About the desktop firewall. Watchguard Firebox X4500, Firebox X Edge e-Series

About Mobile VPN with IPSec

3. From the left pane, select Link Firewall .

276

4. From the Stateful Inspection drop-down list, select when connected or always . If you select when connected, the link firewall operates only when the VPN tunnel is active for this profile.

If you select always , the link firewall is always active, whether the VPN tunnel is active or not.

5. Click OK .

About the desktop firewall

When you enable a rule in your firewall configurations, you must specify what type of network the rule applies to. In the Mobile VPN client, there are three different types of networks:

VPN networks

Networks defined for the client in the client profile they import.

Unknown networks

Any network not specified in the firewall.

Friendly networks

Any network specified in the firewall as a known network.

For information about how to enable the desktop firewall, see Enable the desktop firewall

.

Firebox X Edge e-Series

About Mobile VPN with IPSec

Enable the desktop firewall

To enable the full-featured desktop firewall:

1. From the WatchGuard Mobile VPN Connection Monitor, select Configuration > Firewall Settings .

The firewall is disabled by default.

2. When you enable the firewall, you must choose between two firewall modes: o Basic Locked Settings - When you enable this mode, the firewall denies all connections to or from your computer unless you have created a rule to specifically allow the connection. o Basic Open Settings - When you enable this mode, the firewall allows all connections unless you have created a rule to specifically deny the connection.

3. Click OK .

After you have enabled the desktop firewall, you can configure your firewall settings.

For more information about how to define friendly networks and create firewall rules, see Define friendly networks and Create firewall rules

.

User Guide 277