Providing Access To Custom Services; Grouping Services - Fortinet FortiGate 100 Installation & Configuration Manual

Providing access to custom services

Providing access to custom services

Grouping services

156
Table 5: FortiGate predefined services (Continued)
Service name
TCP
TELNET
TFTP
UDP
UUCP
VDOLIVE
WAIS
WINFRAME
X-WINDOWS
Add a custom service if you need to create a policy for a service that is not in the
predefined service list.
1 Go to Firewall > Service > Custom.
2 Select New.
3 Enter a Name for the service. This name appears in the service list used when you
add a policy.
The name can contain numbers (0-9), uppercase and lowercase letters (A-Z, a-z), and
the special characters - and _. Other special characters and spaces are not allowed.
4 Select the Protocol (either TCP or UDP) used by the service.
5 Specify a Source and Destination Port number range for the service by entering the
low and high port numbers. If the service uses one port number, enter this number in
both the low and high fields.
6 If the service has more than one port range, select Add to specify additional protocols
and port ranges.
If you mistakenly add too many port range rows, select Delete
extra row.
7 Select OK to add the custom service.
You can now add this custom service to a policy.
To make it easier to add policies, you can create groups of services and then add one
policy to provide or block access for all the services in the group. A service group can
contain predefined services and custom services in any combination. You cannot add
service groups to another service group.
1 Go to Firewall > Service > Group.
Description
All TCP ports.
Telnet service for connecting to a remote
computer to run commands.
Trivial file transfer protocol, a simple file
transfer protocol similar to FTP but with no
security features.
All UDP ports.
Unix to Unix copy utility, a simple file copying
protocol.
For VDO Live streaming multimedia traffic.
Wide Area Information Server. An Internet
search protocol.
For WinFrame communications between
computers running Windows NT.
For remote communications between an
X-Window server and X-Window clients.
Firewall configuration
Protocol Port
tcp 0-65535
tcp 23
udp 69
udp 0-65535
udp 540
tcp 7000-7010
tcp 210
tcp 1494
tcp 6000-6063
to remove each
Fortinet Inc.