FortiGate Administration Guide - FirewallShop.com

Configuring custom services
Firewall Service
Figure 182:New Custom Service - TCP/UDP
Name
Protocol Type
Protocol
Source Port
Enter a name for the custom service.
To add a custom ICMP service
1 Go to Firewall > Service > Custom.
2 Set Protocol Type to ICMP.
3 Configure the following.
Select the protocol type of the custom service: TCP/UDP.
Select TCP or UDP as the protocol of the port range being added.
Specify the Source Port number range for the service by entering the
low and high port numbers. If the service uses one port number, enter
this number in both the low and high fields. The default values allow the
use of any source port.
Destination Port Specify the Destination Port number range for the service by entering
the low and high port numbers. If the service uses one port number,
enter this number in both the low and high fields.
Add
Delete Icon
If the custom service being created requires more than one port range,
select Add to allow more source and destination ranges.
Select to remove the entry from the list.
Figure 183:New Custom Service - ICMP
Name
Protocol Type
Type
Code
Enter the name of the ICMP custom service.
Select the protocol type of the service being added: ICMP.
Enter the ICMP type number for the service.
Enter the ICMP code number for the service if required.
To add a custom IP service
1 Go to Firewall > Service > Custom.
2 Set Protocol Type to IP.
3 Configure the following.
FortiGate Version 3.0 MR5 Administration Guide
298 01-30005-0203-20070830