Block a Port

You can use the Blocked Ports page to add a port number to the Blocked Ports list.

Be very careful if you block port numbers higher than 1023. Clients frequently use these source port numbers.

To add a port number to the Blocked Ports list, from Fireware Web UI:

1. Select Firewall > Blocked Ports.
2. In the text box below the Blocked Ports list, type the port number to block.
3. Click Add.
   The new port number appears in the Blocked Ports list.

To add a port number to the Blocked Ports list from Policy Manager:

1. Click .
   Or, select Setup > Default Threat Protection > Blocked Ports.
   The Blocked Ports dialog box appears.
2. In the Port text box, type or select the port number to block.
3. Click Add.
   The new port number appears in the Blocked Ports list.

Block IP Addresses That Try to Use Blocked Ports 

You can configure the Firebox to automatically block an external computer that tries to use a blocked port. In the Blocked Ports configuration, select the Automatically block sites that try to use blocked ports check box.

Set Logging and Notification for Blocked Ports 

You can configure the Firebox to make a log entry when a computer tries to use a blocked port. You can also set up notification for when a computer tries to get access to a blocked port.

From the Blocked Ports dialog box, from Policy Manager:

1. Click Logging.
   The Logging and Notification dialog box appears.
2. Configure notification settings as described in Set Logging and Notification Preferences.

See Also

About Blocked Ports

Give Us Feedback  •   Get Support  •   All Product Documentation  •   Technical Search

© 2018 WatchGuard Technologies, Inc. All rights reserved. WatchGuard, the WatchGuard logo, WatchGuard Dimension, Firebox, Core, Fireware, and LiveSecurity are registered trademarks or trademarks of WatchGuard Technologies in the United States and/or other countries.