Read WatchGuard System Manager Reference Guide text version WatchGuard System Manager Reference Guide ® WatchGuard System Manager v9.0 Notice to Users Information in this guide is subject to change without notice. Companies, names, and data used in examples herein are fictitious unless otherwise noted. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of WatchGuard Technologies, Inc. Copyright, Trademark, and Patent Information Copyright© 1998 - 2007 WatchGuard Technologies, Inc. All rights reserved.

• Exchange System Manager
• Windows System Manager

Latest Dimension Software. Released Use this link to get Dimension -- a cloud-ready logging, reporting, and. If you use WatchGuard System Manager. WatchGuard System Manager 11.9. WSM is the classic Windows-based, rich management environment from WatchGuard. 4.3 (4 votes) 1. 11.12.4 WatchGuard Technologies.

Complete copyright, trademark, patent, and licensing information can be found in the WatchGuard System Manager User Guide. A copy of this book is automatically installed into a subfolder of the installation directory called Documentation. You can also find it online at: All trademarks or trade names mentioned herein, if any, are the property of their respective owners. Software Version: WSM 9.0 Document Version: Reference-9.0-352-2833-001 ADDRESS: 505 Fifth Avenue South Suite 500 Seattle, WA 98104 ABOUT WATCHGUARD WatchGuard is a leading provider of network security solutions for small- to midsized enterprises worldwide, delivering integrated products and services that are robust as well as easy to buy, deploy and manage. The company's Firebox X family of expandable integrated security appliances is designed to be fully upgradeable as an SUPPORT: organization grows and to deliver the industry's best combination of security, www.watchguard.com/support performance, intuitive interface and value. WatchGuard Intelligent Layered Security U.S.

And Canada +877.232.3531 architecture protects against emerging threats effectively and efficiently and provides All Other Countries +1.206.613.0456 the flexibility to integrate additional security functionality and services offered through WatchGuard. Every WatchGuard product comes with an initial LiveSecurity SALES: U.S. And Canada +1.800.734.9905 Service subscription to help customers stay on top of the security landscape with All Other Countries +1.206.521.8340 vulnerability alerts, software updates, expert security instruction and superior customer care.

For more information, please call (206) 521-8340 or visit www.watchguard.com. Ii WatchGuard System Manager Contents CHAPTER 1 Internet Protocol Reference. 1 Internet Protocol Header. 1 IP header number list. 2 Internet Protocol Options. 4 Transfer Protocols. 5 UDP.

5 TCP. 6 ICMP.

6 Other protocols. 6 Standard Ports and Random Ports. 6 CHAPTER 2 MIME Content Types. 7 CHAPTER 3 Services and Ports. 19 Ports Used by WatchGuard Products. 19 Ports Used by Microsoft Products.

20 Well-Known Services List. 21 CHAPTER 4 Log Messages. 27 Introduction to Logging.27 Traffic Logs. 28 Packet Filter Logs. 28 Proxy Logs. 30 Alarm Logs. 36 Event Logs.

41 Event Log Messages. 43 Firebox Log File XML DTD and Schema. 55 Firebox® X Edge Log Messages. 56 Searching for Blocked Sites. 69 CHAPTER 5 WebBlocker Content Reference Guide iii WebBlocker Categories.

69 CHAPTER 6 Resources. 75 Publishers. 75 Books. 76 Non-Fiction. 76 Fiction. 76 White Papers & Requests for Comments. 76 Mailing Lists.

77 General IT and Security Web Sites. 77 White Hat Web Sites.

79 Grey Hat Sites. 80 Other Web Sites. 81 Dictionaries of Computer Terminology. 82 RSS Feeds.

82 Security Feeds. 82 IT Related Feeds. 83 Fun Feeds. 83 iv WatchGuard System Manager CHAPTER 1 Internet Protocol Reference Internet Protocol (IP) sets the format of packets and the address pattern for sending data through the Internet. It operates as a postal system, and allows you to address a package and drop it into the system. But, there is no direct link between you and the recipient. In other words, there is no package.

Exchange System Manager

Most networks mix IP with higher level protocols such as Transmission Control Protocol (TCP). TCP/IP makes a connection between two host servers.

Windows System Manager

Then, they can send messages to each other. TCP/IP supplies the 'packaging.'

Internet Protocol Header Internet Protocol (IP) is an Internet standard that enables the sending of datagrams - packets of information that include an address and instructions on how to send the datagram to its destination. IP prepends a header to each datagram. The IP header contains a minimum of 12 properties, and other optional properties. Property Version IHL TOS TotLen ID Flags FragOff TTL Protocol Size 4 bits 4 bits 8 bits 16 bits 16 bits 3 bits 13 bits 8 bits 8 bits Description IP format number (Current version = 4) Header length in 32-bit words (Minimum = 5) Type of service sets routing priorities. It is usually not used because not many application layers can set it. Total length of packet measured in octets. It is used to assemble fragments.

Packet ID, used to assemble fragments. Miscellaneous flags Identifies fragment part for this packet. Time to live.

It sets the maximum time the datagram remains alive in the system. IP protocol number. Indicates which of TCP, UDP, ICMP, IGMP, or other Transport protocol is inside.

Reference Guide 1 Internet Protocol Header Property Check SourAddr DestAddr Options Size 16 bits 32 bits 32 bits 24 bits Description Checksum for the IP header Source IP address Destination IP address IP Options (Present if IHL is 6) IP header number list The IP Protocol header contains an 8-bit field that identifies the protocol for the transport layer for the datagram.