Adding web services

Filter rules may apply to hosts with public IP addresses that have been classified under one of the web services (previously known as "reputation groups") defined on SNS firewalls.

To benefit from updates of web services on SNS firewalls without having to update your version of the SMC server, you can manually add new web services.

To add new web services, you must know the names of the services used on SNS firewalls, and add them to the file /data/config/smc-webservices.local, as shown below.

  1. On an updated SNS firewall, run the command config object list type=iprep.
  2. The name of the web service to be used to add it to the SMC server is the value of the "name" field, e.g. "skypeforbusiness" as in the image below.CLI window of the firewall
  1. Log in to the SMC server via the console of your hypervisor or in SSH.
  2. Add new web service names in the file /data/config/smc-webservices.local by following the syntax below:
    webservice1
    webservice2
    webservice3
  3. In the server's web interface, refresh the display to view the new web services in the Source and Destination menus in filter rules:
    Source menu of a filter rule