Create a Service List

Create a list of services you can use to build rules in a firewall policy.

Create service lists to allow or deny traffic to a group of services. A service is identified by a signature based on the ports it uses. Layer 4 inspection is used to identify matching services. You can create a maximum of 2,000 service lists in a policy. A service list can contain a maximum of 200 services.

To import multiple service lists using a .json file, see Import Firewall Policy Components.

    1. Open the navigation menu, and select Identity & Security. Under Firewalls, select Network Firewall policies.
    2. Select that compartment that contains the policy that you want to create the application in.
    3. Select the policy.
    4. On the details page, select the Services tab, and then select Create service list from the Service lists table.
    5. Select Create service list.
    6. Enter a name for the service list. Avoid entering confidential information.
    7. (Optional) If you haven't created any services to use in the list, select the Actions menu (three dots) and then select Create service. Follow the instructions in Create a Service to create some services to use in the list.
    8. Select the Select Services button.
    9. In the Select services list, select the checkboxes next to the services you want to include in the service list. Then select Save selection.
    10. (Optional) If you want to remove a service from the list, select its checkbox, select the Actions menu (three dots), and then select Remove from selected.
    11. Select Create service list.
  • Use the network-firewall service-list create command and required parameters to create a service:

    oci network-firewall service-list create 
    --network-firewall-policy-id network firewall policy OCID --compartment-id compartment OCID
    --total-services integer--services '["service_1", "service_2"]'[OPTIONS]

    For a complete list of parameters and values for CLI commands, see the CLI Command Reference.

  • Run the CreateServiceList operation to create a service list.