Home >Documents >Security Tutorial v3.0.0 > 2. Operation > 2.2. Managed Firewall / Managed UTM Version2 > 2.2.4. Setting up a Object >2.2.4.5. Service Object

2.2.4.5. Service Object

Following describe how to set up the service Object being utilized at a Firewall Policy.

Service Object is set from Device Management .

2.2.4.5.1. Default Value

By default, the frequently utilizing Service Object has been defined in advance. You are allowed to edit these default service object for usage.

Of course, you can define the service object depending on the customer environment.

Default Service Object

When you click [ Service Object ] by default, the default service object will display.

2.2.4.5.2. Setting Items : Service Object

Following are setting items of a Service Object.

Items	Values	Descriptions
Service Name	（Half-width alphabetic characters & half-width numbers)	Input the name of a Service Object. You can NOT utilize any two-byte characters, such as Japanese, and the following signs as below: < > ( ) # ' " , and spaces (blank)
Protocol Type	[ICMP], [IP], [UDP] or [TCP]	Select a service protocol from the following items: [ICMP], [IP], [UDP] or [TCP]
Comment	（Half-width alphabetic characters & half-width numbers)	Fill in your comment if you like. Fill in your comment by using less than 225 letters. You can NOT utilize any two-bytes characters, such as Japanese.

Following are additional setting items when your setting up [ ICMP ] as [ Protocol Type ] .

Items	Values	Descriptions
Type	(with half-width numbers)	Input an ICMP Type, if you want to specify it. You can define a protocol as [ Any ], if you would like to stay one blank (space).
Code	(with half-width numbers)	Input an ICMP code, if you would like to specify it. You can define a protocol as [ Any ], if you would like to stay one blank (space).

Following are additional setting items when you set up a Protocol Type as [ IP ].

Items	Values	Descriptions
Protocol Number	(with half-width numbers)	Input the IP Protocol Number, if you would like to specify it. You can define a protocol as [ Any ], if you would like to stay one blank (space).

The additional setting items for the service when the Protocol Type is [TCP] are as follows.

Items	Values	Descriptions
Source Port	(with half-width numbers)	Input the destination port number, if you would like to specify it. You can define a protocol as [ Any ], if you would like to stay one blank (space).
Destination Port	(with half-width numbers)	Input the destination port number, if you would like to specify one. Input of the destination port number is absolutely needed. Therefore, to allow as Any, input "1-65535".
Session-TTL	300-86400 [seconds]	Enter if you want to set the session retention time. The default value is 3600 seconds.

The additional setting items for the service when the Protocol Type is [UDP] are as follows.

Items	Values	Descriptions
Source Port	(with half-width numbers)	Input the destination port number, if you would like to specify it. You can define a protocol as [ Any ], if you would like to stay one blank (space).
Destination Port	(with half-width numbers)	Input the destination port number, if you would like to specify one. Input of the destination port number is absolutely needed. Therefore, to allow as Any, input "1-65535".
Session-TTL	1-21600 [seconds]	Enter if you want to set the session retention time. The default value is 180 seconds.

2.2.4.5.3. Adding Service Object

1. Click the Routing from the left-side Object screen.

   Service ‣ Service Object

   Click [ Add ] at Service Object of the right-side screen.

   

2. Click [ Save ] after you input the setting value.

   Input Setting Items : Service Object to the setting value.

   

3. Apply configuration to the device by clicking [Apply configuration].

   

Note

• Please be sure to save the object [Save changes] before creating the firewall policy.

2.2.4.5.4. How to Change Service Object (Edit / Duplicate / Remove)

1. Click the Routing from the left-side Object screen.

   Service ‣ Service Object

   Select the target changed line at Service Object screen of the right-side. Click an operation button you need.

   

   
   

   Following describes respective buttons of Service Object .

   Buttons	Descriptions
   Edit	Modify the value of Service Object that has already been set.
   Duplicate	After duplicating the existing Service Object , the object setting screen will open with the same value. Make sure to change Service Name. This is useful for you to define another Service Object with the same value.
   Remove	Delete the selected Service Object.

   
   

   When you deleting one , the confirmation message will display. Please click [OK] to finally execute its deletion.

   

   NOTE: You can not remove any object which has been utilizing at a Firewall Policy.

2. Apply configuration to the device by clicking [Apply configuration].

   

Note

• Please be sure to save the object [Save changes] before creating the firewall policy.

---

2.2.4.4. Source NAT

2.2.4.6. Service Group