Fortinet FortiGate 60R, Installation And Configuration Manual

Page: 151 / 270

Firewall configuration Services
FortiGate-60R Installation and Configuration Guide
151
Figure 8: Adding an internal address group
Services
Use services to control the types of communication accepted or denied by the firewall.
You can add any of the predefined services to a policy. You can also create your own
custom services and add services to service groups.
This section describes:
• Predefined services
• Providing access to custom services
• Grouping services
Predefined services
The FortiGate predefined firewall services are listed in Table 5 . You can add these
services to any policy.
Table 5: FortiGate predefined services
Service name Description Protocol Port
ANY Match connections on any port. A connection
that uses any of the predefined services is
allowed through the firewall.
all all
GRE Generic Routing Encapsulation. A protocol that
allows an arbitrary network protocol to be
transmitted over any other arbitrary network
protocol, by encapsulating the packets of the
protocol within GRE packets.
47