FortiGate Administration Guide - FirewallShop.com

Viewing the predefined service list
Firewall Service
Table 32 lists the FortiGate predefined firewall services. Add these services to any
policy.
Table 32: FortiGate predefined services
Service name Description Protocol Port
AH
Authentication Header. AH provides
source host authentication and data
integrity, but not secrecy. This protocol is
used for authentication by IPSec remote
gateways set to aggressive mode.
51
ANY
Match connections on any port. A
connection using any of the predefined
services is allowed through the firewall.
AOL AOL instant messenger protocol. TCP 5190-5194
BGP
Border Gateway Protocol routing protocol. TCP 179
BGP is an interior/exterior routing protocol.
DCE-RPC DCE/RPC stands for Distributed
TCP 135
Computing Environment / Remote
Procedure Calls.
It is a means to call procedures from one
application in another application, without
having to know about what computer the
other application is running on.
UDP 135
DHCP
DNS
ESP
Dynamic Host Configuration Protocol
(DHCP) allocates network addresses and
delivers configuration parameters from
DHCP servers to hosts.
Domain name service for translating
domain names into IP addresses.
Encapsulating Security Payload. This
service is used by manual key and
AutoIKE VPN tunnels for communicating
encrypted data. AutoIKE key VPN tunnels
use ESP after establishing the tunnel
using IKE.
all
all
UDP 53
TCP 53
UDP 53
FINGER A network service providing information TCP 79
about users.
FTP FTP service for transferring files. TCP 21
FTP_GET FTP service for uploading files. TCP 21
FTP_PUT FTP service for downloading files TCP 21
GOPHER
GRE
H323
Gopher communication service. Gopher
organizes and displays Internet server
contents as a hierarchically structured list
of files.
Generic Routing Encapsulation. A protocol
allowing an arbitrary network protocol to
be transmitted over any other arbitrary
network protocol, by encapsulating the
packets of the protocol within GRE
packets.
H.323 multimedia protocol. H.323 is a
standard approved by the International
Telecommunication Union (ITU) defining
how audiovisual conferencing data is
transmitted across networks. For more
information see the FortiGate Support for
H.323 Technical Note.
50
TCP 70
47
TCP 1720, 1503
FortiGate Version 3.0 MR5 Administration Guide
294 01-30005-0203-20070830