User guide

Service Precedence
User Guide 107
The remaining controls are active when you select the Send notification
checkbox:
Email
Triggers an email message when the event occurs. Set the email
recipient in the Notification tab of the WatchGuard Security
Event Processor (WSEP) user interface.
Pager
Triggers an electronic page when the event occurs. The Firebox
must have a PCMCIA modem and be connected to a phone
service to make outgoing calls. (If the pager is accessible by email,
you can enable notification by email and then enter the email
address of the pager in the appropriate field.)
Popup window
Brings up a window when the event occurs.
Custom program
Runs a program when the event occurs. Enter the path of the
executable file in the box provided, or browse to specify a path.
Launch interval and repeat count work in conjunction to control
notification timing. For more information on this setting, see “Setting
Launch Interval and Repeat Count” on page 187.
Service Precedence
Precedence is generally given to the most specific service and descends to
the most general service. However, exceptions exist. There are three
different precedence groups for services:
• The “Any” service (see the Reference Guide for more information about
the “Any” filtered service). This group has the highest precedence.
• IP and ICMP services and all TCP/UDP services that have a port
number specified. This group has the second highest precedence and
is the largest of the three.
• “Outgoing” services that do not specify a port number (they apply to
any port). This group includes Outgoing TCP, Outgoing UDP, and
Proxy.