FortiOS 5.4 Online Help Link FortiOS 5.2 Online Help Link FortiOS 5.0 Online Help Link FortiOS 4.3 Online Help Link

Home > Online Help

> Chapter 9 - Firewall > Building firewall objects and policies > Example: Service Group

Example: Service group

The company provide email services for a number of different companies. They have a standard list of services that they like to keep open to their customer's email servers, including webmail services. The company prides itself on getting a customer up and going the same day so they use standard templates for everything to make sure nothing is forgotten including the services that are available.

The services include:

  • IMAP
  • IMAPS
  • POP3
  • POP3S
  • SMTP
  • SMTPS
  • HTTP
  • HTTPS
  • Email_Admin - a custom service for administration of the servers
  1. Go to Policy & Objects > Objects > Services and select Create New > Service Group.
  2. Fill out the fields with the following information:
Group Name Cust_Email_Serv_Template
Comments (Optional)
Type Firewall
Members (click to add...choose from the drop down)

•  IMAP
•  IMAPS
•  POP3
•  POP3S
•  SMTP
•  SMTPS
•  HTTP
•  HTTPS
•  Email_Admin
  1. Select OK.
  2. Enter the following CLI command:

config firewall service group

edit Cust_Email_Serv_Template

set member “IMAP” “IMAPS” “POP3” “POP3S” “SMTP” “SMTPS” “HTTP” “HTTPS” “Email_Admin”

next

end

To verify that the category was added correctly:
  1. Go to Policy & Objects > Objects > Services. Check that the service group has been added to the services list and that it is correct.
  2. Enter the following CLI command:

config firewall service group

edit <the name of the service that you wish to verify>

show full-configuration