20-8
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter20 Configuring Objects
Configuring Service Objects and Service Groups
Click the Create new member radio button.
Select the Service type from the drop-down list.
Enter the destination port/range.
Enter the source port/range.
Step6 Click Add to add the new service.
Step7 Click OK to save the configuration.
Editing a Service Group
To edit a service group, perform the following steps:
Step1 Go to the Configuration > Firewall > Objects > Service Object/Group pane.
Step2 Select the existing service group that you want to edit, and click Edit.
Depending upon the type of a service object you choose edit, the appropriate windows appears:
Service Object—Edit Service Object window appears.
Service Group—Edit Service Group appears.
Protocol Group—Edit Protocol Group window appears.
Step3 Enter the necessary changes.
Step4 Click OK to save the configuration.
Note You can also click Delete to delete a service group. When you delete a service group, it is removed from
all service groups where it is used. If a service group is used in an access rule, do not remove it. A service
group used in an access rule cannot be made empty.
The Configuration> Global Objects > Service Groups > Add/Edit Service Group dialog box lets you
assign services to a service group. This dialog box name matches the type of service group you are
adding; for example, if you are adding a TCP service group, the Add/Edit TCP Service Group dialog box
is shown.
Fields
Group Name—Enter the group name, up to 64 characters in length. The name must be unique for all
object groups. A service group name cannot share a name with a network object group.
Description—Enter a description of this service group, up to 200 characters in length.
Existing Service/Service Group—Identifies items that can be added to the service group. Choose
from already defined service groups, or choose from a list of commonly used port, type, or protocol
names.
Service Groups—The title of this table depends on the type of service group you are adding. It
includes the defined service groups.
Predefined—Lists the predefined ports, types, or protocols.
Create new member—Lets you create a new service group member.