


For example, your configuration is more secure if you allow connections from a single computer instead of from the alias Any-External. If this is not possible, we recommend that you allow access from the external network to only certain authorized users and to the smallest number of computers possible. This greatly increases the security of the connection. Rather than modify the WatchGuard policy, we strongly recommend that you use a VPN to connect to the Firebox. When you allow connections in the WatchGuard policy, you allow connections to each of these ports. The WatchGuard policy controls access to the Firebox on these TCP ports: 4105, 4117, 4118.

To manage the Firebox from a remote location (any location external to the device), you must modify the WatchGuard policy to allow administrative connections from the IP address of your remote location. This policy allows you to connect to and administer the Firebox from any computer on the trusted or optional networks. When you run the Quick Setup Wizard to configure a Firebox, the WatchGuard policy is created automatically. Administer Your Firebox From a Remote Location
