2
1068452504
0
11.0
2
0
0
0.0.0.0
389
2
0
1
1
0.pool.ntp.org
1.pool.ntp.org
2.pool.ntp.org
1
1
5000
2
1
1000
3
1
1000
4
1
1000
5
1
1000
6
1
1000
7
1
1500
8
1
1000
9
1
100
10
1
100
11
0
10
12
1
10
13
1
10
0
1
1
1
1
1
1
2
1300
1
1
6
1
0
1
0
0
0.0.0.0
0
0
1
16
8
3
18
8
2
17
8
5
19
8
6
20
8
0
1
4115
1
1
2
1
3
1
4
1
5
1
6
1
7
1
8
1
9
1
10
1
11
1
12
1
13
1
14
1
15
1
16
1
17
1
18
1
19
1
20
1
21
1
22
1
23
1
24
1
25
1
26
1
27
1
28
1
29
1
30
1
31
1
32
1
33
1
34
1
35
1
0
0
0
0
4112
0.0.0.0
60
0
0
0
PPTP-Users
1400
1400
0
0
0
0
0
0
External
15
3
3
0
0
600
X10e
system contact
system location
19
Head_Office
7200
0
900
36000
7200
0
1
0
1
0
0
1200
1
1
0
0
0
7
0
0
0
0
1
1
0
Preferred
1
111
513
514
2049
6000
6001
6002
6003
6004
6005
7100
8000
1
0
Blocked Ports
1
0
0
https://services.watchguard.com/DeviceServices/DeviceServices.asmx/RetrieveFeatureKeyAsXml?sn=%s&pv=1&fv=%s&mv=optional&mt=5
http://contentmirror.watchguard.com/WGRDWeb/rss/WSMAlerts.xml
1
Any
Any network address
4
2
0.0.0.0
0.0.0.0
Firebox
Firebox internal address
4
1
0.0.0.0
PPTP-Users_pool
Created by Policy Manager
0
dnat.from.1
16
2
192.168.0.0
255.255.0.0
dnat.from.2
Any network address
16
2
172.16.0.0
255.240.0.0
dnat.from.3
Any network address
16
2
10.0.0.0
255.0.0.0
tunnel.1.tlc
16
2
192.168.222.0
255.255.255.0
tunnel.1.trm
16
2
192.168.111.0
255.255.255.0
Any
Any service
4
1
0
0
300
Archie
An FTP database retrieval service
2
1
17
1525
0
Auth
A protocol used to map a certain TCP connection to a username
2
1
6
113
0
BGP
Border Gateway Protocol
2
1
6
179
0
Citrix
Citrix ICA protocol
2
1
6
1494
0
Clarent-Command
Clarent IP telephony protocol
2
1
17
5002
1
17
5001
0
Clarent-Gateway
Clarent IP telephony protocol
2
1
17
5010
1
17
4045
1
17
4040
0
CU-SeeMe
CU-SeeMe Videoconferencing Program
2
1
17
24032
1
6
7648
1
17
7648
0
DHCP-Client
Bootstrap Protocol - Client
2
1
17
68
0
DHCP-Server
Bootstrap Protocol - Server
2
1
17
67
0
DNS
Domain Name Services
2
1
6
53
1
17
53
0
DNS-proxy
Domain Name Services
2
DNS
1
6
53
1
17
53
0
Entrust
Entrust Administration and Key Management Services
2
1
6
709
1
6
710
0
Finger
Finger Service
2
1
6
79
0
FTP
File Transfer Protocol
2
1
6
21
0
FTP-proxy
File Transfer Protocol
2
FTP
1
6
21
0
Gopher
Gopher Search Service
2
1
6
70
0
GRE
Generic Routing Encapsulation Protocol
2
1
47
0
0
HBCI
Home Banking Computer Interface
2
1
6
3000
0
HTTP
Hypertext Transfer Protocol
2
1
6
80
0
HTTP-proxy
Hypertext Transfer Protocol
2
HTTP
1
6
80
0
HTTPS
Secure HTTP
2
1
6
443
0
IDENT
Identification (ident) Protocol
2
1
6
113
0
IGMP
Internet Group Management Protocol
2
1
2
0
0
IKE
Internet Key Exchange Protocol
2
1
17
500
1
17
4500
900
IMAP
Internet Message Access Protocol version 4
2
1
6
143
0
Intel-Video-Phone
An H.323 Application
2
1
6
1720
1
6
522
0
IPSec
IPSec is a VPN tunnelling protocol with encryption
2
1
17
4500
1
50
0
1
51
0
1
17
500
0
IRC
Internet Relay Chat
2
1
6
6667
0
Kerberos-V4
Network Authentication Protocol v.4
2
1
17
750
0
Kerberos-V5
Network Authentication Protocol v.5
2
1
6
88
1
17
88
0
LDAP
Lightweight Directory Access Protocol
2
1
6
389
0
LDAP-SSL
Lightweight Directory Access Protocol over TLS/SSL
2
1
6
636
0
Lotus-Notes
IBM Lotus Notes
2
1
6
1352
1
17
1352
0
L2TP
Layer 2 Tunneling Protocol
2
1
17
1701
0
MS-SQL-Monitor
Microsoft SQL Administrator tool
2
1
6
1434
1
17
1434
0
MS-SQL-Server
Microsoft SQL Server
2
1
6
1433
1
17
1433
0
MS-Win-Media
MS-Streaming
2
1
6
1755
1
6
80
0
NetMeeting
Microsoft Netmeeting
2
1
6
1720
1
6
389
0
NFS
Network File System Protocol
2
1
6
2049
1
17
2049
0
NNTP
Network News Transfer Protocol
2
1
6
119
0
NTP
Network Time Protocol
2
1
6
123
1
17
123
0
OSPF
Open Shortest Path First - Interior Gateway Routing Protocol
2
1
89
0
0
pcAnywhere
Symantec Remote Control
2
1
6
5631
1
17
5632
1
6
65301
1
17
22
0
Ping
ICMP Message - Echo Request and Echo Reply
2
1
1
8
255
0
POP2
Post Office Protocol V2
2
1
6
109
0
POP3
Post Office Protocol V3
2
1
6
110
0
POP3-proxy
Post Office Protocol V3
2
POP3
1
6
110
0
PPTP
Point-to-Point Tunneling Protocol
2
1
6
1723
1
47
0
0
RADIUS
Remote Authentication Dial-In User Services
2
1
17
1645
0
RADIUS-Accounting
Remote Authentication Dial-In User Accounting Services
2
1
17
1646
0
RADIUS-RFC
RFC Remote Authentication Dial-In User Services
2
1
17
1812
0
RADIUS-Acct-RFC
RFC Remote Authentication Dial-In User Accounting Services
2
1
17
1813
0
RealPlayerG2
RealPlayer G2, v7, v8 Media Streaming Protocol
2
1
6
554
1
6
80
0
RDP
Remote Desktop Protocol
2
1
6
3389
0
Rlogin
Remote Login
2
1
6
513
0
RIP
Routing Information Protocol
2
1
17
520
0
RSH
Remote Shell (rsh)
2
1
6
514
0
SecurID
RSA SecurID two-factor authentication
2
1
6
5510
1
17
5500
0
SMB
Server Message Block Protocol
2
1
6
445
1
17
445
2
17
137
138
1
6
139
0
SMTP
Simple Mail Transfer Protocol
2
1
6
25
0
SMTP-proxy
Simple Mail Transfer Protocol
2
SMTP
1
6
25
0
SNMP
Simple Network Management Protocol
2
1
17
161
0
SNMP-Trap
Simple Network Management Protocol-Trap
2
1
17
162
0
SQL*Net
Oracle SQL*Net
2
1
6
1521
1
6
1526
0
SQL-Server
a Access to Sybase Central and SQL Advantage software
2
1
6
10000
0
SSH
Secure Shell (Secure Remote Login Protocol)
2
1
6
22
0
SSL-VPN
Built-in policy template for SSL VPN.
2
1
6
443
0
SunRPC
Sun Remote Procedure Call
2
1
6
111
1
17
111
0
Syslog
System Logging Utilities
2
1
17
514
0
TACACS
Terminal Access Controller Access Control System
2
1
17
49
0
TACACS+
Terminal Access Controller Access Control System
2
1
6
49
0
TCP
TCP Protocol
2
1
6
0
43205
TCP-UDP-proxy
TCP/UDP Protocol
2
TCP-UDP
1
6
0
1
17
0
0
TCP-UDP
TCP Protocol
2
1
6
0
1
17
0
0
Telnet
Remote Login
2
1
6
23
0
Time
Time Server
2
1
6
37
1
17
37
0
Timbuktu
Remote Control and File Transfer Software
2
1
6
1417
1
17
407
0
Traceroute
Traceroute Service
2
2
17
33401
65535
0
UDP
Any Udp Service
2
1
17
0
15
UUCP
Unix-to-Unix Copy Program
2
1
6
540
0
WAIS
Wide Area Information Service
2
1
6
210
0
WG-Firebox-Mgmt
WatchGuard Configuration and Monitoring
2
1
6
4105
1
6
4117
1
6
4118
0
WG-Fireware-XTM-WebUI
WatchGuard Configuration and Monitoring using Fireware XTM Web UI
2
1
6
8080
0
WG-Auth
WatchGuard Authentication Service
2
1
6
4100
0
WG-Mgmt-Server
WatchGuard Management Server
2
1
6
4110
2
6
4112
4113
0
WG-Logging
WatchGuard Logging
2
1
6
4107
1
6
4115
0
WG-SmallOffice-Mgmt
Secure Access to Soho boxes via a Web Browser
2
1
6
4109
0
WG-WebBlocker
WebBlocker Server
2
1
6
5003
1
17
5003
0
WHOIS
whois
2
1
6
43
0
WinFrame
Citrix ICA
2
1
6
1494
0
X11
X Windows System Protocol
2
2
6
6000
6063
0
TFTP
Trivial File Transfer Protocol
2
1
17
69
0
H323-ALG
H323 protocol
2
H323
1
17
1719
1
6
1720
0
SIP-ALG
Session Initiation Protocol
2
SIP
1
17
5060
1
6
5060
0
HTTPS-proxy
HTTP over SSL
2
HTTPS
1
6
443
0
Dynamic-NAT
Network Address Translation
4
3
0
0
ESP-AES-SHA1
2
0
1
12
2
1
8
128000
0
32
ESP-AES-MD5
2
0
1
12
1
1
8
128000
0
32
ESP-3DES-SHA1
2
0
1
3
2
1
8
128000
0
0
ESP-3DES-MD5
2
0
1
3
1
1
8
128000
0
0
ESP-DES-SHA1
2
0
1
2
2
1
8
128000
0
0
ESP-DES-MD5
2
0
1
2
1
1
8
128000
0
0
phase2_proposal.1
0
0
1
12
2
1
12
0
0
32
tunnel.1
Created by Policy Manager
0
1
2
1
0
1
1
tunnel.1.tlc
tunnel.1.trm
0
gateway.1
1
2
ESP-AES-SHA1
gateway.1_bo
Created by Policy Manager
0
4
0
20
4500
4500
0
0
1
1
2
5
2
1
8
0
gateway.1
0
Any
gateway.1_bo
30
5
1
5
20
1
1
8
BranchOffice1@imn
0
0
+AF310335D96DE307D3C46C8268E8A457ABD0E08232BD4882
0
1
1.1.100.1
External
gateway.1
Created by Policy Manager
0
gateway.1
Always On
0
4
1
0
1
0
0
24
0
MF 0700-1900
Monday through Friday 7AM to 7PM
2
4
1
1
1
7
0
19
0
2
1
7
0
19
0
3
1
7
0
19
0
4
1
7
0
19
0
5
1
7
0
19
0
Allow-IKE-to-Firebox
32
IKE
1
1
Any
Firebox
0
0
0
0
0
1
0
0
0
1
0
0
0
0
Any From Firebox-00
Policy added on 10/03/03 14:59.
32
Any
1
1
Any From Firebox.1.from
Any From Firebox.1.to
0
0
0
Always On
0
0
1
0
0
0
1
1
0
0
0
FTP-00
Policy added on 10/03/03 14:59.
0
FTP
1
1
FTP.1.from
FTP.1.to
0
0
0
Always On
0
0
1
0
0
0
1
1
0
1
1
WatchGuard Web UI-00
Policy added on 10/03/03 14:59.
0
WG-Fireware-XTM-WebUI
1
1
WatchGuard Web UI.1.from
WatchGuard Web UI.1.to
0
0
0
Always On
0
0
1
0
0
0
1
1
0
1
1
Ping-00
Policy added on 10/03/03 14:59.
0
Ping
1
1
Ping.1.from
Ping.1.to
0
0
0
Always On
0
0
1
0
0
0
1
1
0
1
1
WatchGuard-00
Policy added on 10/03/03 14:59.
0
WG-Firebox-Mgmt
1
1
WatchGuard.1.from
WatchGuard.1.to
0
0
0
Always On
0
0
1
0
0
0
1
1
0
1
1
Outgoing-00
Policy added on 10/03/03 14:59.
0
TCP-UDP
1
1
Outgoing.1.from
Outgoing.1.to
0
0
0
Always On
0
0
1
0
0
0
1
1
0
1
1
BOVPN-Allow.out-00
Policy added on 10/03/15 11:10.
0
Any
1
1
BOVPN-Allow.out.1.from
BOVPN-Allow.out.1.to
0
0
0
Always On
0
0
1
0
0
0
1
1
0
1
1
BOVPN-Allow.in-00
Policy added on 10/03/15 11:10.
0
Any
1
1
BOVPN-Allow.in.1.from
BOVPN-Allow.in.1.to
0
0
0
Always On
0
0
1
0
0
0
1
1
0
1
1
Unhandled Internal Packet-00
Policy added on 10/03/03 14:59.
32
Any
2
1
Unhandled Internal Packet.1.from
Unhandled Internal Packet.1.to
0
0
0
Always On
0
1
1
0
0
0
1
1
0
1
1
Unhandled External Packet-00
Policy added on 10/03/03 14:59.
32
Any
2
1
Unhandled External Packet.1.from
Unhandled External Packet.1.to
0
0
0
Always On
0
1
1
0
0
0
1
1
0
1
1
PPTP-Users
2
1
Firebox-DB
0.0.0.0
720
PPTP-Users_pool
15
1
0.0.0.0
Primary
0.0.0.0
1645
Backup
0.0.0.0
1645
HTTP-Client
Default configuration for HTTP client
4
1
client
false
false
client
true
true
Content-type: text/html; charset="iso-8859-1"%CRLF%%CRLF%<html>%CRLF%<body>%CRLF%<h3> %(transaction)% denied by WatchGuard HTTP proxy. </h3>%CRLF%<b> Reason: </b> %(reason)% <br>%CRLF%<hr size="1" noshade>%CRLF%<b> Method: </b> %(method)% <br>%CRLF%<b> Host: </b> %(url-host)% <br>%CRLF%<b> Path: </b> %(url-path)% <br>%CRLF%<hr size="1" noshade>%CRLF%</body>%CRLF%</html>%CRLF%
*.windowsupdate.com
*.windowsupdate.com
false
*update.microsoft.com
*update.microsoft.com
false
false
600
true
false
256
false
false
HTTP/0.9
false
HTTP/1.0
HTTP/1.0
false
HTTP/1.1
HTTP/1.1
false
RTSP/1.0
RTSP/1.0
true
true
0
4
true
2
HEAD
HEAD
false
GET
GET
false
POST
POST
false
OPTIONS
OPTIONS
false
PUT
PUT
false
DELETE
DELETE
false
COPY
COPY
false
LOCK
LOCK
false
MKCOL
MKCOL
false
MOVE
MOVE
false
PROPFIND
PROPFIND
false
PROPPATCH
PROPPATCH
false
UNLOCK
UNLOCK
false
BCOPY
BCOPY
false
BDELETE
BDELETE
false
BMOVE
BMOVE
false
BPROPFIND
BPROPFIND
false
BPROPPATCH
BPROPPATCH
false
NOTIFY
NOTIFY
false
POLL
POLL
false
SEARCH
SEARCH
false
SUBSCRIBE
SUBSCRIBE
false
UNSUBSCRIBE
UNSUBSCRIBE
false
CCM_POST
CCM_POST
false
MKACTIVITY
MKACTIVITY
false
CHECKOUT
CHECKOUT
false
MERGE
MERGE
false
REPORT
REPORT
false
CHECKIN
CHECKIN
false
UNCHECKOUT
UNCHECKOUT
false
UPDATE
UPDATE
false
LABEL
LABEL
false
VERSION-CONTROL
VERSION-CONTROL
false
BASELINE_CONTROL
BASELINE_CONTROL
false
MKWORKSPACE
MKWORKSPACE
false
true
0
2048
true
false
0
0
true
16384
true
From:*
From:*
false
Via:*
Via:*
false
false
Referer:*
Referer:*
false
false
0
Basic
Basic
false
Digest
Digest
false
NTLM
NTLM
false
Passport1.4
Passport1.4
false
true
0
600
true
0
true
4096
true
Accept-Ranges:*
Accept-Ranges:*
false
Age:*
Age:*
false
Allow:*
Allow:*
false
Alternates:*
Alternates:*
false
AuthData:*
AuthData:*
false
Authentication-Info:*
Authentication-Info:*
false
Authorization:*
Authorization:*
false
Cache-Control:*
Cache-Control:*
false
Connection:*
Connection:*
false
Content-Base:*
Content-Base:*
false
Content-Disposition:*
Content-Disposition:*
false
Content-Encoding:*
Content-Encoding:*
false
Content-Language:*
Content-Language:*
false
Content-Length:*
Content-Length:*
false
Content-Location:*
Content-Location:*
false
Content-MD5:*
Content-MD5:*
false
Content-Range:*
Content-Range:*
false
Content-Type:*
Content-Type:*
false
Content-Version:*
Content-Version:*
false
Date:*
Date:*
false
Derived-From:*
Derived-From:*
false
ETag:*
ETag:*
false
Expires:*
Expires:*
false
Keep-Alive:*
Keep-Alive:*
false
Last-Modified:*
Last-Modified:*
false
Link:*
Link:*
false
Location:*
Location:*
false
MIME-Version:*
MIME-Version:*
false
P3P:*
P3P:*
false
Pragma:*
Pragma:*
false
Proxy-Authenticate:*
Proxy-Authenticate:*
false
Proxy-Connection:*
Proxy-Connection:*
false
Public:*
Public:*
false
Range:*
Range:*
false
Refresh:*
Refresh:*
false
Retry-After:*
Retry-After:*
false
Server:*
Server:*
false
Set-Cookie:*
Set-Cookie:*
false
Set-Cookie2:*
Set-Cookie2:*
false
Trailer:*
Trailer:*
false
Transfer-Encoding:*
Transfer-Encoding:*
false
Upgrade:*
Upgrade:*
false
URI:*
URI:*
false
Vary:*
Vary:*
false
Via:*
Via:*
false
Warning:*
Warning:*
false
WWW-Authenticate:*
WWW-Authenticate:*
false
X-Dig-XMLPipe-Status:*
X-Dig-XMLPipe-Status:*
false
X-Pad:*
X-Pad:*
false
X-Powered-By:*
X-Powered-By:*
false
x-server-ip-address:*
x-server-ips-address:*
false
icy-*
icy-*
false
true
0
chunked
chunked
false
text
text
false
identity
identity
false
true
0
text/*
text/*
false
image/*
image/*
false
audio/*
audio/*
false
application/pdf
application/pdf
false
application/x-javascript
application/x-javascript
false
application/x-shockwave-flash
application/x-shockwave-flash
false
application/*xml*
application/*xml*
false
application/x-httpd-*
application/x-httpd-*
false
httpd/*
httpd/*
false
application/x-rtsp-tunnelled
application/x-rtsp-tunnelled
false
application/*
application/*
false
false
(none)
false
true
0
false
0
Java bytecode
%0xcafebabe%*
true
ZIP archive
%0x504b0304%*
true
Windows EXE/DLL
%0x4d5a90000300000004000000ffff0000%*
true
Windows CAB archive
%0x4d53434600000000%*
true
false
0
false
true
true
256000
102400
false
0.0.0.0
0
HTTP-Server
Default configuration for HTTP server
4
1
server
false
false
server
true
false
Content-type: text/html; charset="iso-8859-1"%CRLF%%CRLF%<html>%CRLF%<body>%CRLF%<h3> %(transaction)% denied by WatchGuard HTTP proxy. </h3>%CRLF%<b> Reason: </b> %(reason)% <br>%CRLF%<hr size="1" noshade>%CRLF%<b> Method: </b> %(method)% <br>%CRLF%<b> Host: </b> %(url-host)% <br>%CRLF%<b> Path: </b> %(url-path)% <br>%CRLF%<hr size="1" noshade>%CRLF%</body>%CRLF%</html>%CRLF%
false
600
true
false
256
false
false
HTTP/0.9
false
HTTP/1.0
HTTP/1.0
false
HTTP/1.1
HTTP/1.1
false
true
0
4
true
2
HEAD
HEAD
false
GET
GET
false
POST
POST
false
false
OPTIONS
OPTIONS
false
false
PUT
PUT
false
false
DELETE
DELETE
false
COPY
COPY
false
LOCK
LOCK
false
MKCOL
MKCOL
false
MOVE
MOVE
false
PROPFIND
PROPFIND
false
PROPPATCH
PROPPATCH
false
UNLOCK
UNLOCK
false
BCOPY
BCOPY
false
BDELETE
BDELETE
false
BMOVE
BMOVE
false
BPROPFIND
BPROPFIND
false
BPROPPATCH
BPROPPATCH
false
NOTIFY
NOTIFY
false
POLL
POLL
false
SEARCH
SEARCH
false
SUBSCRIBE
SUBSCRIBE
false
UNSUBSCRIBE
UNSUBSCRIBE
false
CCM_POST
CCM_POST
false
MKACTIVITY
MKACTIVITY
false
CHECKOUT
CHECKOUT
false
MERGE
MERGE
false
REPORT
REPORT
false
CHECKIN
CHECKIN
false
UNCHECKOUT
UNCHECKOUT
false
UPDATE
UPDATE
false
LABEL
LABEL
false
VERSION-CONTROL
VERSION-CONTROL
false
BASELINE_CONTROL
BASELINE_CONTROL
false
MKWORKSPACE
MKWORKSPACE
false
true
0
2048
true
false
0
0
true
16384
true
false
0
Basic
Basic
false
Digest
Digest
false
NTLM
NTLM
false
Passport1.4
Passport1.4
false
true
0
600
true
0
true
0
true
false
0
chunked
chunked
false
text
text
false
identity
identity
false
true
0
true
0
false
0
false
0
false
true
true
256000
102400
SMTP-Incoming
Default configuration for incoming SMTP
4
2
incoming
false
false
600
false
server
true
false
true
false
Non-allowed characters
[^-.0-9a-zA-Z_\[\]]
true
Maximum length
^.{513,}$
true
false
true
DIGEST-MD5
DIGEST-MD5
false
CRAM-MD5
CRAM-MD5
false
PLAIN
PLAIN
false
LOGIN
LOGIN
false
LOGIN (old-style)
=LOGIN
false
NTLM
NTLM
false
GSSAPI
GSSAPI
false
true
false
false
true
true
false
Source-routed addresses
[!%]
true
Non-allowed characters
[^-_.+=%*/~!&@?0-9a-zA-Z]
true
*
*
false
true
Source-routed addresses
*!*@*
true
Non-allowed characters
[^-_.+=%*/~!&@?0-9a-zA-Z]
true
*
*
false
true
99
0
From:*
From:*
false
To:*
To:*
false
Cc:*
Cc:*
false
Bcc:*
Bcc:*
false
Resent-To:*
Resent-To:*
false
Received:*
Received:*
false
Resent-Cc:*
Resent-Cc:*
false
Resent-Bcc:*
Resent-Bcc:*
false
Resent-Message-ID:*
Resent-Message-ID:*
false
Resent-Reply-To:*
Resent-Reply-To:*
false
Resent-From:*
Resent-From:*
false
Resent-Date:*
Resent-Date:*
false
Message-ID:*
Message-ID:*
false
In-Reply-To:*
In-Reply-To:*
false
References:*
References:*
false
Keywords:*
Keywords:*
false
Subject:*
Subject:*
false
Comments:*
Comments:*
false
Encrypted:*
Encrypted:*
false
Date:*
Date:*
false
Reply-To:*
Reply-To:*
false
MIME-Version:*
MIME-Version:*
false
Content-Type:*
Content-Type:*
false
Content-Language:*
Content-Language:*
false
Content-Length:*
Content-Length:*
false
Content-Disposition:*
Content-Disposition:*
false
Content-Transfer-Encoding:*
Content-Transfer-Encoding:*
false
Content-ID:*
Content-ID:*
false
Content-Description:*
Content-Description:*
false
Content-MD5:*
Content-MD5:*
false
Encoding:*
Encoding:*
false
Precedence:*
Precedence:*
false
Approved-By:*
Approved-By:*
false
Status:*
Status:*
false
Priority:*
Priority:*
false
return-receipt-to:*
return-receipt-to:*
false
X-WatchGuard-Spam-ID:*
X-WatchGuard-Spam-ID:*
false
X-WatchGuard-Mail-From:*
X-WatchGuard-Mail-From:*
false
false
X-WatchGuard-Mail-Recipients:*
X-WatchGuard-Mail-Recipients:*
false
X-WatchGuard-Mail-Exception:*
X-WatchGuard-Mail-Exception:*
false
X-WatchGuard-Spam-Score:*
X-WatchGuard-Spam-Score:*
false
X-WatchGuard-Mail-Client-IP:*
X-WatchGuard-Mail-Client-IP:*
false
X-Mailer:*
X-Mailer:*
false
false
The WatchGuard Firebox that protects your network has detected a message that may not be safe.%CRLF%%CRLF%Cause : %(reason)%%CRLF%Content type : %(type)%%CRLF%File name : %(filename)%%CRLF%Virus status : %(virus)%%CRLF%Action : The Firebox %(action)% %(filename)%.%CRLF%%CRLF%Your network administrator %(recovery)% this attachment.%CRLF%%CRLF%
false
false
true
text/*
text/*
false
image/*
image/*
false
multipart/*
multipart/*
false
message/*
message/*
false
application/*
application/*
false
(none)
false
false
application/x-watchguard-locked
application/x-watchguard-locked
false
true
*.ade
*.ade
true
*.asx
*.asx
true
*.bat
*.bat
true
*.chm
*.chm
true
*.cmd
*.cmd
true
*.com
*.com
true
*.cpl
*.cpl
true
*.crt
*.crt
true
*.exe
*.exe
true
*.hlp
*.hlp
true
*.hta
*.hta
true
*.inf
*.inf
true
*.ins
*.ins
true
*.isp
*.isp
true
*.js
*.js
true
*.jse
*.jse
true
*.lnk
*.lnk
true
*.mdb
*.mdb
true
*.msi
*.msi
true
*.msp
*.msp
true
*.nsc
*.nsc
true
*.pcd
*.pcd
true
*.pif
*.pif
true
*.reg
*.reg
true
*.scr
*.scr
true
*.sct
*.sct
true
*.shs
*.shs
true
*.vb
*.vb
true
*.vb?
*.vb?
true
*.wsc
*.wsc
true
*.wsf
*.wsf
true
*.wsh
*.wsh
true
*.{*}
*.{*}
true
*.mp3
*.mp3
true
*.vbs
*.vbs
true
*.vbe
*.vbe
true
veryfunny*
veryfunny*
true
love-letter*
love-letter*
true
*.avi
*.avi
true
resume1.*
resume1.*
true
explorer.*
explorer.*
true
normal.*
normal.*
true
life_stages.*
life_stages.*
true
Life*.*
Life*.*
true
stages*.*
stages*.*
true
*.asf
*.asf
true
*.ws
*.ws
true
*.eml
*.eml
true
*.adp
*.adp
true
*.bas
*.bas
true
*.jsp
*.jsp
true
*.mde
*.mde
true
*.msc
*.msc
true
*.mst
*.mst
true
*.url
*.url
true
Mmsn_offline.htm
Mmsn_offline.htm
true
*.pi
*.pi
true
your_details.zip
your_details.zip
true
your_details.zi
your_details.zi
true
movie.zip
movie.zip
true
screensaver.zip
screensaver.zip
true
document.zip
document.zip
true
application.zip
application.zip
true
message.zip
message.zip
true
photos.zip
photos.zip
true
winmail.dat
winmail.dat
true
false
10000000
1000
true
true
false
ctspam
true
***BULK***
true
true
true
true
true
WatchGuard_LiveSecurity@tailorednews.com
*
watchguard@tailorednews.com
*
*@watchguard.com
*
false
true
true
256000
102400
true
SMTP-Outgoing
Default configuration for outgoing SMTP
4
2
outgoing
false
false
600
false
client
true
false
true
false
false
true
DIGEST-MD5
DIGEST-MD5
false
CRAM-MD5
CRAM-MD5
false
PLAIN
PLAIN
false
LOGIN
LOGIN
false
LOGIN (old-style)
=LOGIN
false
NTLM
NTLM
false
GSSAPI
GSSAPI
false
true
false
false
true
true
false
*
*
false
true
*
*
false
true
0
0
From:*
From:*
false
To:*
To:*
false
Cc:*
Cc:*
false
Bcc:*
Bcc:*
false
Resent-To:*
Resent-To:*
false
Resent-Cc:*
Resent-Cc:*
false
Resent-Bcc:*
Resent-Bcc:*
false
Resent-Message-ID:*
Resent-Message-ID:*
false
Resent-Reply-To:*
Resent-Reply-To:*
false
Resent-From:*
Resent-From:*
false
Resent-Date:*
Resent-Date:*
false
Message-ID:*
Message-ID:*
false
In-Reply-To:*
In-Reply-To:*
false
References:*
References:*
false
Keywords:*
Keywords:*
false
Subject:*
Subject:*
false
Comments:*
Comments:*
false
Encrypted:*
Encrypted:*
false
Date:*
Date:*
false
Reply-To:*
Reply-To:*
false
MIME-Version:*
MIME-Version:*
false
Content-Type:*
Content-Type:*
false
Content-Language:*
Content-Language:*
false
Content-Length:*
Content-Length:*
false
Content-Disposition:*
Content-Disposition:*
false
Content-Transfer-Encoding:*
Content-Transfer-Encoding:*
false
Content-ID:*
Content-ID:*
false
Content-Description:*
Content-Description:*
false
Content-MD5:*
Content-MD5:*
false
Encoding:*
Encoding:*
false
Precedence:*
Precedence:*
false
Approved-By:*
Approved-By:*
false
Status:*
Status:*
false
return-receipt-to:*
return-receipt-to:*
false
X-WatchGuard-Spam-ID:*
X-WatchGuard-Spam-ID:*
false
X-WatchGuard-Mail-From:*
X-WatchGuard-Mail-From:*
false
false
X-WatchGuard-Mail-Recipients:*
X-WatchGuard-Mail-Recipients:*
false
X-WatchGuard-Mail-Exception:*
X-WatchGuard-Mail-Exception:*
false
X-WatchGuard-Spam-Score:*
X-WatchGuard-Spam-Score:*
false
X-WatchGuard-Mail-Client-IP:*
X-WatchGuard-Mail-Client-IP:*
false
true
The WatchGuard Firebox that protects your network has detected a message that may not be safe.%CRLF%%CRLF%Cause : %(reason)%%CRLF%Content type : %(type)%%CRLF%File name : %(filename)%%CRLF%Virus status : %(virus)%%CRLF%Action : The Firebox %(action)% %(filename)%.%CRLF%%CRLF%Your network administrator %(recovery)% this attachment.%CRLF%%CRLF%
false
false
true
false
false
10000000
1000
true
true
false
ctspam
true
***BULK***
true
true
true
true
true
WatchGuard_LiveSecurity@tailorednews.com
*
watchguard@tailorednews.com
*
*@watchguard.com
*
false
true
true
256000
102400
true
FTP-Server
Default configuration for FTP server
4
3
server
false
false
server
true
900
true
64
true
32
true
1024
true
1030
true
6
true
ABOR*
ABOR*
false
APPE *
APPE *
false
CDUP*
CDUP*
false
CWD *
CWD *
false
DELE *
DELE *
false
false
EPRT *
EPRT *
false
false
EPSV*
EPSV*
false
HELP*
HELP*
false
LIST*
LIST*
false
MKD *
MKD *
false
NLST*
NLST*
false
NOOP*
NOOP*
false
PASS *
PASS *
false
PASV*
PASV*
false
PORT *
PORT *
false
PWD*
PWD*
false
QUIT*
QUIT*
false
REST *
REST *
false
RETR *
RETR *
false
RMD *
RMD *
false
RNFR *
RNFR *
false
RNTO *
RNTO *
false
STAT*
STAT*
false
STOR *
STOR *
false
STOU*
STOU*
false
SYST*
SYST*
false
TYPE *
TYPE *
false
USER *
USER *
false
XCUP*
XCUP*
false
XCWD *
XCWD *
false
XMKD *
XMKD *
false
XRMD *
XRMD *
false
true
false
true
false
false
true
true
256000
102400
FTP-Client
Default configuration for FTP client
4
3
client
false
false
client
true
900
true
64
true
32
true
1024
true
1030
true
6
true
false
*.cab
*.cab
true
*.com
*.com
true
*.dll
*.dll
true
*.exe
*.exe
true
*.zip
*.zip
true
false
true
false
false
true
true
256000
102400
DNS-Incoming
Default configuration for incoming DNS
4
4
incoming
false
false
server
true
10
false
true
true
false
Query
0
false
IQuery
1
true
Status
2
true
Notify
4
true
Update
5
true
true
A record
1
false
NS record
2
false
CNAME record
5
false
SOA record
6
false
PTR record
12
false
MX record
15
false
TXT record
16
true
AAAA IPv6 record
28
false
SRV record
33
true
IXFR Incremental zone transfer
251
true
AXFR Full zone transfer
252
true
ANY record
255
false
true
false
mydomain.com
mydomain.com
false
*
*
false
true
30
false
false
DNS-Outgoing
Default configuration for outgoing DNS
4
4
outgoing
false
false
client
true
10
false
true
true
false
Query
0
false
IQuery
1
true
Status
2
true
Notify
4
false
Update
5
false
true
A record
1
false
NS record
2
false
CNAME record
5
false
SOA record
6
false
PTR record
12
false
MX record
15
false
TXT record
16
false
AAAA IPv6 record
28
false
SRV record
33
false
IXFR Incremental zone transfer
251
false
AXFR Full zone transfer
252
false
ANY record
255
false
true
false
*doubleclick.*
*doubleclick.*
false
false
messenger.yahoo.com
messenger.yahoo.com
false
false
30
false
false
TCP-UDP-Proxy
Default configuration for TCP/UDP Proxy
4
7
outgoing
false
HTTP-Client
http
true
HTTPS-Client
ssl
true
SIP-Client
sip
true
FTP-Client
ftp
true
false
true
false
client
true
false
POP3-Client
Default configuration for POP3 client
4
10
client
false
false
client
true
60
255
512
false
false
false
true
false
true
DIGEST-MD5
DIGEST-MD5
false
CRAM-MD5
CRAM-MD5
false
PLAIN
PLAIN
false
NTLM
NTLM
false
LOGIN
LOGIN
false
GSSAPI
GSSAPI
false
KERBEROS_V4
KERBEROS_V4
false
true
1000
false
ctspam
***SPAM***
true
***BULK***
true
***SUSPECT***
true
false
true
true
From:*
From:*
false
To:*
To:*
false
Cc:*
Cc:*
false
Bcc:*
Bcc:*
false
Resent-To:*
Resent-To:*
false
Received:*
Received:*
false
Resent-Cc:*
Resent-Cc:*
false
Resent-Bcc:*
Resent-Bcc:*
false
Resent-Message-ID:*
Resent-Message-ID:*
false
Resent-Reply-To:*
Resent-Reply-To:*
false
Resent-From:*
Resent-From:*
false
Resent-Date:*
Resent-Date:*
false
Message-ID:*
Message-ID:*
false
In-Reply-To:*
In-Reply-To:*
false
References:*
References:*
false
Keywords:*
Keywords:*
false
Subject:*
Subject:*
false
Comments:*
Comments:*
false
Encrypted:*
Encrypted:*
false
Date:*
Date:*
false
Reply-To:*
Reply-To:*
false
MIME-Version:*
MIME-Version:*
false
Content-Type:*
Content-Type:*
false
Content-Language:*
Content-Language:*
false
Content-Length:*
Content-Length:*
false
Content-Disposition:*
Content-Disposition:*
false
Content-Transfer-Encoding:*
Content-Transfer-Encoding:*
false
Content-ID:*
Content-ID:*
false
Content-Description:*
Content-Description:*
false
Content-MD5:*
Content-MD5:*
false
Encoding:*
Encoding:*
false
Precedence:*
Precedence:*
false
Approved-By:*
Approved-By:*
false
Status:*
Status:*
false
Priority:*
Priority:*
false
return-receipt-to:*
return-receipt-to:*
false
X-WatchGuard-Spam-ID:*
X-WatchGuard-Spam-ID:*
false
X-WatchGuard-Mail-From:*
X-WatchGuard-Mail-From:*
false
false
X-WatchGuard-Mail-Recipients:*
X-WatchGuard-Mail-Recipients:*
false
X-WatchGuard-Mail-Exception:*
X-WatchGuard-Mail-Exception:*
false
X-WatchGuard-Spam-Score:*
X-WatchGuard-Spam-Score:*
false
X-WatchGuard-Mail-Client-IP:*
X-WatchGuard-Mail-Client-IP:*
false
X-Mailer:*
X-Mailer:*
false
false
The WatchGuard Firebox that protects your network has detected a message that may not be safe.%CRLF%%CRLF%Cause : %(reason)%%CRLF%Content type : %(type)%%CRLF%File name : %(filename)%%CRLF%Virus status : %(virus)%%CRLF%Action : The Firebox %(action)% %(filename)%.%CRLF%Recovery : %(recovery)%%CRLF%%CRLF%
false
false
true
All text types
text/*
false
All image types
image/*
false
All audio types
audio/*
false
All video types
video/*
false
All multi-part MIME types
multipart/*
false
Message parts
message/*
false
Missing or empty
false
true
Text files
*.txt
false
Word documents
*.doc
false
Excel spreadsheets
*.xls
false
Missing or empty
false
true
true
true
false
true
true
256000
102400
true
POP3-Server
Default configuration for POP3 server
4
10
server
false
false
server
true
60
255
512
false
false
false
true
false
true
DIGEST-MD5
DIGEST-MD5
false
CRAM-MD5
CRAM-MD5
false
PLAIN
PLAIN
false
NTLM
NTLM
false
LOGIN
LOGIN
false
GSSAPI
GSSAPI
false
KERBEROS_V4
KERBEROS_V4
false
true
1000
false
ctspam
***SPAM***
true
***BULK***
true
***SUSPECT***
true
false
true
true
From
From: *
false
To
To:*
false
Cc
Cc:*
false
Message-ID
Message-ID:*
false
Subject
Subject: *
false
Bcc
Bcc:*
false
MIME-Version:*
MIME-Version:*
false
X-WatchGuard-Spam-ID
X-WatchGuard-Spam-ID:*
false
X-WatchGuard-AntiVirus
X-WatchGuard-AntiVirus:*
false
X-WatchGuard-IPS
X-WatchGuard-IPS:*
false
X-WatchGuard-Mail-Exception
X-WatchGuard-Mail-Exception:*
false
Content-Type:*
Content-Type:*
false
Content-Language:*
Content-Language:*
false
Content-Length:*
Content-Length:*
false
Content-Disposition:*
Content-Disposition:*
false
Content-Transfer-Encoding:*
Content-Transfer-Encoding:*
false
Content-ID:*
Content-ID:*
false
Content-Description:*
Content-Description:*
false
Content-MD5:*
Content-MD5:*
false
false
The WatchGuard Firebox that protects your network has detected a message that may not be safe.%CRLF%%CRLF%Cause : %(reason)%%CRLF%Content type : %(type)%%CRLF%File name : %(filename)%%CRLF%Virus status : %(virus)%%CRLF%Action : The Firebox %(action)% %(filename)%.%CRLF%Recovery : %(recovery)%%CRLF%%CRLF%
false
false
true
All text types
text/*
false
All image types
image/*
false
All audio types
audio/*
false
All video types
video/*
false
All multi-part MIME types
multipart/*
false
Message parts
message/*
false
Missing or empty
false
true
Text files
*.txt
false
Word documents
*.doc
false
Excel spreadsheets
*.xls
false
Missing or empty
false
true
true
true
false
true
true
256000
102400
true
HTTPS-Client
Default configuration for HTTPS client
4
18
client
false
OCSP_YES
UNKNOWN_VALID
SSL_NO
600
false
false
HTTPS-Server
Default configuration for HTTPS server
4
18
server
false
OCSP_YES
UNKNOWN_VALID
SSL_NO
SSL_RESIGN_NO
600
false
false
SIP-Client
Default configuration for SIP client
4
15
client
false
true
true
true
2
180
true
false
false
false
false
true
H.323-Client
Default configuration for H.323 Client
4
16
client
false
true
true
2
180
true
false
false
false
false
true
WebBlocker
Default configuration for WebBlocker
4
6
false
5
true
false
true
false
100
Infrastructure
9802
true
Proxies & Translators
98
true
Phishing & Fraud
9101
true
Business
100
true
Spam URLs
9805
true
Intimate Apparel & Swimwear
95
true
Spyware
7505
true
Tasteless & Offensive
9301
true
Fashion & Beauty
9501
true
Politics
9806
true
Real Estate
3010
true
Criminal Activity
91
true
Search Engines
7503
true
News
20
true
Adult/Sexually Explicit
90
true
Health & Medicine
14
true
Hosting Sites
99
true
Blogs & Forums
2002
true
Government
40
true
Society & Culture
3003
true
Finance & Investment
25
true
Job Search & Career Development
60
true
Alcohol & Tobacco
1404
true
Uncategorized
0
true
Streaming Media
7509
true
Weapons
94
true
Peer-to-Peer
9801
true
Travel
11
true
Shopping
80
true
Reference
7001
true
Ringtones/Mobile Phone Downloads
9804
true
Downloads
7501
true
Photo Searches
97
true
Advertisements
76
true
Philanthropic & Professional Orgs.
9803
true
Sports
10
true
Illegal Drugs
1403
true
Food & Drink
3004
true
Hobbies & Recreation
12
true
Computing & Internet
75
true
Religion
3006
true
Motor Vehicles
1101
true
Entertainment
51
true
Kids Sites
7003
true
Sex Education
1490
true
Chat
3001
true
Personals & Dating
96
true
Arts
50
true
Intolerance & Hate
92
true
Games
1202
true
Gambling
13
true
Violence
93
true
Education
70
true
Hacking
7504
true
Web-based Email
7507
true
true
update DB
listsrv.surfcontrol.com/*
false
WatchGuard
*.watchguard.com/*
false
false
0
false
5
sigeng
Default configuration for Signature Engine
2
9
false
3
false
false
true
ctspam
Pre-defined Spam Filter configuration
2
12
false
resolver%d.wguard.ctmail.com
/SpamResolverNG/SpamResolverNG.dll?DoNewRequest
/tmp
0
1
0
8080
NoAuth
4
40000
0
40000
10000
4
0
QuarantineHelper
Default configuration for Quarantine Helper
2
10
false
4120
Any
All traffic
4
1
Any
Any
Any
Firebox
All local traffic associated with the Firebox
4
1
Any
Firebox
Firebox
Any-External
All traffic associated with external interfaces
4
1
Any
Any
Any-External
Any-Trusted
All traffic associated with trusted interfaces
4
1
Any
Any
Any-Trusted
Any-Optional
All traffic associated with optional interfaces
4
1
Any
Any
Any-Optional
Any-BOVPN
All traffic associated with BOVPN
4
1
Any
Any
Any-BOVPN
Any-MUVPN
All traffic associated with MUVPN
4
1
Any
Any
Any-MUVPN
PPTP
Built-in alias
4
1
Any
Any
PPTP
External
Built-in alias
2
1
Any
Any
External
Trusted
Built-in alias
2
1
Any
Any
Trusted
Any From Firebox.1.from
16
2
Firebox
Any From Firebox.1.to
16
2
Any
BOVPN-Allow.in.1.from
16
1
Any
Any
tunnel.1
BOVPN-Allow.in.1.to
16
2
Any
BOVPN-Allow.out.1.from
16
2
Any
BOVPN-Allow.out.1.to
16
1
Any
Any
tunnel.1
FTP.1.from
16
2
Any-Trusted
2
Any-Optional
FTP.1.to
16
2
Any-External
Outgoing.1.from
16
2
Any-Trusted
2
Any-Optional
Outgoing.1.to
16
2
Any-External
Ping.1.from
16
2
Any-Trusted
2
Any-Optional
Ping.1.to
16
2
Any
Unhandled External Packet.1.from
16
2
Any
Unhandled External Packet.1.to
16
2
Any
Unhandled Internal Packet.1.from
16
2
Any-Trusted
2
Any-Optional
Unhandled Internal Packet.1.to
16
2
Any
WatchGuard Web UI.1.from
16
2
Any-Trusted
2
Any-Optional
WatchGuard Web UI.1.to
16
2
Firebox
WatchGuard.1.from
16
2
Any-Trusted
2
Any-Optional
WatchGuard.1.to
16
2
Firebox
dnat.from.1
16
1
Any
dnat.from.1
Any
dnat.from.2
16
1
Any
dnat.from.2
Any
dnat.from.3
16
1
Any
dnat.from.3
Any
Any
4
Firebox-DB
Firebox Internal Users
4
0
Any
Any Interface
4
Any-External
Any External Interface
4
Any-Trusted
Any Trusted Interface
4
Any-Optional
Any Optional Interface
4
Firebox
Firebox
4
PPTP
PPTP
4
Any-BOVPN
Any BOVPN Tunnel
4
Any-MUVPN
Any MUVPN Tunnel
4
External
This is the interface with label WAN1 on the back of the Edge
0
-
1
0
1
2
1.1.100.1
255.255.255.0
1500
1
100
0
1
1.1.100.100
1
1
0
1
1
1
0
576
600
0
0
2
0
0
0
0
External-2
This is the interface with label WAN2 on the back of the Edge
0
-
1
3
0
2
0.0.0.0
255.255.255.0
1500
1
100
0
1
1
1
0
1
1
2
0
576
600
0
0
2
0
0
0
0
Optional-1
This is the interface with label OPT on the back of the Edge
0
-
1
2
0
3
0.0.0.0
255.255.255.0
1500
1
100
0
1
2
0
0
1
0
0
0
2
0
0
0
0
Trusted
This is the group of interfaces labeled LAN0, LAN1, and LAN2 on the back of the Edge. All three interfaces are bridged as one.
0
-
1
1
1
1
192.168.222.1
255.255.255.0
1500
1
100
0
1
2
0
0
1
0
0
0
0
2
0
0
0
0
tunnel.1
0
-
4
tunnel.1
1
AV
2
1
0
1
0
0
0
0
1
900
10
2
syn_attack_dos
0
1
1
7
0
0
0
0
1
900
10
udp_flood_dos
0
1
2
7
0
0
0
0
1
900
10
ipsec_flood_dos
0
1
6
7
0
0
0
0
1
900
10
ike_flood_dos
0
1
7
7
0
0
0
0
1
900
10
icmp_flood_dos
0
1
3
7
0
0
0
0
1
900
10
ping_of_death_dos
0
1
4
7
0
0
0
0
1
900
10
ip_source_route_dos
0
1
5
7
0
0
0
0
1
900
10
ddos_attack_src_dos
0
1
8
7
0
0
0
0
1
900
10
ddos_attack_dest_dos
0
1
9
7
0
0
0
0
1
900
10
port_scan_dos
0
1
10
7
0
0
1
1200
1
0
1
900
10
ip_scan_dos
0
1
11
7
0
0
1
1200
1
0
1
900
10
spoofing_dos
0
1
12
7
0
0
0
0
1
900
10
arp_spoofing_dos
0
1
14
7
0
0
0
0
1
900
10
SYN-Attack
2
1
1
1
0
0
0
0
1
900
10
UDP-Flood
2
1
2
1
0
0
0
0
1
900
10
ICMP-Flood
2
1
3
1
0
0
0
0
1
900
10
Ping-of-Death
2
1
4
1
0
0
0
0
1
900
10
Source-Route
2
1
5
1
0
0
0
0
1
900
10
IPSec-Flood
2
1
6
1
0
0
0
0
1
900
10
IKE-Flood
2
1
7
1
0
0
0
0
1
900
10
DDOS-Attack-Src
2
1
8
1
0
0
0
0
1
900
10
DDOS-Attack-Dest
2
1
9
1
0
0
0
0
1
900
10
Port-Scan
2
1
10
1
0
0
0
0
1
900
10
IP-Scan
2
1
11
1
0
0
0
0
1
900
10
IP-Spoofing
2
1
12
1
0
0
0
0
1
900
10
Tear-Drop
2
1
13
1
0
0
0
0
1
900
10
DOS
2
1
0
1
0
0
0
0
1
900
10
3
IPS
2
1
0
1
0
0
0
0
1
900
10
4
Blocked Ports
0
1
7
0
0
0
0
1
900
10
Policy
2
1
1
0
0
1
1200
1
0
1
900
10
5
Link-Down
0
1
1
0
0
0
60
2
1090584603
0
9
0.0
1090584603
1
9
0.0
1090584603
2
9
0.0
1090584603
3
9
0.0
1090584603
4
9
0.0
1090584603
5
9
0.0
0
1
900
10
Log-Full
0
0
4
0
0
0
60
2
16842774
7
15000.0
16842775
7
150000.0
16842776
7
15000.0
16842822
7
15000.0
16842823
7
15000.0
16842824
7
15000.0
16842832
7
15000.0
16842833
7
15000.0
0
1
900
10
6
Proxy
2
1
0
1
0
0
0
0
1
900
10
7
multi-wan event
0
1
1
1
0
0
0
0
1
900
10
ha event
0
1
2
1
0
0
0
0
1
900
10
System
2
1
0
1
0
0
0
0
1
900
10
8
ESP-Auth-Error
2
1
1
1
0
0
0
0
1
900
10
AH-Auth-Error
2
1
2
1
0
0
0
0
1
900
10
ESP-Replay-Error
2
1
3
1
0
0
0
0
1
900
10
AH-Replay-Error
2
1
4
1
0
0
0
0
1
900
10
Invalid-SPI
2
1
5
1
0
0
0
0
1
900
10
Other-Policy-Error
2
1
6
1
0
0
0
0
1
900
10
Block-Site-Notif
2
1
7
1
0
0
0
0
1
900
10
Traffic
2
1
0
1
0
0
0
0
1
900
10
60
https://services.watchguard.com
0
0
0
0
8080
NoAuth
dnat.from.1
Any-External
dnat.from.2
Any-External
dnat.from.3
Any-External
Any From Firebox
32
Any
Policy added on 10/03/03 14:59.
Firewall
0
true
Allow
TCP_RST
Any From Firebox.1.from
Any From Firebox.1.to
false
false
false
0.0.0.0
0
0
0
0
Always On
false
false
false
false
false
0
1
0
Any From Firebox-00
FTP
0
FTP
Policy added on 10/03/03 14:59.
Firewall
1
true
Allow
TCP_RST
FTP.1.from
FTP.1.to
true
true
false
0.0.0.0
0
0
0
0
Always On
false
false
false
false
false
0
1
0
FTP-00
WatchGuard Web UI
0
WG-Fireware-XTM-WebUI
Policy added on 10/03/03 14:59.
Firewall
1
true
Allow
TCP_RST
WatchGuard Web UI.1.from
WatchGuard Web UI.1.to
true
true
false
0.0.0.0
0
0
0
0
Always On
false
false
false
false
false
0
1
0
WatchGuard Web UI-00
Ping
0
Ping
Policy added on 10/03/03 14:59.
Firewall
3
true
Allow
TCP_RST
Ping.1.from
Ping.1.to
true
true
false
0.0.0.0
0
0
0
0
Always On
false
false
false
false
false
0
1
0
Ping-00
WatchGuard
0
WG-Firebox-Mgmt
Policy added on 10/03/03 14:59.
Firewall
1
true
Allow
TCP_RST
WatchGuard.1.from
WatchGuard.1.to
true
true
false
0.0.0.0
0
0
0
0
Always On
false
false
false
false
false
0
1
0
WatchGuard-00
Outgoing
0
TCP-UDP
Policy added on 10/03/03 14:59.
Firewall
1
true
Allow
TCP_RST
Outgoing.1.from
Outgoing.1.to
true
true
false
0.0.0.0
0
0
0
0
Always On
false
false
false
false
false
0
1
0
Outgoing-00
BOVPN-Allow.out
0
Any
Policy added on 10/03/15 11:10.
Firewall
2
true
Allow
TCP_RST
BOVPN-Allow.out.1.from
BOVPN-Allow.out.1.to
true
true
false
0.0.0.0