- Kerio WinRoute Firewall Administrator's Guide

2.3 Installation

Conﬂicting Applications and System Services

The WinRoute installation program detects applications and system services that might

conﬂict with the WinRoute Firewall Engine.

1. Windows Firewall’s system components

and Internet Connection Sharing.

These components provide the same low-level functions as WinRoute. If they are

running concurrently with WinRoute, the network communication would not be func-

tioning correctly and WinRoute might be unstable. Both components are run by the

Windows Firewall / Internet Connection Sharing system service.

Warning: To provide proper functionality of WinRoute, it is necessary that the In-

ternet Connection Firewall / Internet Connection Sharing detection is stopped and

forbidden!

2. Universal Plug and Play Device Host and SSDP Discovery Service

The services support UPnP (Universal Plug and Play) in the Windows XP and Server

2003 operating systems. However, these services collide with the UPnP support in

WinRoute (refer to chapter 16.3).

The WinRoute installation includes a dialog where it is possible to disable colliding sys-

tem services.

By default, the WinRoute installation disables all the colliding services listed. Under usual

circumstances, it is not necessary to change these settings. Generally, the following rules

are applied:

• The Windows Firewall / Internet Connection Sharing (ICS) service should be disabled.

Otherwise, WinRoute will not work correctly. The option is a certain kind of warning

which informs users that the service is running and that it should be disabled.

• To enable support for the UPnP protocol in WinRoute (see chapter

16.3), it is neces-

sary to disable also services Universal Plug and Play Device Host and SSDP Discovery

Service.

• If you do not plan to use support for UPnP in WinRoute, it is not necessary to disable

the Universal Plug and Play Device Host and SSDP Discovery Serviceservices.

Notes:

1. Upon each startup, WinRoute detects automatically whether the Windows Firewall /

Internet Connection Sharing is running. If it is, WinRoute stops it and makes a record

In Windows XP Service Pack 1 and older versions, the integrated ﬁrewall is called Internet Connection Firewall

In the older Windows versions listed above, the service is called Internet Connection Firewall / Internet Con-

nection Sharing.