Watchguard Firewall Policies

Front 1

Default Firewall Policies

Back 1

1

Front 2

What is a security zone?

Back 2

.

Front 3

What is a Alias?

Back 3

.An alias is a name that identified a group of interfaces, networks, hosts or users

Front 4

What is policy precedence?

Back 4

.

Front 5

What is DNS?

Back 5

.

Front 6

What is NAT?

Back 6

At its most basic level, NAT changes the IP address of a packet from one value to a different value

Front 7

What is a FQDN?

Back 7

.

Front 8

What is Static Routing?

Back 8

.

Front 9

What port does HTTP use?

Back 9

Port 80

Front 10

What port does HTTPS use?

Back 10

Port 443

Front 11

What port does FTP use?

Back 11

Port 21

Front 12

What port does SMTP use?

Back 12

Port 25

Front 13

What port does DNS use?

Back 13

Port 53

Front 14

What is a policy?

Back 14

A policy is a rule to control what traffic the Firebox allows or denies

Front 15

What are the two types of policies?

Back 15

Packet Filter and Proxy Policy or ALG's

Front 16

What is a Packet Filter?

Back 16

Examines the IP header of each packet at the network and transport protocol packet layers. If the packet header information is legitimate and the content of the packet header matches the criteria set in the policy, the Firebox allows the packet

Front 17

What is a Proxy Policy?

Back 17

Examines both the IP header information and the content of each packet at the application layer to make sure that both connections are secure.

Front 18

What is ALG?

Back 18

Application Layer Gateway, it performs the same functions as a Proxy Policy, but also provides transparent connection management

Front 19

What is a difference between Packet Filter and Proxy Policy?

Back 19

Only a Proxy Policy looks at the packet body, attachments, RFC compliance, and Commands

Front 20

What are the four interface types?

Back 20

1. Trusted

2. Optional

3. External

4. Custom

Front 21

What is a Trusted Interface?

Back 21

Connects to the trusted network you want to protect

Front 22

What is an Optional Interface?

Back 22

Connects to a network with mixed trust, typically a DMZ where you connect web servers or other externally-accessible network resources

Front 23

What is an External Interface?

Back 23

Connects to an external network, such as the Internet

Front 24

What is a Custom Interface?

Back 24

Connects to an internal network with a security zone that you define

Front 25

What are the Built-In Aliases? (6)

Back 25

1. Any-Trusted

2. Any-Optional

3. Any-External

4. Any-BOVPN

5. Firebox

6. Any

Front 26

What is an incoming connection?

Back 26

Connections originate from a less trusted security zone, such as external and send traffic to a more trusted security zone such as Trusted or Optional

Front 27

What is an outgoing connection?

Back 27

Connections originate from a more trusted security zone, such as Trusted and send traffic to a less trusted security zone?

Front 28

What are the five default policies?

Back 28

1. FTP

2. WatchGuard Web UI

3. Ping

4. Watchguard

5. Outgoing

Front 29

Do the default policies allow incoming connections?

Back 29

No

Front 30

What additional policies are added if you use RapidDeploy Quickstart?

Back 30

1. HTTP-Proxy

2. HTTPS-Proxy

Front 31

If you remove the default Outgoing policy, which policies will you need to add to browse the web?

Back 31

1. HTTP port 80

2. HTTPS port 443

3. DNS port 53

Front 32

What two default policies control management connections to the Firebox?

Back 32

1. WatchGuard Web UI - Web

2. WatchGuard - WSM

Front 33

By default the policies Watchguard Web UI and Watchguard allow connections from what networks?

Back 33

Trusted and Optional

Front 34

Policy Precendence

Back 34

1. The higher the policy appears on the list, the higher its precedence

2. If two policies can apply to a connection, the higher policy controls the connection

3. By default, Policy Manager orders policies from most to least specific

Front 35

What are the primary purposes of NAT?

Back 35

1. Increase the number of computers that can operate off a single publicly routable IP address

2. Hide the private IP address of hosts on your LAN

Front 36

What three types of NAT does Fireware OS Support?

Back 36

1. Dynamic NAT - Applies to outbound traffic

2. Static NAT - Applies to inbound traffic

3. 1-to-1 NAT - Applies to both directions of traffic

Front 37

Which Proxy Action do you use for an FTP policy that applies to traffic from Any-Trusted to Any-External?

A. FTP-Client

B. FTP-Server

Back 37

A. FTP-Client

Front 38

If the detail level in two policies are equal, which policy takes precedence? Proxy or Packet filter?

Back 38

Proxy policy