services (http,https)

[billpipes]

Please excuse my ignorance, new to FW support and PAN.  What is the criteria for services, why is there only 2 http/https?

thx,

[sraghunandan · Accepted solution]

These are pre defined ones , you can navigate to objects-services and create new ones.

[craymond]

Services are used for anything that is not already defined as an application by Palo Alto. We have had to use them for many custom in house Apps. As sraghunandan said, http and https are defined by Palo Alto, and are used in NAT translation Rules.

An Application is the preferred method for defining a policy, as the application is defined by signatures, not just ports.

[mikand]

Service is simply what others call a port.

[craymond]

As mikand said, they are just ports, and the criteria that is probably best practice is only use them when you can't use an application.

[mikand]

Speaking of ports, what about srcport - how to define that in a security rule in PA?

[sraghunandan]

You can define source ports under services.

[mikand]

Doh! there it was, thanks!

Page 232 in the PA-5.0_Administrators_Guide.pdf (for further references).

Is it possible to have the srcport being used displayed in the security policy list?

[ExclusiveNetworksGermany]

No, like all columns in Security Poliy

you can only name it i a way that i logical for you.

Like:

Service-Name: SRC-1026-TCP-25

Destination Port TCP-25

Source Port: 1026

Cheers

Marco

[mikand]

hmm, I guess that will be a doable workaround - thanks again!

[billpipes]

Thanks for the fast replys.