Network Services are leveraged in Network and Hybrid policies to define network resources that should be allowed or denied via the policy. These are installed via ACL or firewall rules in the network device depending upon its capabilities.