First, create service groups that include specific source ports, destination ports, and protocols. Next, take certain actions on these groups when creating security rules. For example, if you want some users or user groups to have no access to websites beyond the firewall, configure a service group that identifies protocol TCP and source ports 80 and 443, add this group and an identity group to a security rule, and choose Deny to block all traffic sent from ports 80 and 443 for the specified users or user groups.
Use a service object group to organize multiple service groups into a group that serves a specific purpose.
The Service Groups page displays the following information for all configured service groups:
- NAME: The name of the service group.
- SERVICE PARAMETERS: The number of service parameters associated with the service group.
You can do the following on the Service Groups page:
- View the service parameters and other details of a group: Select the group and view its details in the panel on the right or by clicking
.
- Modify a service group: Click
> Edit, or select the checkbox for the group and click the Edit button.
- Remove a service group: Click
- Search for groups by keyword: In the Search text box, enter the keyword that you want to search on. The application displays the list of groups that match the keyword.
- Filter the groups by name: Click
.
In this section, you will learn how to perform the following actions: