You can add services to the firewall both when it is created and later, when the firewall already exists.
You can add a service to an allowing rule group only if it is not added to a prohibiting rule group, and vice versa.
A service can be simultaneously added to several groups of rules of the same type (allowing or denying).
When creating a firewall:
When editing an existing firewall:
You can add a service to the firewall from the service page itself.
To exclude a service from the firewall: