Qbik Helpsys

Bindings

All network services in WinGate need to be able to listen for, and respond to client requests. This is achieved by making each service use an appropriate network adapter on the WinGate server to listen for each request. Configuring a service to listen on a particular network interface is known as binding the interface to the service.

Dynamic bindings

As part of its security, WinGate will automatically try to identify what type of network each of its network interfaces are connected to, based on the IP address details of the adapter.

  • Internal

    If the interface has a private IP address, then WinGate will deem that it is connected to a local network and so is trusted by WinGate.

  • External

    If the interface has a public IP address, then WinGate will deem that the interface is connected to the Internet or an external untrusted network.

    Note

    You can manually set how WinGate will classify the usage of each network connection in the WinGate specific properties for each network interface. These can be accessed by double clicking on a network connection in the Network Connections panel, located at Control Panel > Network Connections in the WinGate Management console.

Most network services in WinGate will automatically bind any network adapters classified as Internal to their service by default. This allows the network services to be able to listen and respond to client requests from the local network with very little configuration after they are installed.

Read more about interface security in WinGate

Manual bindings

Bindings for a network service can be set manually on the Bindings tab for each particular service.

  1. Open the WinGate Management console.
  2. Navigate to Control Panel > Services.
  3. From the Services panel, open the Service properties of the appropriate service.
  4. Select the Bindings tab.
  5. Below the Binding Policy pane, select the Add button to create a new binding policy. This will open the Dynamic Binding Policy dialog.
  6. Select the Any Internal adapter check box. Selecting this policy option will allow the WWW proxy service to bind to any Internal adapter that WinGate has discovered. Alternatively you can select the check box of a specific interface that is listed that you wish to bind to the WWW proxy service.
  7. If you wish to have all connections to the service use SSL, then you can enable the SSL check box, and select a suitable preconfigured certificate from the drop down menu. Certificates can be generated on the Certificates panel located at Control Panel > Certificates in the WinGate Management console.

    License restriction: Certificates are only available for SSL Bindings when using a WinGate Enterprise license or a WinGate VPN license.
  8. Click OK to add the Dynamic binding policy to the Bindings tab.
  9. On the Bindings tab of the WWW Proxy service, check to see that the policy is present in the Binding policy pane.
  10. Click OK to exit the WWW Proxy service. When you reopen the Bindings tab the adapters included in the binding policy will now be displayed in the Adapter pane.

Bindings security

WinGate network services can be bound to any network interface that exists on the WinGate server, including Internet connections. For this reason we recommend being extremely careful when binding network connections marked as External by WinGate (Internet connections) to network services, since this will allow remote Internet users to make requests to the particular WinGate service.

Sometimes you may be required to do this. For example when WinGate Mail is accepting mail for delivery for remote users on the Internet, then the SMTP Server in WinGate needs to be bound to the external network connection so it can listen for SMTP connections from remote WinGate Mail clients.

Note

  • For the best security, only bind each service to your LAN card and localhost. Do not allow any bindings to dialer profiles.
  • Be extremely careful when binding interfaces marked as External to a service as this will potentially allow external access to the WinGate service.
  • After installing WinGate or changing Network adapter/settings, check that WinGate has classified the correct usage status for your network adapters and services are bound correctly.
  1. no comments yet...

Download helpfile

You can use basic Full-Text Searches against the page title and body to find matching articles. Use the following search modifiers to refine your query:

  • event management (no quotes) will find all pages containing the words "event" OR "management"
  • "event management" (with quotes) will find all pages containing the phrase "event management"
  • +event -management will find all pages containing the word "event", AND NOT the word "management"