Introduction to Service Book

Service is information stream designed with protocol standards. Service has some specific distinguishing features, like corresponding protocol, port number, etc. For example, the FTP service uses TCP protocol, and its port number is 21. Service is an essential element for the configuration of multiple system modules including policy rules, NAT rules, QoS rules, etc.

System ships with multiple predefined services/service groups and application/application groups. Besides, you can also customize user-defined services/service groups or application groups as needed. All these service/service groups and application/application groups are stored in and managed by system service book.

Predefined Service/Service Group

System ships with multiple predefined services, and identifies the corresponding application types based on the service ports. The supported predefined services may vary from different security device models. Predefined service groups contain related predefined services to facilitate user configuration.

User-defined Service

Except for the above predefined services, you can also create your own user-defined services easily. The parameters that will be specified for the user-defined service entries include:

• Name
• Protocol type
• The source and destination port for TCP or UDP service, and the type and code value for ICMP service.
• Timeout
• Application type

User-defined Service Group

You can organize some services together to form a service group, and apply the service group to policies directly to facilitate management. The service group has the following features:

• Each service of the service book can be used by one or more service groups.
• A service group can contain both predefined services and user-defined services.
• A service group can contain another service group. The service group supports up to 8 layers of nests.

The service group also has the following limitations:

• The name of a service and service group should not be identical.
• The service group being used by any policy cannot be deleted. To delete such a service group, you must first end its relationship with other modules.
• If a user-defined service is deleted from the service group, the service will also be deleted from all the service groups using it.

Predefined Application/Application Group

System ships with multiple predefined applications, and identifies the corresponding application types based on the contents and behaviors. The supported predefined applications may vary from different security device models. Predefined application groups contain related predefined applications to facilitate user configuration. When the predefined application signature database is updated, the corresponding application groups will be updated as well.

User-defined Application Group

You can organize some applications together to form an application group, and apply the application group to policies directly to facilitate management. The application group has the following features:

• Each application of the application book can be used by one or more application groups.
• An application group can contain another application group. The application group supports up to 8 layers of nests.

The application group also has the following limitations:

• The name of an application and application group should not be identical.
• The application group being referenced by any policy cannot be deleted. To delete such an application group, you must first end its relationship with other modules.