FortiGate Installation and Configuration Guide

Firewall configuration Services
FortiGate-50A Installation and Configuration Guide 149
5 To remove addresses from the address group, select an address from the Members
list and select the left arrow to remove it from the group.
6 Select OK to add the address group.
Figure 8: Adding an internal address group
Services
Use services to determine the types of communication accepted or denied by the
firewall. You can add any of the predefined services to a policy. You can also create
custom services and add services to service groups.
This section describes:
• Predefined services
• Adding custom TCP and UDP services
• Adding custom ICMP services
• Adding custom IP services
• Grouping services
Predefined services
The FortiGate predefined firewall services are listed in Table 18. You can add these
services to any policy.
Table 18: FortiGate predefined services
Service name Description Protocol Port
ANY Match connections on any port. A connection
that uses any of the predefined services is
allowed through the firewall.
all all