Services Group or Multi Port Service

[sf_cofc]

Hi. New to Fortigates

I am not used to being able to input multiple ports into a "Service". Is there any difference between creating a Service with ports 80 and 443 and creating a Service for each port and making a Service Group?

Cheers

scott

[ede_pfau]

hi,

and welcome to the forums.

For the 2 quoted services I don't think it makes a difference. But in general a service group is more flexible as you can include different protocols (e.g., PING/ICMP and TCP/HTTP).

Btw, HTTP and HTTPS are predefined, as some service groups are (depending on the version of FortiOS).

[Markus]

Hi Scott, In the past, I've done this with groups, but I came away because you haven't full insights about traffic and last use. At present I create policies for every service. There is a bit more to do, but have the benefit that you can see if a rule is no longer used. It depends of your need of course. Best, Markus