Service objects

Service objects define specific ports for specific servers. This helps to ensure only required traffic is permitted to access the subnets of the servers hosting the service. If there are multiple services, it is recommended to put them into a group for ease of configuration. For example, if Engineering requires an additional service, you can define this new service, and add it to the existing group to update any references to Engineering servers in your policies.

Complete the following steps to set up service objects:

1. On FortiGate, create service objects. See Creating service objects.
2. On FortiGate, create service groups to contain the service objects. See Creating service groups.
3. On a Network Policy Server, configure a RADIUS client for the FortiGate. See Configuring the NPS server RADIUS client.