To simplify the creation of security policies, you can combine services that have the same security settings into service groups. To define new services, refer to Objects > Services.
The following table describes the service group settings.
Service Group Setting Description
Name Enter the service group name (up to 63 characters). This name appears in the services list when defining security policies. The name is case-sensitive and must be unique. Use only letters, numbers, spaces, hyphens, and underscores.
Shared Select this option if you want the service group to be available to: Every virtual system (vsys) on a multi-vsys firewall. If you clear this selection, the service group will be available only to the Virtual System selected in the Objects tab. Every device group on Panorama. If you clear this selection, the service group will be available only to the Device Group selected in the Objects tab.
Disable override ( Panorama only ) Select this option if you want to prevent administrators from creating local copies of the service group in descendant device groups by overriding its inherited values. This selection is cleared by default, which means overriding is enabled.
Service Click Add to add services to the group. Select from the drop-down or click Service at the bottom of the drop-down and specify the settings. Refer to Objects > Services for a description of the settings.

Related Documentation