Off Server Service Exceptions

Off Server Services (where firewall and services run on different machines) exceptions are classified into two main categories, under which various services are available.

• Proxy Services
  • HTTP and Secure HTTP Proxy
  • FTP proxy
  • Mail Proxy
  • News Proxy
  • Real Audio Proxy
  • RTSP proxy
  • DNS Proxy
  • Transparent Telnet Proxy
• Other Services
  • Mail Server
  • Web Server
  • FTP Server
  • DNS Server

Figure 28
Off Server Service Exceptions

To configure Off Server service exceptions, complete the following steps:

1. Select the Public Interface where the exceptions are to be created.

   This is either the LAN or WAN interface that connects your server to the Internet or other public network.

2. Indicate whether the exceptions should be stateful or stateless.

   If stateful filtering is enabled in a filter rule, a dynamic filter is also created in the reverse direction that is defined by the filter rule.

3. Indicate whether the proxy server is behind or outside the firewall by selecting the respective radio buttons.

   • Select Behind Firewall if the service is behind the firewall and the traffic to the Internet has to pass through the firewall.
   • If the service exists before the firewall and the traffic coming from the Internet has to pass through the proxy and the firewall, then select Outside Firewall.

4. Type the server IP address of the proxy where the services are running, then click Add.