Fortinet black logo

Administration Guide

Create or edit a service group

Create or edit a service group

You can organize multiple services into a service group to simplify your policy list. For example, instead of having five identical policies for five different but related services, you can combine the five services into a single service group that is used by a single policy.

Service groups cannot contain other service groups.

Configure a service group using the following CLI commands:

config firewall service group

edit <name>

set member // Address group member.

set explicit-proxy // Enable or disable the explicit web proxy service group.

set comment // Comment.

set color // GUI icon color.

next

end

Service groups are listed in the Firewall Group category.

Select Create New > Service Group to open the New Service Group window.

To open the Edit Service Group window, select a firewall group and then click Edit.

Configure the following settings in the New Service Group window or the Edit Service Group window and then click OK:

Name

Enter a name for the service group.

Comments

Optionally, enter a description of the service group.

Color

Select Change to choose a color for the icon.

Type

Select the type of service group, either Firewall or Explicit Proxy.

Members

Select the services to add to the service group.

API Preview

The API Preview allows you to view all REST API requests being used by the page. You can make changes on the page that are reflected in the API request preview. This feature is not available if the user is logged in as an administrator that has read-only GUI permissions.

To use the API Preview:
  1. Click API Preview. The API Preview pane opens, and the values for the fields are visible (data). If a new object is being created, the POST request is shown.
  2. Enable Show modified changes only to show the modified changes instead of the full configuration in the preview.
  3. Click Copy to Clipboard to copy the JSON code shown on the preview screen to the clipboard.
  4. Click Close to leave the preview.

Create or edit a service group

You can organize multiple services into a service group to simplify your policy list. For example, instead of having five identical policies for five different but related services, you can combine the five services into a single service group that is used by a single policy.

Service groups cannot contain other service groups.

Configure a service group using the following CLI commands:

config firewall service group

edit <name>

set member // Address group member.

set explicit-proxy // Enable or disable the explicit web proxy service group.

set comment // Comment.

set color // GUI icon color.

next

end

Service groups are listed in the Firewall Group category.

Select Create New > Service Group to open the New Service Group window.

To open the Edit Service Group window, select a firewall group and then click Edit.

Configure the following settings in the New Service Group window or the Edit Service Group window and then click OK:

Name

Enter a name for the service group.

Comments

Optionally, enter a description of the service group.

Color

Select Change to choose a color for the icon.

Type

Select the type of service group, either Firewall or Explicit Proxy.

Members

Select the services to add to the service group.

API Preview

The API Preview allows you to view all REST API requests being used by the page. You can make changes on the page that are reflected in the API request preview. This feature is not available if the user is logged in as an administrator that has read-only GUI permissions.

To use the API Preview:
  1. Click API Preview. The API Preview pane opens, and the values for the fields are visible (data). If a new object is being created, the POST request is shown.
  2. Enable Show modified changes only to show the modified changes instead of the full configuration in the preview.
  3. Click Copy to Clipboard to copy the JSON code shown on the preview screen to the clipboard.
  4. Click Close to leave the preview.