Selecting an HTTP Service

WatchGuard Firebox System offers three different types of HTTP services. Choose the HTTP service that best meets your needs:

Proxied-HTTP is a multiservice that combines configuration options for HTTP on port 80 with a rule that allows (by default) all outgoing TCP connections. In other words, the Proxied-HTTP is not bilateral incoming and outgoing; this service controls incoming TCP traffic only on port 80, but allows outgoing TCP traffic on all ports. The Proxied-HTTP service includes a variety of custom options including specialized logging features, definition of safe content types, and WebBlocker.
HTTP is a proxy service that functions very much like Proxied-HTTP, except that it controls both incoming and outgoing access only on port 80.

Note: The WatchGuard service called "HTTP" is not to be confused with an HTTP caching proxy. An HTTP caching proxy refers to a separate machine that performs caching of Web data.

Filtered-HTTP is a multiservice that combines configuration options for HTTP on port 80 with a rule allowing (by default) all outgoing TCP connections. As a filtered service, Filtered-HTTP is considerably faster than Proxied-HTTP or HTTP, but does not provide protection that is as thorough or as effective. In addition, none of the custom options, including WebBlocker, are available for Filtered-HTTP.

Related topics:

Adding a proxy service for HTTP

Configuring a caching proxy server

Incoming service guidelines

Outgoing service guidelines

Configurable parameters for services

Defining Firebox Users and Groups for Authentication

Return to Top