Create a Service

Create a service that you can include in an application list. Use services and service lists to build rules in a firewall policy.

A service is identified by a signature based on the ports it uses. Layer 4 inspection is used to identify matching services. Each policy can have a maximum of 1,900 services.

You can create services one at a time using the following instructions, or you can import many at once using a .json file. See Import Firewall Policy Components more information.

After you create services, you can add them to a service list in the policy. You can't add services from one policy to a list in a different policy. The service must be created within each policy you want to use it in.

1. On the navigation menu, select Identity & Security. Go to Firewalls, select Network Firewall Policies.
2. Select the policy.
3. Under Policy resources, select Services.
4. Select Create service.
5. Enter the information for the service:
  
  Name: Enter a name.
  
  Protocol: Select TCP or UDP as the protocol to define the service.
  
  Port range: Enter a port number or range. For example, "80-8080", "22-22".
6. Select Create service.
Use the network-firewall service create command and required parameters to create a service:
```
oci network-firewall service create 
--network-firewall-policy-id network firewall policy OCID --compartment-id compartment OCID[OPTIONS]
```
For a complete list of parameters and values for CLI commands, see the CLI Command Reference.
Run the CreateService operation to create a service.

Oracle Cloud Infrastructure Documentation

Create a Service