Fortinet FortiGate FortiGate-60M Administration Manual page 206

Service
206
Table 21: FortiGate predefined services
Service name Description
ANY Match connections on any port. A connection
that uses any of the predefined services is
allowed through the firewall.
GRE Generic Routing Encapsulation. A protocol
that allows an arbitrary network protocol to be
transmitted over any other arbitrary network
protocol, by encapsulating the packets of the
protocol within GRE packets.
AH Authentication Header. AH provides source
host authentication and data integrity, but not
secrecy. This protocol is used for
authentication by IPSec remote gateways set
to aggressive mode.
ESP Encapsulating Security Payload. This service
is used by manual key and AutoIKE VPN
tunnels for communicating encrypted data.
AutoIKE key VPN tunnels use ESP after
establishing the tunnel using IKE.
AOL AOL instant messenger protocol.
BGP Border Gateway Protocol routing protocol.
BGP is an interior/exterior routing protocol.
DHCP Dynamic Host Configuration Protocol (DHCP)
allocates network addresses and delivers
configuration parameters from DHCP servers
to hosts.
DNS Domain name service for translating domain
names into IP addresses.
FINGER A network service that provides information
about users.
FTP FTP service for transferring files.
GOPHER Gopher communication service. Gopher
organizes and displays Internet server
contents as a hierarchically structured list of
files.
H323 H.323 multimedia protocol. H.323 is a
standard approved by the International
Telecommunication Union (ITU) that defines
how audiovisual conferencing data is
transmitted across networks.
HTTP HTTP is the protocol used by the word wide
web for transferring data for web pages.
HTTPS HTTP with secure socket layer (SSL) service
for secure communication with web servers.
IKE IKE is the protocol to obtain authenticated
keying material for use with ISAKMP for
IPSEC.
IMAP Internet Message Access Protocol is a
protocol used for retrieving email messages.
Internet-Locator- Internet Locator Service includes LDAP, User
Service Locator Service, and LDAP over TLS/SSL.
01-28007-0144-20041217
Firewall
Protocol Port
all all
47
51
50
tcp 5190-5194
tcp 179
udp 67
tcp 53
udp 53
tcp 79
tcp 21
tcp 70
tcp 1720, 1503
tcp 80
tcp 443
udp 500
tcp 143
tcp 389
Fortinet Inc.