Skip to main content
sf_cofc
sf_cofc
New Member
February 22, 2018
Question

Services Group or Multi Port Service

  • February 22, 2018
  • 2 replies
  • 3285 views

Hi. New to Fortigates

I am not used to being able to input multiple ports into a "Service". Is there any difference between creating a Service with ports 80 and 443 and creating a Service for each port and making a Service Group?

Cheers

scott

    2 replies

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    February 22, 2018

    hi,

     

    and welcome to the forums.

    For the 2 quoted services I don't think it makes a difference. But in general a service group is more flexible as you can include different protocols (e.g., PING/ICMP and TCP/HTTP).

    Btw, HTTP and HTTPS are predefined, as some service groups are (depending on the version of FortiOS).

    Markus
    Markus
    New Member
    February 28, 2018

    Hi Scott, In the past, I've done this with groups, but I came away because you haven't full insights about traffic and last use. At present I create policies for every service. There is a bit more to do, but have the benefit that you can see if a rule is no longer used. It depends of your need of course. Best, Markus

    Terms & ConditionsAccessibility statement