Kerio-tech Firewall6 Instrukcja Użytkownika Pobierz pdf (Strona 223)

100

101

223

Chapter 16

Remote Administration and Update Checks

16.1 Setting Remote Administration

Remote administration can be either permitted or denied by deﬁnition of the appropriate

traﬃc rule. Traﬃc between WinRoute and Administration Console is performed by TCP and

UDP protocols over port 44333. The deﬁnition can be done with the predeﬁned service KWF

Admin.

If WinRoute includes only traﬃc rules generated by the wizard, remote administration is avail-

able through all interfaces except the one which is used for Internet connection and where

NAT is enabled (see chapter 7.1). This means that remote administration is available from all

local hosts.

How to allow remote administration from the Internet

In the following example we will demonstrate how to allow WinRoute remote administration

from some Internet IP addresses.

• Source — group of IP addresses from which remote administration will be allowed.

For security reasons it is not recommended to allow remote administration from an

arbitrary host within the Internet (this means: do not set Source as the Web interface).

• Destination — Firewall (host where WinRoute is running)

• Service — KWF Admin (predeﬁned service— WinRoute administration)

• Action — Permit (otherwise remote administration would be blocked)

• Translation — Because the engine is running on the ﬁrewall there is no need for trans-

lation.

Figure 16.1 Traﬃc rule that allows remote administration

1 2 ... 218 219 220 221 222 223 224 225 226 227 228 ... 403 404

Komentarze do niniejszej Instrukcji

Brak uwag

Kerio-tech Firewall6 Instrukcja Użytkownika Strona 223

Komentarze do niniejszej Instrukcji