Services; Predefined Services - Fortinet FortiGate FortiGate-50R Installation And Configuration Manual

Firewall configuration

Services

Predefined services

FortiGate-50R Installation and Configuration Guide
Use services to control the types of communication accepted or denied by the firewall.
You can add any of the predefined services to a policy. You can also create your own
custom services and add services to service groups.
This section describes:
• Predefined services
• Providing access to custom services
• Grouping services
The FortiGate predefined firewall services are listed in
services to any policy.
Table 5: FortiGate predefined services
Service name Description
ANY Match connections on any port. A connection
that uses any of the predefined services is
allowed through the firewall.
GRE Generic Routing Encapsulation. A protocol that
allows an arbitrary network protocol to be
transmitted over any other arbitrary network
protocol, by encapsulating the packets of the
protocol within GRE packets.
AH Authentication Header. AH provides source
host authentication and data integrity, but not
secrecy. This protocol is used for
authentication by IPSec remote gateways set
to aggressive mode.
ESP Encapsulating Security Payload. This service is
used by manual key and AutoIKE VPN tunnels
for communicating encrypted data. AutoIKE
key VPN tunnels use ESP after establishing the
tunnel using IKE.
AOL AOL instant messenger protocol.
BGP Border Gateway Protocol routing protocol.
BGP is an interior/exterior routing protocol.
DHCP-Relay Dynamic Host Configuration Protocol (DHCP)
allocates network addresses and delivers
configuration parameters from DHCP servers
to hosts.
DNS Domain name service for translating domain
names into IP addresses.
FINGER A network service that provides information
about users.
FTP FTP service for transferring files.
GOPHER Gopher communication service. Gopher
organizes and displays Internet server contents
as a hierarchically structured list of files.
Table 5. You can add these
Protocol Port
all all
47
51
50
tcp 5190-5194
tcp 179
udp 67
tcp 53
udp 53
tcp 79
tcp 21
tcp 70
Services
125