Fortinet FortiGate 1000A, Руководство администратора

Страница: 224 / 412

224
01-28011-0254-20051115 Fortinet Inc.
Service Firewall
To add a custom ICMP service
1 Go to Firewall > Service > Custom .
2 Select Create New.
3 Enter a name for the new custom ICMP service.
4 Select ICMP as the Protocol Type.
5 Enter the ICMP type number and code number for the service.
6 Select OK.
You can now add this custom service to a policy.
To add a custom IP service
1 Go to Firewall > Service > Custom .
2 Select Create New.
3 Enter a name for the new custom IP service.
4 Select IP as the Protocol Type.
5 Enter the IP protocol number for the service.
6 Select OK.
You can now add this custom service to a policy.
To delete a custom service
1 Go to Firewall > Service > Custom .
2 Select the Delete icon beside the service you want to delete.
3 Select OK.
To edit a custom service
1 Go to Firewall > Service > Custom .
2 Select the Edit icon beside the service you want to edit.
3 Modify the custom service as required.
4 Select OK.
Service group list
To make it easier to add policies, you can create groups of services and then add one
policy to allow or block access for all the services in the group. A service group can
contain predefined services and custom services in any combination. You cannot add
service groups to another service group.
Note: To change the custom service name you must delete the service and add it with a new
name.