User guide

Chapter 8: Configuring Filtered Services
100 WatchGuard Firebox System
Creating a new service
In addition to built-in filtered services provided by WatchGuard, you can
create a new service or customize an existing service. You might need to
do this when a new product appears on the market that you would like to
run behind your firewall. Remember, however, that every new service
you configure and add to your firewall potentially increases your
vulnerability to hackers.
From Policy Manager:
1 On the Policy Manager toolbar, click the Add Services
icon (shown at right).
The Services dialog box appears.
2 Click New.
The New Service dialog box appears.
3 In the Name text box, type the name of the service.
This name must be unique and not already listed in the Services dialog box.
4 In the Description text box, type a description of the service.
This description appears in the Details section of the New Services dialog box when
you select the service.
5 To begin setting the port used for this service, click Add.
The Add Port dialog box appears.
6 From the Protocol drop list, select the protocol used for this new
service. The following options are available:
TCP
TCP-based services
UDP
UDP-based services
HTTP
Services examined by the HTTP proxy
IP
Filter a service using something other than TCP (IP protocol 6) or
UDP (IP protocol 17) for the next-level protocol. Select IP to create
a protocol number service.
7 In the Client Port text box, select an option from the drop list. Note
that you can select a range of port numbers. The following options are
available: