Fortinet 50A Adding custom Icmp services, Adding custom IP services, Grouping services, 153

Firewall configuration Services

Adding custom ICMP services

Add a custom ICMP service if you need to create a policy for a service that is not in the predefined service list.

To add a custom ICMP service

1Go to Firewall > Service > Custom.

2Select ICMP from the Protocol list.

3Select New.

4Type a Name for the new custom ICMP service. This name appears in the service list used when you add a policy.

The name can contain numbers (0-9), uppercase and lowercase letters (A-Z, a-z), and the special characters - and _. Other special characters and spaces are not allowed.

5Specify the ICMP type and code for the service.

6Select OK to add the custom service.

You can now add this custom service to a policy.

Adding custom IP services

Add a custom IP service if you need to create a policy for a service that is not in the predefined service list.

To add a custom IP service

1Go to Firewall > Service > Custom.

2Select IP from the Protocol list.

3Select New.

4Type a Name for the new custom IP service. This name appears in the service list used when you add a policy.

The name can contain numbers (0-9), uppercase and lowercase letters (A-Z, a-z), and the special characters - and _. Other special characters and spaces are not allowed.

5Specify the IP protocol number for the service.

6Select OK to add the custom service.

You can now add this custom service to a policy.

Grouping services

To make it easier to add policies, you can create groups of services and then add one policy to provide or block access for all the services in the group. A service group can contain predefined services and custom services in any combination. You cannot add service groups to another service group.

To group services

1Go to Firewall > Service > Group.

2Select New.

FortiGate-50A Installation and Configuration Guide 153