Fortinet FortiGate FortiGate-1000, Руководство администратора

Страница: 205 / 392

Firewall Service
FortiGate-1000 Administration Guide 01-28006-0009-20041105
205
This section describes:
• Predefined service list
• Custom service list
• Custom service options
• Configuring custom services
• Service group list
• Service group options
• Configuring service groups
Predefined service list
Figure 88: Predefined service list
The predefined services list has the following icons and features.
Table 21 lists the FortiGate predefined firewall services. You can add these services to
any policy.
Name The name of the predefined services.
Detail The protocol for each predefined service.
Table 21: FortiGate predefined services
Service name Description Protocol Port
ANY Match connections on any port. A connection
that uses any of the predefined services is
allowed through the firewall.
all all
GRE Generic Routing Encapsulation. A protocol
that allows an arbitrary network protocol to be
transmitted over any other arbitrary network
protocol, by encapsulating the packets of the
protocol within GRE packets.
47
AH Authentication Header. AH provides source
host authentication and data integrity, but not
secrecy. This protocol is used for
authentication by IPSec remote gateways set
to aggressive mode.
51