topic Re: Deny Multiple Services in a Single Rule in General Topics

Deny Multiple Services in a Single Rule

RemoteUser — Wed, 05 Nov 2025 18:04:54 GMT

Hi Mates,

I’d like to ask if it’s possible to deny more than one service within a single rule. (Negated cell)
For example, let’s say I want to allow all traffic except ICMP and HTTPS — can this be configured in one rule, or do I need to create separate rules for each service I want to block?

Thanks in advance!

Re: Deny Multiple Services in a Single Rule

PhoneBoy — Wed, 05 Nov 2025 18:19:03 GMT

In Access Control rules, yes.
Don't believe the NAT policy permits this, however.

Re: Deny Multiple Services in a Single Rule

the_rock — Wed, 05 Nov 2025 18:33:45 GMT

Hey brother,

I verified what Phoneboy said and it is 100% true. You can easily do this with regular access control policy, but nat does NOT allow you, it always defaults to last service added.

Re: Deny Multiple Services in a Single Rule

RemoteUser — Wed, 05 Nov 2025 18:34:43 GMT

Thanks a lot to both!!! As Always!!!

Re: Deny Multiple Services in a Single Rule

the_rock — Wed, 05 Nov 2025 18:37:26 GMT

FYFOC...aka for you, free of charge 😉

Re: Deny Multiple Services in a Single Rule

Tal_Paz-Fridman — Wed, 05 Nov 2025 18:50:18 GMT

If you have a large rulebase, I recommend using a Services Group with clearly defined properties. This helps keep the rulebase cleaner and also allows you to make a single-click change that applies to all rules using the same Services Group.

Re: Deny Multiple Services in a Single Rule

the_rock — Wed, 05 Nov 2025 18:53:35 GMT

I also recommend deleting anything unused in object explorer...based on my testing, I found it to be 100% accurate.