Configuring Services for Custom Firewall Exceptions

You can create services with the Policies, Services, and Subscribers CLI or the Policies, Services, and Subscribers subtasks in the C-Web interface. You can create services that take actions such as those listed in Table 12.

To configure a service for a custom firewall exception:

1. Create a service for each traffic action listed in Table 12. Specify a name that provides meaningful information to a user, including information about the forwarding treatment for traffic. The name appears in the Firewall Action field on the Firewall tab in Enterprise Manager Portal.
2. Specify the following values for the service:
   • Category—customFWRule (the service’s LDAP attribute sspCategory)
   • Policy Group—Policy group that supports custom firewall exceptions
3. Specify substitutions for the service.