get access to shared files kept on computers of different
types.
Characteristics
•
Internet Protocol(s): TCP, UDP
•
Port Number(s): TCP 2049, UDP 2049
NNTP
Network News Transfer Protocol (NNTP) is used to transmit Usenet news articles.
The best procedure to use NNTP is to set internal hosts to internal news servers and external hosts to
news feeds. In most conditions, NNTP must be enabled in two directions. If you operate a public
newsfeed, you must allow NNTP connections from all external hosts. WatchGuard cannot make sure
that these packets were sent from the correct location.
You can configure the Firebox to add the source IP address to the Blocked Sites list when an incoming
NNTP connection is denied. All of the usual log options can be used with NNTP.
Characteristics
•
Internet Protocol(s): TCP
•
Port Number(s): 119
