set service-protocol

Description

Configures an existing non-TCP/UDP service object.

Syntax

set service-protocol <name> [ name <name>] [ ip-protocol <ip-protocol> ] [ comments <comments> ] [ session-timeout <session-timeout> ] [ accept-replies

<accept-replies> ] [ sync-connections-on-cluster <sync-connections-on-cluster>

] [ match <match> ] [ aggressive-aging-enable <aggressive-aging-enable> ] [ aggressive-aging-timeout <aggressive-aging-timeout> ]

Parameters

Parameter

Description

accept-replies

Specifies if service replies are to be accepted

aggressive-aging- enable

Enable to manage the connections table capacity and memory consumption of the firewall to increase durability and stability

aggressive-aging-timeout

Time (in seconds) before the aggressive aging times out

comments

Comments and explanation about the service

Type: A string that contains less than 257 characters, of this set: 0-9, a-z or , . - : () @

ip-protocol

IP Protocol number

Type: A number with no fractional part (integer)

match

INSPECT expression that searches for a pattern in a packet, only relevant for services of type 'other'

name

Service name

Type: String

session-timeout

Time (in seconds) before the session times out

sync-connections-on- cluster

Enables state-synchronized High Availability or Load Sharingon a ClusterXL or OPSEC-certified cluster. Of the services allowed by the Rule Base, only those with synchronize connections on cluster will be synchronized as they pass through the cluster

Example

set service-protocol TEXT name TEXT ip-protocol 50 comments "This is a comment." session-timeout 15 accept-replies true sync-connections-on-cluster true match TEXT aggressive-aging-enable true aggressive-aging-timeout 15