Setting adapter usage

WinGate will constantly scan the system where it is installed for the presence of network connections. Network connections in WinGate are either hardware (network interfaces, wireless adapters etc.) or software connections (such as MS VPN and dial up networking configurations) that have been configured in the operating system. WinGate will automatically attempt to classify what type of network each network interface is connected to. It does this by examining what IP address details (if any) have been set for the network interface.

There are 3 classifications that can be set by WinGate:

1. Internal (protected network)

   If the network interface has a private IP address, then WinGate will consider the interface as being safe (e.g. this adapter connects to the LAN). WinGate network services will automatically bind to network interfaces marked as Internal.

2. External (untrusted network)

   If the network interface has a public IP address, then WinGate will see it as an Internet connection. WinGate considers the Internet to be an untrusted network.

   Note

   Network adapters that do not have any IP addresses set are also marked as External (untrusted), since they could potentially be configured with either a private or public IP address.

3. External secure network (DMZ)

   This classification is for interfaces that are connected to a DMZ (Demilitarized Zone). This classification is not given automatically by WinGate, it must be manually set (see below).

You can locate the usage that has been assigned to a network adapter by WinGate, from the Network Connections panel, located in the Control Panel of the WinGate Management console.

Classification usage

WinGate uses these classifications for a wide range of purposes through out its operation. The most common are:

1. Connection types

   To help the ENS firewall determine what type of connection is being received on a WinGate network interface. This enables it to allow, deny, or redirect the traffic as required.

2. Bindings

   When it is determining which interface it should dynamically bind to a network service. WinGate will automatically bind adapters marked as Internal to most network services, so they can begin listening and responding automatically to client requests from the LAN.

Manual classifications

WinGate allows you to manually set the classification of each interface, depending on what security requirements you have. This could be in situations where WinGate is connected to an Internet router (using a private IP address) and you want to have WinGate classify this connection as External.

Note

To set the classification manually:

1. Open the WinGate Management console.
2. Navigate to WinGate > Control Panel > Network connections.
3. Double click on the network interface entry you want to classify. This will open the WinGate specific properties for the adapter.

   

   Close

4. On the General tab select the desired classification radio button.
5. Click OK to apply the classification.