Cisco
Login
Search
Platform GCP
Activity Upgrade

Configure Devices And Services Manage Objects Manage Objects Service Objects Create and Edit ASA Service Objects

Last updated: Aug 08, 2025

Create and Edit ASA Service Objects

In a service object, you can specify a single protocol and assign it to a source port, destination port, or both source and destination ports.

Procedure

1

In the Security Cloud Control platform menu, choose Products > Firewall.
2

In the left pane, click Manage > Objects.

3

Click Create Object > ASA > Service.

4

Enter an object name.
5

Select Create a service object

6

Click the Service Type button and select the protocol for which you want to make an object.

  • For TCP, UDP, and TCP-UDP service types, enter a source port, destination port, or both:

    • The source port identifier allows you to match traffic originating from a particular numbered port. In the source port identifier, select an operator: equal to, range, less than, greater than, or not equal to and provide the appropriate port number or range.

    • The destination port identifier allows you to match traffic arriving at a particular numbered port. In the destination port identifier, select an operator: equal to, range, less than, greater than, or not equal to and provide the appropriate port number or range.

  • For Protocol service types, enter a protocol number between 0-255, or a well-known name, such as ip, tcp, udp, gre, and so forth.
7

Click Add.

Examples

  • A service object that identifies incoming FTP traffic would be one with a TCP Service type and a destination port range of 21.

  • A service object that identifies outgoing DNS and DNS over TCP traffic would be one with a tcp-udb service type and a source port equal to 53.

Previous topic Service Objects Next topic Create an ASA Service Group